| |
| |||||||
Log-Analyse und Auswertung: (save , on) Links im Internet & Chrome funktioniert nicht richtigWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
23.07.2014, 13:38
| #16 |
 |  (save , on) Links im Internet & Chrome funktioniert nicht richtig Hab Avira: Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Mittwoch, 23. Juli 2014 09:46
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 7 Home Premium
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : SYSTEM
Computername : MirjamZanetti
Versionsinformationen:
BUILD.DAT : 14.0.5.464 91868 Bytes 02.07.2014 13:06:00
AVSCAN.EXE : 14.0.5.396 1042512 Bytes 02.07.2014 11:06:43
AVSCANRC.DLL : 14.0.5.364 62544 Bytes 02.07.2014 11:06:43
LUKE.DLL : 14.0.5.336 57936 Bytes 02.07.2014 11:06:46
AVSCPLR.DLL : 14.0.5.376 89680 Bytes 02.07.2014 11:06:43
AVREG.DLL : 14.0.5.356 261200 Bytes 02.07.2014 11:06:43
avlode.dll : 14.0.5.396 588368 Bytes 02.07.2014 11:06:42
avlode.rdf : 14.0.4.42 65114 Bytes 19.07.2014 17:26:05
XBV00008.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00009.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00010.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00011.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00012.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00013.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00014.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00015.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00016.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00017.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00018.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00019.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00020.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00021.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00022.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00023.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00024.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00025.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00026.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00027.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00028.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00029.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00030.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00031.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00032.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00033.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00034.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00035.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00036.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00037.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00038.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00039.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00040.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00041.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00163.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:22
XBV00164.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:22
XBV00165.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:22
XBV00166.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:22
XBV00167.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:22
XBV00168.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:22
XBV00169.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:22
XBV00170.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:22
XBV00171.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00172.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00173.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00174.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00175.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00176.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00177.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00178.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00179.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00180.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00181.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00182.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00183.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:23
XBV00184.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00185.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00186.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00187.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00188.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00189.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00190.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00191.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00192.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00193.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00194.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00195.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00196.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00197.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00198.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00199.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00200.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00201.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00202.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00203.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00204.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00205.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00206.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00207.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00208.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00209.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00210.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00211.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00212.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00213.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00214.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00215.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00216.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00217.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00218.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00219.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00220.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00221.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00222.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00223.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00224.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00225.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00226.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00227.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00228.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00229.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00230.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00231.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00232.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00233.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00234.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00235.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00236.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00237.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00238.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00239.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00240.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00241.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00242.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00243.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00244.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00245.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00246.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00247.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00248.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00249.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00250.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00251.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00252.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:29
XBV00253.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:29
XBV00254.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:29
XBV00255.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:29
XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 11:06:47
XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 11:06:47
XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 11:06:47
XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 11:06:47
XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 11:06:47
XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 11:06:47
XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 11:06:47
XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 11:06:47
XBV00042.VDF : 8.11.153.142 710656 Bytes 06.06.2014 11:06:47
XBV00043.VDF : 8.11.155.44 1013760 Bytes 16.06.2014 11:06:47
XBV00044.VDF : 8.11.159.102 1662976 Bytes 08.07.2014 14:50:53
XBV00045.VDF : 8.11.159.104 13824 Bytes 08.07.2014 14:50:53
XBV00046.VDF : 8.11.159.108 13312 Bytes 08.07.2014 14:50:53
XBV00047.VDF : 8.11.159.112 30720 Bytes 09.07.2014 14:50:54
XBV00048.VDF : 8.11.159.114 6144 Bytes 09.07.2014 14:50:54
XBV00049.VDF : 8.11.159.116 10240 Bytes 09.07.2014 14:50:54
XBV00050.VDF : 8.11.159.118 5632 Bytes 09.07.2014 14:50:54
XBV00051.VDF : 8.11.159.122 7168 Bytes 09.07.2014 14:50:54
XBV00052.VDF : 8.11.159.126 180736 Bytes 09.07.2014 14:50:58
XBV00053.VDF : 8.11.159.148 174080 Bytes 09.07.2014 14:51:04
XBV00054.VDF : 8.11.159.168 2560 Bytes 09.07.2014 14:51:04
XBV00055.VDF : 8.11.159.188 15360 Bytes 09.07.2014 14:51:05
XBV00056.VDF : 8.11.159.210 25600 Bytes 09.07.2014 14:51:05
XBV00057.VDF : 8.11.159.212 7168 Bytes 09.07.2014 14:51:05
XBV00058.VDF : 8.11.159.218 27648 Bytes 10.07.2014 14:51:06
XBV00059.VDF : 8.11.159.220 2048 Bytes 10.07.2014 14:51:06
XBV00060.VDF : 8.11.159.222 29696 Bytes 10.07.2014 14:51:07
XBV00061.VDF : 8.11.159.224 167936 Bytes 10.07.2014 14:51:13
XBV00062.VDF : 8.11.159.226 35328 Bytes 10.07.2014 14:51:14
XBV00063.VDF : 8.11.159.230 186368 Bytes 10.07.2014 20:49:51
XBV00064.VDF : 8.11.159.250 16896 Bytes 10.07.2014 20:49:51
XBV00065.VDF : 8.11.159.252 2048 Bytes 10.07.2014 20:49:51
XBV00066.VDF : 8.11.160.16 6144 Bytes 10.07.2014 20:49:51
XBV00067.VDF : 8.11.160.40 17408 Bytes 10.07.2014 10:12:52
XBV00068.VDF : 8.11.160.42 2048 Bytes 11.07.2014 10:12:54
XBV00069.VDF : 8.11.160.46 179200 Bytes 11.07.2014 10:12:55
XBV00070.VDF : 8.11.160.48 203264 Bytes 11.07.2014 14:37:58
XBV00071.VDF : 8.11.160.50 6144 Bytes 11.07.2014 14:37:58
XBV00072.VDF : 8.11.160.52 2048 Bytes 11.07.2014 14:37:58
XBV00073.VDF : 8.11.160.54 2048 Bytes 11.07.2014 14:37:58
XBV00074.VDF : 8.11.160.58 22016 Bytes 11.07.2014 14:37:58
XBV00075.VDF : 8.11.160.60 2048 Bytes 11.07.2014 14:37:58
XBV00076.VDF : 8.11.160.62 8192 Bytes 11.07.2014 14:37:58
XBV00077.VDF : 8.11.160.66 198656 Bytes 12.07.2014 14:38:00
XBV00078.VDF : 8.11.160.68 7168 Bytes 12.07.2014 14:38:00
XBV00079.VDF : 8.11.160.70 14848 Bytes 12.07.2014 14:38:00
XBV00080.VDF : 8.11.160.72 7168 Bytes 12.07.2014 14:38:00
XBV00081.VDF : 8.11.160.92 40448 Bytes 13.07.2014 14:37:40
XBV00082.VDF : 8.11.160.112 2048 Bytes 13.07.2014 14:37:40
XBV00083.VDF : 8.11.160.130 193024 Bytes 13.07.2014 14:37:42
XBV00084.VDF : 8.11.160.132 2048 Bytes 13.07.2014 14:37:42
XBV00085.VDF : 8.11.160.152 20480 Bytes 13.07.2014 20:37:37
XBV00086.VDF : 8.11.160.154 2048 Bytes 13.07.2014 20:37:37
XBV00087.VDF : 8.11.160.156 20992 Bytes 14.07.2014 08:37:41
XBV00088.VDF : 8.11.160.158 2560 Bytes 14.07.2014 08:37:41
XBV00089.VDF : 8.11.160.160 11264 Bytes 14.07.2014 14:37:42
XBV00090.VDF : 8.11.160.162 2560 Bytes 14.07.2014 14:37:42
XBV00091.VDF : 8.11.160.166 14336 Bytes 14.07.2014 14:37:42
XBV00092.VDF : 8.11.160.168 5120 Bytes 14.07.2014 14:37:42
XBV00093.VDF : 8.11.160.178 7168 Bytes 14.07.2014 20:37:41
XBV00094.VDF : 8.11.160.180 2048 Bytes 14.07.2014 20:37:41
XBV00095.VDF : 8.11.160.182 2048 Bytes 14.07.2014 20:37:41
XBV00096.VDF : 8.11.160.188 256000 Bytes 14.07.2014 02:37:43
XBV00097.VDF : 8.11.160.190 7680 Bytes 14.07.2014 02:37:43
XBV00098.VDF : 8.11.160.194 18432 Bytes 15.07.2014 08:37:38
XBV00099.VDF : 8.11.160.212 184832 Bytes 15.07.2014 19:24:53
XBV00100.VDF : 8.11.160.230 289792 Bytes 15.07.2014 19:24:55
XBV00101.VDF : 8.11.160.232 2048 Bytes 15.07.2014 19:24:55
XBV00102.VDF : 8.11.160.234 176128 Bytes 15.07.2014 19:24:56
XBV00103.VDF : 8.11.160.254 18432 Bytes 15.07.2014 17:26:06
XBV00104.VDF : 8.11.161.16 6144 Bytes 16.07.2014 17:26:06
XBV00105.VDF : 8.11.161.32 2048 Bytes 16.07.2014 17:26:06
XBV00106.VDF : 8.11.161.34 2048 Bytes 16.07.2014 17:26:06
XBV00107.VDF : 8.11.161.52 26624 Bytes 16.07.2014 17:26:07
XBV00108.VDF : 8.11.161.68 184832 Bytes 16.07.2014 17:26:08
XBV00109.VDF : 8.11.161.84 2048 Bytes 16.07.2014 17:26:08
XBV00110.VDF : 8.11.162.2 2560 Bytes 16.07.2014 17:26:08
XBV00111.VDF : 8.11.162.6 16896 Bytes 16.07.2014 17:26:08
XBV00112.VDF : 8.11.162.8 24064 Bytes 16.07.2014 17:26:08
XBV00113.VDF : 8.11.162.10 2560 Bytes 16.07.2014 17:26:09
XBV00114.VDF : 8.11.162.14 41472 Bytes 17.07.2014 17:26:09
XBV00115.VDF : 8.11.162.16 2048 Bytes 17.07.2014 17:26:09
XBV00116.VDF : 8.11.162.18 215040 Bytes 17.07.2014 17:26:10
XBV00117.VDF : 8.11.162.22 184320 Bytes 17.07.2014 17:26:12
XBV00118.VDF : 8.11.162.40 258048 Bytes 17.07.2014 17:26:14
XBV00119.VDF : 8.11.162.42 3584 Bytes 17.07.2014 17:26:14
XBV00120.VDF : 8.11.162.58 3072 Bytes 17.07.2014 17:26:14
XBV00121.VDF : 8.11.162.78 2048 Bytes 17.07.2014 17:26:14
XBV00122.VDF : 8.11.162.94 2048 Bytes 17.07.2014 17:26:14
XBV00123.VDF : 8.11.162.110 35840 Bytes 17.07.2014 17:26:14
XBV00124.VDF : 8.11.162.112 2048 Bytes 18.07.2014 17:26:14
XBV00125.VDF : 8.11.162.130 23040 Bytes 18.07.2014 17:26:14
XBV00126.VDF : 8.11.162.134 184320 Bytes 18.07.2014 17:26:16
XBV00127.VDF : 8.11.162.136 2048 Bytes 18.07.2014 17:26:16
XBV00128.VDF : 8.11.162.152 231424 Bytes 18.07.2014 17:26:22
XBV00129.VDF : 8.11.162.154 2048 Bytes 18.07.2014 17:26:22
XBV00130.VDF : 8.11.162.170 108032 Bytes 18.07.2014 17:26:25
XBV00131.VDF : 8.11.162.172 9728 Bytes 18.07.2014 17:26:25
XBV00132.VDF : 8.11.162.174 2048 Bytes 18.07.2014 17:26:25
XBV00133.VDF : 8.11.162.188 20992 Bytes 18.07.2014 17:26:25
XBV00134.VDF : 8.11.162.192 2048 Bytes 18.07.2014 17:26:25
XBV00135.VDF : 8.11.162.194 2048 Bytes 18.07.2014 17:26:26
XBV00136.VDF : 8.11.162.200 19968 Bytes 18.07.2014 17:26:26
XBV00137.VDF : 8.11.162.204 2048 Bytes 18.07.2014 17:26:26
XBV00138.VDF : 8.11.162.212 2048 Bytes 18.07.2014 17:26:26
XBV00139.VDF : 8.11.162.228 227840 Bytes 19.07.2014 17:26:27
XBV00140.VDF : 8.11.162.244 2048 Bytes 19.07.2014 17:26:27
XBV00141.VDF : 8.11.163.2 31232 Bytes 19.07.2014 17:26:28
XBV00142.VDF : 8.11.163.16 62464 Bytes 20.07.2014 16:13:15
XBV00143.VDF : 8.11.163.20 202752 Bytes 20.07.2014 16:13:17
XBV00144.VDF : 8.11.163.22 2048 Bytes 20.07.2014 16:13:17
XBV00145.VDF : 8.11.163.26 50176 Bytes 21.07.2014 10:13:04
XBV00146.VDF : 8.11.163.28 23040 Bytes 21.07.2014 10:13:05
XBV00147.VDF : 8.11.163.42 6144 Bytes 21.07.2014 10:13:05
XBV00148.VDF : 8.11.163.44 2560 Bytes 21.07.2014 10:13:05
XBV00149.VDF : 8.11.163.56 5120 Bytes 21.07.2014 10:13:05
XBV00150.VDF : 8.11.163.68 8192 Bytes 21.07.2014 16:13:27
XBV00151.VDF : 8.11.163.74 213504 Bytes 21.07.2014 16:13:28
XBV00152.VDF : 8.11.163.78 22528 Bytes 22.07.2014 04:13:04
XBV00153.VDF : 8.11.163.82 2560 Bytes 22.07.2014 10:13:30
XBV00154.VDF : 8.11.163.84 181248 Bytes 22.07.2014 10:13:31
XBV00155.VDF : 8.11.163.86 9728 Bytes 22.07.2014 10:13:31
XBV00156.VDF : 8.11.163.92 2560 Bytes 22.07.2014 16:13:16
XBV00157.VDF : 8.11.163.98 230400 Bytes 22.07.2014 22:13:15
XBV00158.VDF : 8.11.163.100 2048 Bytes 22.07.2014 22:13:15
XBV00159.VDF : 8.11.163.102 2048 Bytes 22.07.2014 22:13:15
XBV00160.VDF : 8.11.163.108 22528 Bytes 22.07.2014 22:13:15
XBV00161.VDF : 8.11.163.112 17920 Bytes 22.07.2014 04:13:11
XBV00162.VDF : 8.11.163.116 2048 Bytes 23.07.2014 04:13:11
LOCAL000.VDF : 8.11.163.116 109633536 Bytes 23.07.2014 04:13:26
Engineversion : 8.3.22.12
AEVDF.DLL : 8.3.0.4 118976 Bytes 02.07.2014 11:06:41
AESCRIPT.DLL : 8.2.0.12 426184 Bytes 21.07.2014 16:13:27
AESCN.DLL : 8.3.2.2 139456 Bytes 21.07.2014 16:13:25
AESBX.DLL : 8.2.20.24 1409224 Bytes 02.07.2014 11:06:41
AERDL.DLL : 8.2.0.138 704888 Bytes 02.07.2014 11:06:41
AEPACK.DLL : 8.4.0.42 786632 Bytes 10.07.2014 14:50:04
AEOFFICE.DLL : 8.3.0.14 213192 Bytes 21.07.2014 16:13:25
AEHEUR.DLL : 8.1.4.1166 7233736 Bytes 21.07.2014 16:13:24
AEHELP.DLL : 8.3.1.0 278728 Bytes 02.07.2014 11:06:41
AEGEN.DLL : 8.1.7.28 450752 Bytes 02.07.2014 11:06:41
AEEXP.DLL : 8.4.2.6 237760 Bytes 02.07.2014 11:06:41
AEEMU.DLL : 8.1.3.2 393587 Bytes 02.07.2014 11:06:41
AEDROID.DLL : 8.4.2.24 442568 Bytes 02.07.2014 11:06:41
AECORE.DLL : 8.3.2.2 241864 Bytes 21.07.2014 16:13:03
AEBB.DLL : 8.1.1.4 53619 Bytes 02.07.2014 11:06:41
AVWINLL.DLL : 14.0.5.320 24144 Bytes 02.07.2014 11:06:44
AVPREF.DLL : 14.0.5.320 50256 Bytes 02.07.2014 11:06:43
AVREP.DLL : 14.0.5.320 219216 Bytes 02.07.2014 11:06:43
AVARKT.DLL : 14.0.5.368 226384 Bytes 02.07.2014 11:06:42
AVEVTLOG.DLL : 14.0.5.320 182352 Bytes 02.07.2014 11:06:42
SQLITE3.DLL : 14.0.5.320 452176 Bytes 02.07.2014 11:06:47
AVSMTP.DLL : 14.0.5.320 76368 Bytes 02.07.2014 11:06:44
NETNT.DLL : 14.0.5.320 13392 Bytes 02.07.2014 11:06:46
RCIMAGE.DLL : 14.0.5.320 4998224 Bytes 02.07.2014 11:06:46
RCTEXT.DLL : 14.0.5.322 73808 Bytes 02.07.2014 11:06:46
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Beginn des Suchlaufs: Mittwoch, 23. Juli 2014 09:46
Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D:)'
[INFO] Es wurde kein Virus gefunden!
Der Suchlauf nach versteckten Objekten wird begonnen.
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '91' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '105' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '164' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '92' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '106' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '120' Modul(e) wurden durchsucht
Durchsuche Prozess 'HD-LogRotatorService.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'dtsrvc.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'GREGsvc.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'UpdaterService.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMIGuardianSvc.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'NOBuAgent.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'pdisrvc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'sqlwriter.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSVC.EXE' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '132' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'hamachi-2.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'NASvc.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '169' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '138' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '114' Modul(e) wurden durchsucht
Durchsuche Prozess 'hamachi-2-ui.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '91' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '113' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '125' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '30' Modul(e) wurden durchsucht
Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '11879' Dateien ).
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\' <Acer>
C:\Program Files (x86)\NextCouuP\f.dll
[FUND] Enthält Erkennungsmuster der Adware ADWARE/AgentCV.A.14238
C:\Program Files (x86)\Perfect World Entertainment\RaiderZ_en\Splash.exe
[FUND] Ist das Trojanische Pferd TR/Dropper.A.24596
C:\Program Files (x86)\SK Supporter\uninstall.exe
[0] Archivtyp: NSIS
--> [PluginsDir]/spext.dll
[FUND] Enthält Erkennungsmuster der Adware ADWARE/BHO.BProtector.13
[WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Mirjam Zanetti\Downloads\Multihack by Madeye v4.1.zip
[0] Archivtyp: ZIP
--> Multihack by Madeye v4.1/Multihack by Madeye v4.1.exe
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
[WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Sven\AppData\Local\Mozilla\Firefox\Profiles\42h3y7h3.default\Cache\7\97\51E1Fd01
[FUND] Enthält Erkennungsmuster des Java-Scriptvirus JS/Blacole.GB.105
C:\Users\Sven\Downloads\4Story Hack by LaBomba.zip
[0] Archivtyp: ZIP
--> 4Story Hack by LaBomba.exe
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
[WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden
[0] Archivtyp: Runtime Packed
--> C:\Users\Sven\Downloads\chromeinstall-7u65.exe
[1] Archivtyp: Runtime Packed
--> C:\Users\Sven\Downloads\chromeinstall-7u9.exe
[2] Archivtyp: Runtime Packed
--> C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip
[3] Archivtyp: ZIP
--> Multihack by Madeye v4.1/Multihack by Madeye v4.1.exe
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
[WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002eb
[FUND] Enthält Erkennungsmuster der Adware ADWARE/InstallRex.Gen
--> C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar
[3] Archivtyp: RAR
--> 4story Gold Hack 2014 4.4.exe
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
[WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
Beginne mit der Suche in 'D:\' <DATA>
Beginne mit der Desinfektion:
C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '50a20aa7.qua' verschoben!
C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002eb
[FUND] Enthält Erkennungsmuster der Adware ADWARE/InstallRex.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4f892514.qua' verschoben!
C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1a127fea.qua' verschoben!
C:\Users\Sven\Downloads\4Story Hack by LaBomba.zip
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7c5d304a.qua' verschoben!
C:\Users\Sven\AppData\Local\Mozilla\Firefox\Profiles\42h3y7h3.default\Cache\7\97\51E1Fd01
[FUND] Enthält Erkennungsmuster des Java-Scriptvirus JS/Blacole.GB.105
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '398e1d52.qua' verschoben!
C:\Users\Mirjam Zanetti\Downloads\Multihack by Madeye v4.1.zip
[FUND] Ist das Trojanische Pferd TR/Spy.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '46ba2f77.qua' verschoben!
C:\Program Files (x86)\SK Supporter\uninstall.exe
[FUND] Enthält Erkennungsmuster der Adware ADWARE/BHO.BProtector.13
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0a010334.qua' verschoben!
C:\Program Files (x86)\Perfect World Entertainment\RaiderZ_en\Splash.exe
[FUND] Ist das Trojanische Pferd TR/Dropper.A.24596
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '761a436a.qua' verschoben!
C:\Program Files (x86)\NextCouuP\f.dll
[FUND] Enthält Erkennungsmuster der Adware ADWARE/AgentCV.A.14238
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5b486c69.qua' verschoben!
Ende des Suchlaufs: Mittwoch, 23. Juli 2014 14:30
Benötigte Zeit: 4:16:07 Stunde(n)
Der Suchlauf wurde vollständig durchgeführt.
105434 Verzeichnisse wurden überprüft
2485463 Dateien wurden geprüft
11 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
9 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
2485452 Dateien ohne Befall
25609 Archive wurden durchsucht
5 Warnungen
9 Hinweise
1629595 Objekte wurden beim Rootkitscan durchsucht
0 Versteckte Objekte wurden gefunden
Allerdings hab ich noch das Problem mit Google Chrome: Wenn ich es starte, gehen 2-5 Mitteilungen ("Ihr Profil konnte nicht ordnungsgemäss geöffnet werden. Etc. etc.") auf und wenn ich es schliesse, bleibt der Prozess zwei Mal offen. Ich muss dann beide chrome.exe-Prozesse über den Taskmanager schliessen damit ich Chrome wieder öffnen kann, ansonsten passiert nämlich nix. Weisst du vielleicht, wie ich das wieder hinkriege? Mit Revo drüber und neu installieren zB? Und achja, die beiden Programme sollten nun geupdatet sein  |
|
24.07.2014, 09:37
| #17 |
| /// the machine /// TB-Ausbilder    | (save , on) Links im Internet & Chrome funktioniert nicht richtig Revo Uninstaller - Download - Filepony
__________________damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.google.com/chrome/answer/3296214?hl=de frisches FRST Log bitte.
__________________ |
|
24.07.2014, 11:10
| #18 |
| | (save , on) Links im Internet & Chrome funktioniert nicht richtig Super, Chrome geht wieder wie geschmiert
__________________ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014 Ran by Sven (administrator) on MirjamZanetti on 24-07-2014 12:06:24 Running from C:\Users\Sven\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.) HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DisableClock] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoNetworkConnections] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoCommonGroups] 0 ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File GroupPolicy: Group Policy on Chrome detected <======= ATTENTION GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms} BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.) BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc) BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Sven\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Extension: SNT - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\hcfai@pbgqo-.co.uk [2014-03-24] FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25] FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff Chrome: ======= CHR HomePage: hxxp://google.ch/ CHR StartupUrls: "hxxp://www.google.ch/" CHR Extension: (Google Docs) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-24] CHR Extension: (Google Drive) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-24] CHR Extension: (YouTube) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-24] CHR Extension: (Google-Suche) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-24] CHR Extension: (Avira Browser Safety) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-24] CHR Extension: (Google Wallet) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-24] CHR Extension: (Google Mail) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-24] CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2014-07-24] CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2014-07-24] CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2014-07-24] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG) S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG) S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com) S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.) R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed] S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed] S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed] S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems) R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-24] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk 2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-24 11:52 - 2014-07-24 11:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-24 11:52 - 2014-07-24 11:57 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira 2014-07-23 09:45 - 2014-07-24 11:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log 2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe 2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe 2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe 2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe 2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira 2014-07-11 13:32 - 2014-07-24 12:06 - 00019164 _____ () C:\Users\Sven\Desktop\FRST.txt 2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt 2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe 2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt 2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt 2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe 2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt 2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion 2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira 2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira 2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe 2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt 2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk 2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox 2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt 2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe 2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe 2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz 2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame 2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe 2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe 2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe 2014-07-07 19:27 - 2014-07-24 12:06 - 00000000 ____D () C:\FRST 2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc 2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk 2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment 2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment 2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe 2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download 2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-24 12:07 - 2014-07-11 13:32 - 00019164 _____ () C:\Users\Sven\Desktop\FRST.txt 2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion 2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe 2014-07-24 12:06 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST 2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk 2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-24 11:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-24 11:57 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-24 11:57 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-24 11:57 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-24 11:51 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-24 11:51 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi 2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment 2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0 2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google 2014-07-24 11:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-24 11:48 - 2009-07-14 06:51 - 00102540 _____ () C:\Windows\setupact.log 2014-07-24 11:47 - 2012-06-29 12:21 - 02021108 _____ () C:\Windows\WindowsUpdate.log 2014-07-24 11:47 - 2010-11-21 05:47 - 01748832 _____ () C:\Windows\PFRO.log 2014-07-24 11:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-24 11:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job 2014-07-24 11:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job 2014-07-23 22:45 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent 2014-07-23 22:27 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype 2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira 2014-07-23 20:53 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi 2014-07-23 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job 2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP 2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle 2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log 2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java 2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe 2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe 2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe 2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-21 21:38 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi 2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012 2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe 2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat 2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat 2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat 2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat 2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat 2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat 2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira 2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt 2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT 2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe 2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt 2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt 2014-07-11 13:07 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner 2014-07-11 13:03 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim 2014-07-11 13:03 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven 2014-07-11 13:03 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti 2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe 2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt 2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE 2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira 2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira 2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe 2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache 2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt 2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox 2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt 2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert 2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport 2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps 2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe 2014-07-10 10:43 - 2012-12-02 21:28 - 00000680 __RSH () C:\Users\Tim\ntuser.pol 2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk 2014-07-09 19:58 - 2012-12-01 11:05 - 00000680 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol 2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET 2014-07-09 14:28 - 2014-02-24 18:05 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-07-09 14:28 - 2012-12-01 11:20 - 00001326 __RSH () C:\Users\Sven\ntuser.pol 2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe 2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk 2014-07-09 13:23 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz 2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp 2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment 2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame 2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe 2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe 2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc 2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk 2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment 2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe 2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download 2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download 2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer 2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr 2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf Some content of TEMP: ==================== C:\Users\Mirjam Zanetti\AppData\Local\Temp\avgnt.exe C:\Users\Sven\AppData\Local\Temp\avgnt.exe C:\Users\Sven\AppData\Local\Temp\Quarantine.exe C:\Users\Tim\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2013-03-25 09:03 ==================== End Of Log ============================ |
|
24.07.2014, 19:19
| #19 |
| /// the machine /// TB-Ausbilder | (save , on) Links im Internet & Chrome funktioniert nicht richtig Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
25.07.2014, 18:18
| #20 |
| | (save , on) Links im Internet & Chrome funktioniert nicht richtigCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-07-2014
Ran by Sven at 2014-07-25 19:01:24 Run:1
Running from C:\Users\Sven\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION
*****************
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User => Moved successfully.
The system needed a reboot.
==== End of Fixlog ====
...Auf meinem Account.. Ich hab grad, nachdem ich den Neustart von FRST durchgeführt habe, kurz auf dem Account meiner Mutter (Computer-Administrator) geschaut, ob auch dort alles OK ist. Aber dort ist sogar immer noch die "save.on"-Erweiterung installiert und es öffnen sich in Chrome dauern Webseiten, die Werbung etc beinhalten. Kann es sein, dass wir uns hier nur um die Viren auf meinem Account gekümmert haben? lg |
|
26.07.2014, 10:51
| #21 |
| /// the machine /// TB-Ausbilder | (save , on) Links im Internet & Chrome funktioniert nicht richtig Ich weiß ja nit auf welchem Account du die ganzen Scans machst. FRST bitte aus dem Account der Mutter laufen lassen, Logs posten.
__________________ --> (save , on) Links im Internet & Chrome funktioniert nicht richtig |
|
26.07.2014, 20:29
| #22 |
| | (save , on) Links im Internet & Chrome funktioniert nicht richtigFRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014 Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 26-07-2014 21:22:33 Running from C:\Users\Mirjam Zanetti\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPNetworkCommunicator.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.) HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation) HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [se] => C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe /minimized HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.holasearch.com/?affID=121962&tt=gc_&babsrc=HP_ss&mntrId=7C1DF80F415692A8 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8 SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms} BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.) BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc) BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) FireFox: ======== FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31] FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25] FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff FF HKCU\...\Firefox\Extensions: [happylyrics@hpyproductions.net] - C:\Program Files (x86)\HappyLyrics\FF Chrome: ======= CHR HomePage: CHR DefaultSearchKeyword: ask search CHR DefaultSearchProvider: Ask Search CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms} CHR DefaultNewTabURL: CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28] CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23] CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23] CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26] CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26] CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26] CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG) S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG) S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com) S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.) R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed] S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed] S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed] S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems) R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-26] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-26 21:22 - 2014-07-26 21:23 - 00020722 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt 2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe 2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS 2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk 2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-24 11:52 - 2014-07-26 21:13 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-24 11:52 - 2014-07-26 20:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira 2014-07-23 09:45 - 2014-07-26 20:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log 2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe 2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe 2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe 2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe 2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira 2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt 2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt 2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe 2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt 2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt 2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe 2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt 2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion 2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira 2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira 2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe 2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt 2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk 2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox 2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt 2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe 2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe 2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz 2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame 2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe 2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe 2014-07-07 19:27 - 2014-07-26 21:22 - 00000000 ____D () C:\FRST 2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe 2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc 2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk 2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment 2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment 2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe 2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download 2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-26 21:23 - 2014-07-26 21:22 - 00020722 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt 2014-07-26 21:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job 2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe 2014-07-26 21:22 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST 2014-07-26 21:22 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-26 21:22 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-26 21:19 - 2012-06-29 12:21 - 01207747 _____ () C:\Windows\WindowsUpdate.log 2014-07-26 21:16 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-26 21:16 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi 2014-07-26 21:13 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-26 21:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-26 21:13 - 2009-07-14 06:51 - 00102820 _____ () C:\Windows\setupact.log 2014-07-26 21:09 - 2010-11-21 05:47 - 01755708 _____ () C:\Windows\PFRO.log 2014-07-26 20:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent 2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype 2014-07-26 20:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-26 20:23 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job 2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi 2014-07-26 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job 2014-07-26 10:55 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi 2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol 2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim 2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol 2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven 2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol 2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti 2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS 2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt 2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion 2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe 2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk 2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment 2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0 2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google 2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira 2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP 2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter 2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle 2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log 2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java 2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe 2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe 2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe 2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012 2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe 2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat 2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat 2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat 2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat 2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat 2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat 2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira 2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt 2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT 2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe 2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt 2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt 2014-07-11 13:07 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner 2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe 2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt 2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE 2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira 2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira 2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe 2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache 2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt 2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox 2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt 2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert 2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport 2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps 2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe 2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk 2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET 2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe 2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk 2014-07-09 13:23 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz 2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp 2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment 2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame 2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe 2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe 2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc 2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk 2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment 2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe 2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download 2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download 2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer 2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr 2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf Some content of TEMP: ==================== C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe C:\Users\Sven\AppData\Local\temp\avgnt.exe C:\Users\Sven\AppData\Local\temp\Quarantine.exe C:\Users\Tim\AppData\Local\temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2013-03-25 09:03 ==================== End Of Log ============================ |
|
26.07.2014, 20:29
| #23 |
| | (save , on) Links im Internet & Chrome funktioniert nicht richtigCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-07-2014
Ran by Mirjam Zanetti at 2014-07-26 21:24:22
Running from C:\Users\Mirjam Zanetti\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
4Story DE 4.2.213 (HKLM-x32\...\4Story_DE_is1) (Version: - )
4story_cycle (HKCU\...\Kalydo App 4story_cycle) (Version: 4.01.00.22 - )
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Acer eDisplay Management (HKLM-x32\...\{A586DC50-B18D-48FB-B7CC-A598200457C2}) (Version: 1.37.007 - Portrait Displays, Inc.)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0609.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.5 - Sereby Corporation)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.873.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In (Version: 2.07.0000 - AMD) Hidden
AMD USB 3.0 Device Detector (Version: 2.1.29.0 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2012.0126.1906.34079 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Ancient Magic (HKLM-x32\...\Ancient Magic) (Version: 0.0.0.1 - Sven Zanetti)
Any Video Converter 5.5.5 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
Ask Toolbar (HKLM-x32\...\{4F524A2D-5637-4300-76A7-A758B70C0A03}) (Version: 12.10.3.28 - APN, LLC) <==== ATTENTION
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.7.8981 - )
Avira (HKLM-x32\...\{142be4a8-895b-4ed9-b1ff-11c76357e3df}) (Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)
Benutzerhandbuch - Grundlagen EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Bog) (Version: - )
Benutzerhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Useg) (Version: - )
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
BitComet 1.36 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.36 - CometNetwork)
Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blender (HKLM\...\Blender) (Version: 2.70a - Blender Foundation)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.17.916 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{7E6316CA-5ED0-4EF9-9920-A92115E286B7}) (Version: 0.7.17.916 - BlueStack Systems, Inc.)
Camtasia Studio 8 (HKLM-x32\...\{A7727F03-5311-4A12-9A63-2ACD20BA0497}) (Version: 8.2.1.1423 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Chat Mapper (HKLM-x32\...\{498F0DC0-3B5E-4DC7-B571-578F61306058}) (Version: 1.7.0.0 - Urban Brain Studios, Inc.)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
CPU Miner (HKLM-x32\...\CPUMiner) (Version: 1.0 - WinTuneUp Apps. )
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)
CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)
DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Download Navigator (HKLM-x32\...\{E728441A-7820-4B1C-87C9-DE7BE37B2953}) (Version: 1.1.0 - SEIKO EPSON CORPORATION)
Druckerdeinstallation für EPSON XP-402 403 405 406 Series (HKLM\...\EPSON XP-402 403 405 406 Series) (Version: - SEIKO EPSON Corporation)
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
Elsword_DE (HKLM-x32\...\Elsword_DE_is1) (Version: - )
Entity Framework Designer für Visual Studio 2012 - DEU (HKLM-x32\...\{B2BDC072-BE01-432D-B281-30891D597FBB}) (Version: 11.1.30729.00 - Microsoft Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{30E01116-5666-4807-8EF1-D80E9FF16717}) (Version: 2.3.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FileZilla Client 3.8.1 (HKLM-x32\...\FileZilla Client) (Version: 3.8.1 - Tim Kosse)
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fotogaléria (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Freemake Video Converter Version 4.1.3 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.3 - Ellora Assets Corporation)
Galeria de Fotografias (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotogràfica (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerija fotografija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Gameforge Live 2.0.3 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.3 - Gameforge)
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
GLBasic SDK (HKLM-x32\...\GLBasic_SDK) (Version: 12.096 - Dream Design Entertainment)
GnuWin32: CoreUtils version 5.3.0 (HKLM-x32\...\CoreUtils-5.3.0_is1) (Version: 5.3.0 - GnuWin32)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{2A83AD05-56E6-3FBD-8752-B4143162EF59}) (Version: 4.9.1.16010 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3510 - Acer Incorporated)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12412 - HP)
HP Photosmart 7520 series - Grundlegende Software für das Gerät (HKLM\...\{62883BA5-32F6-44D0-AF9D-9CBED778F36F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HyperCam 3 (HKLM-x32\...\HyperCam 3 3.5.1211.29) (Version: 3.5.1211.29 - Solveig Multimedia)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
Iminent (x32 Version: 6.46.1.0 - Iminent) Hidden <==== ATTENTION
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
InstallForge (HKLM-x32\...\InstallForge) (Version: 1.2.9.1 - solicus)
Interdiscount Fotoservice (HKLM-x32\...\Interdiscount Fotoservice) (Version: 4.8.6 - CEWE COLOR AG u Co. OHG)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden
JavaScript Tooling (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
JetBrains ReSharper 7.0.1 (HKLM-x32\...\{1322DAC7-A713-4015-8F36-035F07A06ECA}) (Version: 7.0.1098 - JetBrains Inc)
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kalydo Player 5.00.01 (HKCU\...\KalydoPlayer) (Version: 5.00.01 - Eximion B.V.)
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden
LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.227 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.227 - LogMeIn, Inc.) Hidden
MAESTIA Version 201207 (HKLM-x32\...\{8F50EC3D-C482-4445-9E4B-991A766047D5}_is1) (Version: 201207 - RocWorks)
Magicka - Demo (HKLM-x32\...\Steam App 73050) (Version: - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 1.1 Security Update (KB2656370) (HKLM-x32\...\M2656370) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft ASP.NET and Web Tools 2012.3 - Visual Studio 2012 - deu (x32 Version: 1.4.41009.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET and Web Tools 2012.3 - Visual Studio 2012 (x32 Version: 1.4.41009.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 3 - DEU (HKLM-x32\...\{07AC2D83-E795-4AD5-970D-B9BD14A1E411}) (Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages - DEU (HKLM-x32\...\{93EEC4E9-EEFE-4027-ACD3-6E8C1D085975}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM-x32\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden
Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.6.40627.9000 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.6.40627.9000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK - Deutsch (HKLM-x32\...\{8EA792A5-38AA-4F0E-8DFE-D1BAF1145431}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (HKLM-x32\...\{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (HKLM-x32\...\{00C84D22-DB8F-4159-BF70-682B8EA56A1E}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{1E6ED082-E32D-4B2B-8B6A-70B094815135}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C# 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C# 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{ac3600d2-e1b3-4573-bef7-73f9409d6393}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{aec97477-921a-4289-985a-9e29506625b6}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Language Pack - DEU (x32 Version: 11.0.50727.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Performance Collection Tools (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (HKLM-x32\...\{69ec32be-d994-44de-9eae-6d86ced6f352}) (Version: 11.0.50727.42 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - ENU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 (HKLM-x32\...\{ae17ae9b-af38-40d2-a194-6102c56ed502}) (Version: 11.0.50727.26 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - DEU (HKLM-x32\...\{86756584-C41A-4CA3-B42D-4768C7720F56}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft XNA Game Studio 4.0 Refresh (Shared Components) (x32 Version: 4.0.30901.0 - Microsoft Corporation) Hidden
Microsoft XNA Game Studio Platform Tools (HKLM-x32\...\{89690B51-2E21-4E93-914E-F9CAC5B24A84}) (Version: 1.4.0.0 - Microsoft Corporation)
Minecraft Editor 64 bits (HKLM\...\{042CC934-54B5-4BEB-948D-F3780B2CE4D7}) (Version: 1.6.6 - Axialmedia)
MonoGame (HKLM-x32\...\MonoGame) (Version: 3.0 - MonoGame)
MorphVOX Pro (HKLM-x32\...\{53AB1F25-D607-4B4D-8FD5-74E03F2F9414}) (Version: 4.4.7 - Screaming Bee)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MP4 To MP3 Converter V3.0.5 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version: - hxxp://www.MP4ToMP3Converter.net)
MpcStar 5.4 (HKLM-x32\...\MpcStar) (Version: 5.4 - www.mpcstar.com)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.18 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.18 - Egis Technology Inc.) Hidden
Nero Control Center 10 (x32 Version: 10.6.13200.0.12 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20500.9.16 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10700.5.100 - Nero AG)
Nero Express 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.6.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10600.4.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.10022.15.0 - Nero AG) Hidden
Netzwerkhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Netg) (Version: - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Online Weather (HKCU\...\Online Weather) (Version: 1.0 - )
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.76.1.0 - Overwolf Ltd.)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pivot Pro Plugin (x32 Version: 9.50.110 - Portrait Displays, Inc.) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Pokemon Online 2.0.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version: - Dreambelievers)
POKéMON Simulator 4.5 (HKLM-x32\...\POKéGAME32) (Version: 4.5 - Birdiesoft)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Prompt Downloader (HKLM-x32\...\Prompt Downloader) (Version: - )
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SDK (x32 Version: 2.32.010 - Portrait Displays, Inc.) Hidden
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Software Updater (HKLM-x32\...\{7B3A525D-9D3D-4618-AE52-A31DE98C8AC3}) (Version: 4.1.4 - SEIKO EPSON CORPORATION)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2012 13.0.3 (HKLM-x32\...\1382-8438-0790-3872) (Version: 13.0.3 - Information Factory AG)
Steuer 2013 14.0.1 (HKLM-x32\...\0166-6433-7072-1489) (Version: 14.0.1 - Information Factory AG)
Studie zur Verbesserung von HP Photosmart 7520 series Produkten (HKLM\...\{D662A279-973A-42A0-8D4B-8747C56C0501}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Update kb70007 (x32 Version: 1.0.0 - MSR) Hidden
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version: - Microsoft)
Update for Microsoft Visual Studio 2012 (KB2781514) (HKLM-x32\...\{56ef8912-352f-4fab-9c73-6f1c92a7127f}) (Version: 11.0.51219 - Microsoft Corporation)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
UpdateStar (HKLM-x32\...\{4B75C1B1-D0C7-4E70-9EE4-09CE7F734B0C}) (Version: 10.0.1265 - UpdateStar GmbH)
Valokuvavalikoima (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Vegas Movie Studio HD 11.0 (HKLM-x32\...\{6E3FD14F-858B-11E1-BC4A-F04DA23A5C58}) (Version: 11.0.75 - Sony)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.14 - NCH Software)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Update 4 (KB2707250) (HKLM-x32\...\{312d9252-c71c-4c84-b171-f4ad46e22098}) (Version: 11.0.61030 - Microsoft Corporation)
Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9202.20789 - Microsoft Corporation) Hidden
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.71 - NCH Software)
WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)
weblica - 3.6.3 (HKLM-x32\...\weblica) (Version: 3.6.3 - empros gmbh)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows App Certification Kit Native Components (Version: 8.59.29736 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (x32 Version: 8.59.29750 - Microsoft Corporation) Hidden
Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601 - Microsoft) Hidden
Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601 - Microsoft) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Liven peruspaketti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (Version: 11.0.51106 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
WinTuneUp 1.0 (HKLM-x32\...\WinTuneUp) (Version: 1.0 - WinTuneUp Apps. )
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
Wondershare Video Editor(Build 3.5.0) (HKLM-x32\...\Wondershare Video Editor_is1) (Version: - Wondershare Software)
Zerius Vocoder (remove only) (HKLM-x32\...\VocoderGUI) (Version: - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотогалерия (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
גלריית התמונות (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
معرض الصور (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1536315646-4119356758-1407283469-1000_Classes\CLSID\{F7D4B6AD-AB5F-4fe8-9469-3A4697E41129}\InprocServer32 -> C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\kalydoplayer64.dll (Eximion B.V.)
==================== Restore Points =========================
14-07-2014 12:00:11 Windows Update
15-07-2014 19:25:05 Windows Update
15-07-2014 19:53:43 Windows Update
19-07-2014 19:32:05 Windows Update
20-07-2014 12:00:16 Windows Update
21-07-2014 12:00:15 Windows Update
22-07-2014 08:30:54 Windows Update
22-07-2014 12:00:11 Windows Update
23-07-2014 07:35:52 Installed Java 7 Update 65
23-07-2014 12:00:14 Windows Update
24-07-2014 09:34:21 Revo Uninstaller's restore point - Google Chrome
24-07-2014 12:00:16 Windows Update
25-07-2014 17:01:30 Windows Update
25-07-2014 17:15:33 Windows Update
26-07-2014 12:00:19 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2014-07-10 14:46 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {13FBF219-AB2F-4E15-9513-29FDD61F4A20} - \BrowserProtect No Task File <==== ATTENTION
Task: {1B396549-A773-464C-B9B3-B4C49CF28A10} - System32\Tasks\GPU Grid Computing => C:\Windows\SysWOW64\dfrg\runner.exe
Task: {1C72B99D-EB1B-418B-9229-06888E65E40E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-24] (Google Inc.)
Task: {44A54D41-E818-466E-A807-D50B1E9D910E} - \PileFile reminder No Task File <==== ATTENTION
Task: {48840F86-1F7C-4F8A-A451-7370C9EE42CA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)
Task: {4BEA3EE7-26F9-419C-9225-FBFDE19FE80E} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {4F8E5131-8941-4329-B11F-3413CA5D0960} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-24] (Google Inc.)
Task: {6A733201-6137-4277-98D7-56AAB8FB7F8A} - System32\Tasks\RunAsStdUser Task => C:\Users\Sven\AppData\Local\Oxy\Application\oxy.exe <==== ATTENTION
Task: {6C8BDFDF-A6E7-4549-B494-C0D1A4F9A07B} - \PileFile logon No Task File <==== ATTENTION
Task: {87E712A9-9E69-4B7C-9F54-5A79A168AF42} - System32\Tasks\HPCustParticipation HP Photosmart 7520 series => C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {AC774A6E-8700-4848-B0FE-1657D3DCAC3A} - \Funmoods No Task File <==== ATTENTION
Task: {CA415D1F-7A72-4B84-8880-31511E6E3DB6} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2014-06-10] (Overwolf LTD)
Task: {CFC139DF-686C-45F9-A5F4-DCF738E94779} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-23] (Adobe Systems Incorporated)
Task: {E14BE1A6-9A64-40D3-940C-A52A49596E45} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2014-01-23] ()
Task: {E45F4C4B-41F0-4A5B-983B-DB6815BF7334} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)
Task: {F87AF6AD-1E2B-445F-A72D-DB91FB0F505A} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
==================== Loaded Modules (whitelisted) =============
2014-05-01 21:29 - 2014-05-01 21:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-07-07 13:53 - 2014-07-07 13:53 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-07-07 13:52 - 2014-07-07 13:52 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-07-11 21:08 - 2014-07-07 13:53 - 00049744 _____ () C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
AlternateDataStreams: C:\Users\Sven\Downloads\message.eml:OECustomProperty
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: WdiSystemHost => 3
MSCONFIG\Services: WebClient => 3
MSCONFIG\Services: Wecsvc => 3
MSCONFIG\Services: wercplsupport => 3
MSCONFIG\Services: WerSvc => 3
MSCONFIG\Services: WinDefend => 2
MSCONFIG\Services: WinHttpAutoProxySvc => 3
MSCONFIG\Services: Winmgmt => 2
MSCONFIG\Services: WinRM => 3
MSCONFIG\Services: Wlansvc => 3
MSCONFIG\Services: wlidsvc => 3
MSCONFIG\Services: wmiApSrv => 3
MSCONFIG\Services: WMPNetworkSvc => 3
MSCONFIG\Services: WPCSvc => 3
MSCONFIG\Services: WPDBusEnum => 3
MSCONFIG\Services: wscsvc => 2
MSCONFIG\Services: WSearch => 2
MSCONFIG\Services: wuauserv => 2
MSCONFIG\Services: wudfsvc => 3
MSCONFIG\Services: WwanSvc => 3
MSCONFIG\startupfolder: C:^Users^Tim^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: 24x7HELP => "C:\Program Files (x86)\24x7Help\App24x7Help.exe" /STARTUP
MSCONFIG\startupreg: 4StoryPrePatch => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CommonToolkitTray => C:\Program Files (x86)\Fighters\Tray\FightersTray.exe
MSCONFIG\startupreg: DT ACR => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -ACR
MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EgisTecPMMUpdate => "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
MSCONFIG\startupreg: EgisUpdate => "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
MSCONFIG\startupreg: EPLTarget =>
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: InboxToolbar => "C:\Program Files (x86)\Inbox Toolbar\Inbox.exe" /STARTUP
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: NextLive => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Tim\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe"
MSCONFIG\startupreg: Optimizer Pro => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
MSCONFIG\startupreg: PC Speed Maximizer => C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe
MSCONFIG\startupreg: PivotSoftware => "C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
MSCONFIG\startupreg: RebateInformer => C:\Program Files (x86)\RebateInformer\RebateInf.exe /STARTUP
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: SiteRanker => "C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: UpdateStar => "C:\Users\Sven\AppData\Roaming\UpdateStar\UpdateStar.exe" -A
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/26/2014 09:14:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/26/2014 09:13:52 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (07/26/2014 09:10:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/26/2014 09:09:57 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (07/26/2014 02:01:58 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.30514.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.
Error: (07/26/2014 02:01:58 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2705. The arguments are: Directory, ,
Error: (07/26/2014 02:01:56 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: XAPAuthenticodeSIPDLL, ,
Error: (07/26/2014 10:51:00 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/26/2014 10:50:11 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (07/25/2014 07:19:18 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.30514.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.
System errors:
=============
Error: (07/26/2014 09:15:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (07/26/2014 09:15:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
Error: (07/26/2014 09:13:52 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (07/26/2014 09:13:17 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 26.07.2014 um 21:12:24 unerwartet heruntergefahren.
Error: (07/26/2014 09:11:12 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
Error: (07/26/2014 09:10:53 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.
Error: (07/26/2014 09:09:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (07/26/2014 09:09:24 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 26.07.2014 um 21:07:40 unerwartet heruntergefahren.
Error: (07/26/2014 02:02:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Silverlight (KB2977218)
Error: (07/26/2014 10:53:10 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (06/08/2014 05:44:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 25 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2014-07-10 14:40:33.475
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-07-10 14:40:33.163
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 41%
Total physical RAM: 3540.71 MB
Available physical RAM: 2053.84 MB
Total Pagefile: 7079.59 MB
Available Pagefile: 5283.79 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:456.45 GB) (Free:262.07 GB) NTFS
Drive d: (DATA) (Fixed) (Total:456.96 GB) (Free:456.72 GB) NTFS
Drive e: (acer_ P227HQV) (CDROM) (Total:0.2 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 6CE78890)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
27.07.2014, 10:15
| #24 |
| /// the machine /// TB-Ausbilder | (save , on) Links im Internet & Chrome funktioniert nicht richtig Adware & Co. deinstallieren
Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter: Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.07.2014, 14:38
| #25 |
| | (save , on) Links im Internet & Chrome funktioniert nicht richtig Malwarebytes hat um die 70 Dateien in Quarantäne gestellt, darunter war auch eine Trojan.Agent.Irgendwas, aber das Log ist ziemlich leer  Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 27.07.2014 Suchlauf-Zeit: 14:04:05 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.07.27.04 Rootkit Datenbank: v2014.07.17.01 Lizenz: Premium Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Aktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Mirjam Zanetti Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 493475 Verstrichene Zeit: 30 Min, 22 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.216 - Bericht erstellt am 27/07/2014 um 15:03:54
# Aktualisiert 17/07/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Mirjam Zanetti - MirjamZanetti
# Gestartet von : C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather\Uninstall.lnk
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [happylyrics@hpyproductions.net]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [se]
Schlüssel Gelöscht : HKCU\Software\5c55df8db669ec14
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{59C0C5BD-2579-433A-BBB8-AFFD59642BAF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\24x7help
Schlüssel Gelöscht : HKCU\Software\Alexa Internet
Schlüssel Gelöscht : HKCU\Software\APN DTX
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\Funmoods
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Optimizer Pro
Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx
Schlüssel Gelöscht : HKCU\Software\SearchProtect
Schlüssel Gelöscht : HKCU\Software\SiteRanker
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Solvusoft
Schlüssel Gelöscht : HKCU\Software\SweetIM
Schlüssel Gelöscht : HKCU\Software\Webplayer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\HappyLyrics
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17207
-\\ Mozilla Firefox v
[ Datei : C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\prefs.js ]
[ Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\42h3y7h3.default\prefs.js ]
[ Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\prefs.js ]
[ Datei : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\4b32mscn.default\prefs.js ]
[ Datei : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\prefs.js ]
-\\ Google Chrome v36.0.1985.125
[ Datei : C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelöscht [Search Provider] : hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8
Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/mb106/?search={searchTerms}&loc=IB_DS&a=6PQwntg4IO&i=26
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=109986&babsrc=SP_ss&mntrId=dcc1a6b9000000000000f80f4129ff48
Gelöscht [Search Provider] : hxxp://www2.delta-search.com/?q={searchTerms}&affID=119556&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8
Gelöscht [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}
Gelöscht [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv2&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyEyDyBtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1G2XtB&cr=253778042&ir=
Gelöscht [Search Provider] : hxxp://www.nationzoom.com/web/?type=ds&ts=1387620009&from=ild&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}
Gelöscht [Search Provider] : hxxp://isearch.babylon.com/?q={searchTerms}&affID=120307&babsrc=SP_ss&mntrId=7C1DF80F415692A8
[ Datei : C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [54398 octets] - [11/07/2014 12:59:49]
AdwCleaner[R1].txt - [41537 octets] - [11/07/2014 13:04:58]
AdwCleaner[R2].txt - [7714 octets] - [27/07/2014 14:52:57]
AdwCleaner[S0].txt - [13288 octets] - [11/07/2014 13:02:04]
AdwCleaner[S1].txt - [40111 octets] - [11/07/2014 13:06:54]
AdwCleaner[S2].txt - [5896 octets] - [27/07/2014 15:03:54]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [5956 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Mirjam Zanetti on 27.07.2014 at 15:21:16.95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\sweetim
~~~ Files
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001048D3-294A-4CDA-A17A-51A2D04C086B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001427FC-4209-43F8-AA6F-CFFFA44C9078}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001C3F2B-822C-48BB-8A18-885402131C5F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{003C2E72-933C-4E15-BC47-121CAF8C4D75}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{00B69F4E-A72A-41BA-8FEB-43CF7E704D3F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{018FB44D-EF4B-4383-B5B6-5567AE3823CC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0349CC65-3667-4741-B7E0-DB5C7007F28D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{03DA18BE-C820-4B8C-8563-C772F3999E87}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{04DD1F21-5381-430B-A374-51B30F247497}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{05D5C397-6C47-445C-A102-97D5917F8593}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{075E535C-E40F-411E-A1DF-3E2CA5179D64}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0862F236-4003-4DD8-BFFB-4D24651A1AF4}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{08BC8F91-B10C-442D-BACA-B8D169C843EB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0B2573C4-BB15-42BA-9882-F6DAFFC324E3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0BECB8D7-AAF7-437F-A7B0-8D241ED39115}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0D46A79A-5288-411A-9B06-1C73034004B1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0EDA6312-2318-40B2-9310-E388FAEAC484}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0FAB5D99-6693-4DD5-9CD3-E7F4E0C06378}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{14DEC5E6-1C4F-4DF0-8D3F-2E0510581B2F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1556CD4E-4F30-4F92-AC42-00B57B1284C0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{15D8EE5B-554A-4018-B1A9-A08A590D4DFB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{166999E6-1CE5-470D-ADC5-5107F118802B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{169F4864-3CA7-49B7-A1AB-D3ADB404429B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1707E4A7-CEAD-4738-821A-ED5409504C86}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{173435D1-713B-4972-83A1-8E3DD9C599C4}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1A87B844-0E76-4134-ABD2-2B84E00E1D1C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1B784D16-C4E8-42E6-BF9C-121638182E2A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1BC8C91E-B47D-47E6-B13C-687897F3A9E9}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1C1037CD-D94D-44CD-B8AE-4DCFC94608EB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1E3BDDC2-98E4-4C9B-B751-C3DA9EA75D01}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1EB18C3B-E67D-42B3-B9BF-29CBBF1C7117}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1EFAC82D-ED09-4F4C-A19D-837B447A026C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1F5D4F0B-51D5-4D2F-BA96-6D0B11521E18}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{21B1C6EE-4898-486D-A0A5-E28D7C284F5E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2338D82F-479C-4173-84B5-395A5DB8AD77}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{23C84535-2353-4A8B-A287-8A88C96E9C4A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{23ECF433-5672-46B1-B41B-4B40DDEC1B88}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2697B3BD-3512-4F0F-B29A-3F0D100044C6}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2826245F-2184-407C-954A-9F1EEA2B4E7A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{29ADEA81-083C-4597-BE00-57F507E96D57}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{29F097C1-87F4-4986-93F0-6C59AA625205}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2AC3AA20-1753-4389-A565-9FB66EC2AE95}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2BFC90E2-CBE4-4E0E-B223-4A933BCDD766}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2CCAE2D2-DC82-40FF-92F3-E53D3BCEDE46}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2CCEDFEF-1CCD-47D1-BB76-72EFD6EB0A66}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2E6616C2-459F-46D6-B85B-E9ACC591CB4C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{30D0F7C5-BA05-4F52-8E4E-653D740B9593}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{32C2A792-4F39-4A01-8B82-AEB568DC135A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{354CA703-9178-4200-982F-6F3F71DC9A47}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{356992C4-8207-4240-B0E6-DD3F4A8F67B8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{37BA0D53-A0A8-429B-90CE-6463877DB78C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3835D28F-8E9B-4B78-BFC9-524805636F08}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{384F5E87-9F25-4E7B-96AA-E5F11C62915D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{38D4A321-4100-4BF9-83A9-529A633D4037}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3A4CBDFF-1095-49B8-8879-ABE3AAFB7DD7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3D949276-70AF-4F4D-9B82-A03ED129F102}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3DF5E7FD-D7AA-43A3-86B2-B680AAA04909}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3E11254D-5BAC-42CC-A5D6-CAB7829A934F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3EA3D35C-1C50-4B8B-B1D2-763BAF183F9B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4248DE69-D1FA-4066-8C50-E768B7C8BE6A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{43FC2119-AC5E-4A65-8305-24A737D5A269}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{445A78D9-A17B-4A78-B94F-E23215FE37B8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{463CB620-9333-48B6-A0F6-DDF1997BEF7F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{46E1978A-49C4-4ADC-8616-2050A36003F9}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{481189F8-A67F-4A37-887B-3EF200062ECD}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{492BC164-AE9C-40ED-A6DC-CBDD466CA0C2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{49887326-CDE0-486A-A870-17F09EFDD750}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4ABBA807-2A5D-44C3-893D-28DB65AC3519}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4DB21EC0-DF3D-431D-89A6-79AA90A59A81}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4E2E2624-4078-4601-9592-727987A79677}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4EBA5256-AA10-4233-A4A8-1F3D23188C1C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4F1311E4-7503-434A-859B-BAC763919082}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{51523AF7-3BC6-4455-8F15-6F58664077F3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5348964B-86F6-43C8-A7A2-22A2F87A6925}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{576FCAE9-B26F-4CD7-B2C5-848B62DBBF30}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{585952C3-52DB-46D2-811E-AC91C8006037}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5BEF7603-5AAE-4330-9A89-11A0E5861A20}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5F01BBDC-0FCB-4B5B-B8F4-3CEA2EA15B2B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{60538968-4E00-4770-B792-5FCC05837683}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6105637B-FE5A-40CA-94D5-EB3AAF54C0D7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{62880CED-175F-45FE-92F3-AA1A620A9BC7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{63413761-CA77-405B-9F03-8302444BE677}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{63FDB144-6214-4121-8271-CDD5F66E6055}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{68ADF529-0E04-4648-AC70-97E077713196}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{69BF8703-066E-4F49-94DE-B3B0160BD1C7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6A5C721A-18D4-4751-AB51-BAA53D02D40C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6AA77B6E-C946-45F3-B64B-50AAE20B3243}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6AF54B64-306C-463E-8EDF-4B7EF3D5B122}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6BB03D55-5CB6-48D6-B2B6-2874E2BE2C77}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6F6768E3-E654-4058-8C4B-27BC25C2590E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6FCE5AC1-8164-4A43-B7BE-A1FD28371D61}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{720A529F-47E8-4C4D-B730-21A73E2A40EC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{767FB82C-539E-4E2C-8357-DF4C6241F621}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{77249B16-96A1-437E-9738-5AC82F624E07}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{77282672-1D93-4822-A172-880EE23477E8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7730D470-7D35-4FC9-80EA-E7083C5DBB92}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{775292E6-4DD0-446C-B917-5E27962B1AF0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7784369D-D2B1-4F86-BBDE-05B59336B8E2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7962C34D-580C-4168-B37D-11BD8532E761}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7A217C21-E30E-49C3-956A-9801828E7AEB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7D132F5E-6B25-4D26-9D63-954AE0609506}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7D542172-0ACA-48A9-B342-87888A8372EE}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E222F3B-D1E4-47D0-9ED0-6C5F3B280285}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E7DDF3F-7498-4EB1-B189-797827062888}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E94F26B-B909-4941-9130-8DDD61977A4B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{80822FE5-725C-4F9B-ABD4-0D9523AD8C8F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{81CC1FF0-30DC-479D-8FF6-A943A89BA4A5}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8281AB2F-4CF6-4EF7-8150-228074F65FE2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{829167BD-2857-4FD6-80D5-6698E8383F82}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8355B800-DCC2-41C9-857A-0E63F5AB3E9E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{861C0410-4697-42B4-A102-19F17C6F27FA}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{86392B1E-C3A8-4C1F-87C8-0431B3BF9F93}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{86581B70-6460-4846-A407-96E810F9DD90}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{872DC44F-E86F-4DE2-AE73-452894129D0C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{88124506-9E48-48B6-8AB2-E267CE48B7DD}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8835B369-8946-4616-919B-32E643F2417F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8A592CA4-DB70-4573-9238-07EC736374A8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8D75D763-A943-4E1A-B02D-998B09EAAF81}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8D9BF486-BAA6-459C-9E25-42B11C62568F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8F431B6C-2062-46B8-B6B1-8309D3A1FDD8}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{90FC0EA7-4D7D-4A0C-8FBC-B3D3F3CC73EC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{91F75464-32E8-4A6A-87F0-6EBEA68C4925}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{920DAC0B-53A9-4DD6-8B69-38068BD8F842}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{92340515-AF42-4AE0-90A0-F5AEB36574E2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{96059079-9037-4DAC-AD6D-A4C58618E095}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{967536DD-033E-4F09-9A37-CA6ACBE456E0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{979F67D3-4F08-4C75-883A-33AC58E0D2F0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{97F9E578-E6B2-4991-B88D-D8F1DCDE140B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9826E91B-99CC-4EA9-901B-5D66821CF34C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{985189A4-A423-4BD8-ADB8-4948811E0822}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{989E0FCE-F6DB-4AB7-8D72-0FA219955FC6}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{98EC8C92-84B1-4558-AF3B-2070D0C47F89}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{98FF7317-C7C0-4E67-9F8C-5E922AAC1F5F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{996ECF16-EFE5-407B-9615-DBA3D8B6A942}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{999E6196-591A-4F39-91C4-050CCE7795FE}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9A24A226-4213-479A-8902-4C0C1050C1AB}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9B3A01F1-0312-41C0-ACF7-BA58C7A1F116}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9F6A4995-4D89-4B8D-8C4C-57A2948AD664}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9FB78AD4-8C80-408D-8388-CDE2EEE5AB69}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A0E8627D-D51A-4676-B7FC-AEADBFA6FE19}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A2419EF0-D222-4869-AEA5-4B5FAB6A625E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A4DE0C52-C1BD-4F4D-98F7-A28A39865B98}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A51241D6-BA54-4796-9B17-9E1CA4BF59D6}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A67341BD-9300-4E15-A852-82E9A6297179}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A6FD4982-1E95-449F-8A44-1C0AD964DD88}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A7116CF3-8832-4DB8-9E86-25562786A6A7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A88742A8-8A68-4655-A69B-804EFDF15133}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A933E9C8-0405-45B4-9988-58EC563077F3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A95E21D1-0B45-4E31-8AB8-466547155288}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AAB58BB8-F46A-4D68-84E5-16DBF5474E48}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB35ED35-D0CE-42FE-A240-83CC7762C341}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB4F61F4-0655-4CBE-A88A-73712DECC2A3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB910F2C-09CA-49D8-AB57-B5E36BC2756D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AC2402CE-CE5A-446B-9A4E-BF2A7C62DADA}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AF4CB8A4-BCE2-416D-86D0-6B82FFEF84B2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AF8CBD4A-917A-4632-8AFF-14ABA8FD01DF}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B0FE29A3-6E42-4184-9B49-39C075AB2307}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B2318EAC-416F-425C-9832-99A249A11576}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B2F36011-08B1-4307-BBE1-705AC42C0A8E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B5B3FDFC-D596-4F81-A17B-0D68101C5830}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B6032455-9ABA-4D83-A575-8791E59471D1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B7DEC381-C980-4A9A-A968-C88F4F61427F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B8C7CAAB-D0B5-4830-96E6-1984382E6442}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B9F1C8F9-ABC4-4CD6-A6A9-81C19ED93A44}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BB567315-D678-445D-98C0-F361C6849DB7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BE692022-D3A3-4953-905D-9FE204910C4D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BE75401A-CA58-44BE-A040-82177A93EDB1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BF6DE305-24D3-42BB-AD89-66DDE6F42A6C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C22CF54D-7FE5-4553-A104-EA634F7B8215}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C3854701-3DA3-4E2C-B199-DC807FBACA92}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C458830B-C2F4-4810-9911-55A5EBE8820B}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C56CE98E-6394-4424-BB15-A0EDE1564230}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C624B7EE-B27D-4D88-A717-1EBA7D90BCD1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C63F761A-4B01-4E3D-A659-4BF90271F3D5}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C72F5DBD-6EBE-4576-A5E9-E071EDDEB290}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C783AC9A-4C0F-4F2B-84C3-5429D280B36D}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C99AA38E-BF2F-4F99-A2E1-466383F83E10}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{CFE2DF3C-9647-4163-BDE9-80436DD0DE18}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1079905-4CFA-4D8D-881B-BF0B39A9D175}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1524D66-0BC3-4B5B-A878-F9CC80F6BC9A}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1CEBD73-2F97-44F5-85A1-222E4C904B89}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D300D924-4636-447D-BD9D-F381A03ADCB1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3665EC1-BC34-49B8-931F-87187EB64FFF}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3C55E6A-3F1F-499E-B00C-B7B3CD965564}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3D9BA71-5CA7-4D4A-9022-E5CE66C98F0E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D471BA3E-0D25-4C2B-BB11-4AC13217A370}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D491FB06-5229-4B44-A387-5C526FC4F3A9}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D6C9D66B-A137-4141-B325-16733073DBF3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D7671A35-C4ED-4982-B094-67686940B25C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D79EE6A3-DD7F-4A2F-99A3-71FB1CB79BC7}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D87CE7D8-1BF3-4353-A956-2BFBFA0F5C2F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D9062EC1-27E3-46B6-A76A-2D98BCD7AC09}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DA02389A-82E5-4BD7-A978-F546AB5D869F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DA5A3BE7-2EA1-4DD1-9225-7631257D8232}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DAB6F8A6-C31E-474F-9BAE-7A5EA73B02CF}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DB91E6F1-D674-4C29-92FC-36C54D64D1A2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DC25708B-4742-4E9C-8C84-EB87A2337897}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DCA74457-88A7-4452-A193-038A613CF6E4}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DD96C9B8-1CA6-4BA1-ACC0-7E33631BA9D3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E07F1766-1354-4574-B66D-33F49CB01F71}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E0C6F95E-98A4-4909-A53B-1D9ABF569FED}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E2E55586-23B5-46F0-97AC-2A40DC5211CC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E32267B9-8A5A-4415-8859-E83965D940A1}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E3A088A2-52B3-4B45-BC43-30D30B0DF7EC}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E3E2F16B-CC68-472A-A785-33100F24BF42}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E47F7AC1-FBB5-4FC1-8D4F-C30C2593448F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E82A2B4A-7469-4E23-89A6-D82D577BD232}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E8BF4EC1-83C4-4934-9168-833A1FE9884C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E90AFE39-30F6-4F5E-B694-CC2813D158A3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E937D622-C969-42DC-85BD-B87A81737624}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E9418E1B-4AC3-4740-801C-FA0E3F25A45E}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E9561C0F-EDD6-4772-959A-03931E3066C3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EB503035-51DB-428B-8378-D3F8B2C7E389}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EBA4FC68-3E43-48E0-8966-2896CB29CEC0}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EC7BFF69-6348-4AD4-A057-CB76C198219C}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{ED5DEE0C-62C7-4ABC-A8FC-FB91683F5472}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EE806F14-1D31-4ECF-B605-D4F67EDD5995}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EFC0BEED-30A6-44F1-9742-179C0B583C19}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F045DDDB-E096-4424-819F-D1F0A37B9ED5}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F18F54F1-DE4D-4274-AEFE-49CFCE58A3DE}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F27DE02D-D90F-4D6F-9C0E-CC5DCE6C1CA6}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F46C0F15-41DF-4ACC-8034-A207E067BDB9}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F5A137CA-93E7-463C-B567-265E42447FB3}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F83ECA74-2920-45E8-A147-0315CA7C1663}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F9783BA1-F515-4401-93A2-3A1F7261ADED}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F9823311-FF5D-496B-807F-941CB7669AF5}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FA291353-0F8B-48E0-8C2C-43FACE088744}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FAD3C3A8-0445-4FA2-BD2D-E00C9D48EBF2}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FE338805-31C8-4541-B3F8-B76362AFB509}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FE993800-AC4C-46DC-B39E-E698E549307F}
Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FFB6E2CD-C493-469D-B29E-013B03779E83}
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.07.2014 at 15:30:59.73
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 27-07-2014 15:34:06
Running from C:\Users\Mirjam Zanetti\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff
Chrome:
=======
CHR HomePage:
CHR DefaultSearchKeyword: ask search
CHR DefaultSearchProvider: Ask Search
CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28]
CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]
CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]
CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26]
CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-27 15:34 - 2014-07-27 15:34 - 00018910 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-27 15:31 - 2014-07-27 15:30 - 00027492 _____ () C:\Users\Mirjam Zanetti\Desktop\JRT.txt
2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe
2014-07-27 15:12 - 2014-07-27 15:12 - 00006036 _____ () C:\Users\Mirjam Zanetti\Desktop\AdwCleaner[S2].txt
2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
2014-07-27 14:50 - 2014-07-27 14:50 - 00001160 _____ () C:\Users\Mirjam Zanetti\Desktop\mbam.txt
2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk
2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe
2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-27 15:09 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-24 11:52 - 2014-07-27 14:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 09:45 - 2014-07-27 15:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox
2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt
2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 19:27 - 2014-07-27 15:34 - 00000000 ____D () C:\FRST
2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-27 15:34 - 2014-07-27 15:34 - 00018910 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-27 15:34 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST
2014-07-27 15:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-27 15:30 - 2014-07-27 15:31 - 00027492 _____ () C:\Users\Mirjam Zanetti\Desktop\JRT.txt
2014-07-27 15:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job
2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe
2014-07-27 15:18 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-27 15:18 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-27 15:12 - 2014-07-27 15:12 - 00006036 _____ () C:\Users\Mirjam Zanetti\Desktop\AdwCleaner[S2].txt
2014-07-27 15:12 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-27 15:12 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi
2014-07-27 15:09 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-27 15:09 - 2010-11-21 05:47 - 01757666 _____ () C:\Windows\PFRO.log
2014-07-27 15:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-27 15:09 - 2009-07-14 06:51 - 00102932 _____ () C:\Windows\setupact.log
2014-07-27 15:04 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner
2014-07-27 15:04 - 2012-06-29 12:21 - 01261315 _____ () C:\Windows\WindowsUpdate.log
2014-07-27 15:03 - 2013-03-30 16:36 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2014-07-27 14:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
2014-07-27 14:50 - 2014-07-27 14:50 - 00001160 _____ () C:\Users\Mirjam Zanetti\Desktop\mbam.txt
2014-07-27 14:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk
2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe
2014-07-27 13:54 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-27 10:35 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi
2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent
2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype
2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi
2014-07-26 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job
2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol
2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim
2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol
2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven
2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol
2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti
2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0
2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP
2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012
2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat
2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat
2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox
2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt
2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert
2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport
2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps
2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET
2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk
2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp
2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
Some content of TEMP:
====================
C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe
C:\Users\Mirjam Zanetti\AppData\Local\temp\Quarantine.exe
C:\Users\Sven\AppData\Local\temp\avgnt.exe
C:\Users\Sven\AppData\Local\temp\Quarantine.exe
C:\Users\Tim\AppData\Local\temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2013-03-25 09:03
==================== End Of Log ============================
|
|
27.07.2014, 20:12
| #26 |
| /// the machine /// TB-Ausbilder | (save , on) Links im Internet & Chrome funktioniert nicht richtigESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
28.07.2014, 12:50
| #27 |
| | (save , on) Links im Internet & Chrome funktioniert nicht richtig Moin, ich hab statt ESET wieder nen Vollscan mit Avira gemacht, hoffe das ist in Ordnung Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 28. Juli 2014 08:38
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 7 Home Premium
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : Mirjam Zanetti
Computername : MirjamZanetti
Versionsinformationen:
BUILD.DAT : 14.0.5.464 91868 Bytes 02.07.2014 13:06:00
AVSCAN.EXE : 14.0.5.396 1042512 Bytes 02.07.2014 11:06:43
AVSCANRC.DLL : 14.0.5.364 62544 Bytes 02.07.2014 11:06:43
LUKE.DLL : 14.0.5.336 57936 Bytes 02.07.2014 11:06:46
AVSCPLR.DLL : 14.0.5.376 89680 Bytes 02.07.2014 11:06:43
AVREG.DLL : 14.0.5.356 261200 Bytes 02.07.2014 11:06:43
avlode.dll : 14.0.5.396 588368 Bytes 02.07.2014 11:06:42
avlode.rdf : 14.0.4.42 65114 Bytes 19.07.2014 17:26:05
XBV00008.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00009.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00010.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00011.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00012.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00013.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00014.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00015.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00016.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00017.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00018.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00019.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00020.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00021.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00022.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00023.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00024.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00025.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00026.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00027.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00028.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00029.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00030.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00031.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00032.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00033.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00034.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00035.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00036.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00037.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00038.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00039.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00040.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00041.VDF : 8.11.153.142 2048 Bytes 06.06.2014 11:06:47
XBV00195.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00196.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:24
XBV00197.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00198.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00199.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00200.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00201.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00202.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00203.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00204.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00205.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00206.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00207.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00208.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00209.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:25
XBV00210.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00211.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00212.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00213.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00214.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00215.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00216.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00217.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00218.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00219.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00220.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00221.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00222.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00223.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:26
XBV00224.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00225.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00226.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00227.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00228.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00229.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00230.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00231.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00232.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00233.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00234.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00235.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00236.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00237.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00238.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:27
XBV00239.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00240.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00241.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00242.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00243.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00244.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00245.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00246.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00247.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00248.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00249.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00250.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00251.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:28
XBV00252.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:29
XBV00253.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:29
XBV00254.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:29
XBV00255.VDF : 8.11.159.102 2048 Bytes 08.07.2014 14:51:29
XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 11:06:47
XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 11:06:47
XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 11:06:47
XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 11:06:47
XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 11:06:47
XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 11:06:47
XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 11:06:47
XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 11:06:47
XBV00042.VDF : 8.11.153.142 710656 Bytes 06.06.2014 11:06:47
XBV00043.VDF : 8.11.155.44 1013760 Bytes 16.06.2014 11:06:47
XBV00044.VDF : 8.11.159.102 1662976 Bytes 08.07.2014 14:50:53
XBV00045.VDF : 8.11.159.104 13824 Bytes 08.07.2014 14:50:53
XBV00046.VDF : 8.11.159.108 13312 Bytes 08.07.2014 14:50:53
XBV00047.VDF : 8.11.159.112 30720 Bytes 09.07.2014 14:50:54
XBV00048.VDF : 8.11.159.114 6144 Bytes 09.07.2014 14:50:54
XBV00049.VDF : 8.11.159.116 10240 Bytes 09.07.2014 14:50:54
XBV00050.VDF : 8.11.159.118 5632 Bytes 09.07.2014 14:50:54
XBV00051.VDF : 8.11.159.122 7168 Bytes 09.07.2014 14:50:54
XBV00052.VDF : 8.11.159.126 180736 Bytes 09.07.2014 14:50:58
XBV00053.VDF : 8.11.159.148 174080 Bytes 09.07.2014 14:51:04
XBV00054.VDF : 8.11.159.168 2560 Bytes 09.07.2014 14:51:04
XBV00055.VDF : 8.11.159.188 15360 Bytes 09.07.2014 14:51:05
XBV00056.VDF : 8.11.159.210 25600 Bytes 09.07.2014 14:51:05
XBV00057.VDF : 8.11.159.212 7168 Bytes 09.07.2014 14:51:05
XBV00058.VDF : 8.11.159.218 27648 Bytes 10.07.2014 14:51:06
XBV00059.VDF : 8.11.159.220 2048 Bytes 10.07.2014 14:51:06
XBV00060.VDF : 8.11.159.222 29696 Bytes 10.07.2014 14:51:07
XBV00061.VDF : 8.11.159.224 167936 Bytes 10.07.2014 14:51:13
XBV00062.VDF : 8.11.159.226 35328 Bytes 10.07.2014 14:51:14
XBV00063.VDF : 8.11.159.230 186368 Bytes 10.07.2014 20:49:51
XBV00064.VDF : 8.11.159.250 16896 Bytes 10.07.2014 20:49:51
XBV00065.VDF : 8.11.159.252 2048 Bytes 10.07.2014 20:49:51
XBV00066.VDF : 8.11.160.16 6144 Bytes 10.07.2014 20:49:51
XBV00067.VDF : 8.11.160.40 17408 Bytes 10.07.2014 10:12:52
XBV00068.VDF : 8.11.160.42 2048 Bytes 11.07.2014 10:12:54
XBV00069.VDF : 8.11.160.46 179200 Bytes 11.07.2014 10:12:55
XBV00070.VDF : 8.11.160.48 203264 Bytes 11.07.2014 14:37:58
XBV00071.VDF : 8.11.160.50 6144 Bytes 11.07.2014 14:37:58
XBV00072.VDF : 8.11.160.52 2048 Bytes 11.07.2014 14:37:58
XBV00073.VDF : 8.11.160.54 2048 Bytes 11.07.2014 14:37:58
XBV00074.VDF : 8.11.160.58 22016 Bytes 11.07.2014 14:37:58
XBV00075.VDF : 8.11.160.60 2048 Bytes 11.07.2014 14:37:58
XBV00076.VDF : 8.11.160.62 8192 Bytes 11.07.2014 14:37:58
XBV00077.VDF : 8.11.160.66 198656 Bytes 12.07.2014 14:38:00
XBV00078.VDF : 8.11.160.68 7168 Bytes 12.07.2014 14:38:00
XBV00079.VDF : 8.11.160.70 14848 Bytes 12.07.2014 14:38:00
XBV00080.VDF : 8.11.160.72 7168 Bytes 12.07.2014 14:38:00
XBV00081.VDF : 8.11.160.92 40448 Bytes 13.07.2014 14:37:40
XBV00082.VDF : 8.11.160.112 2048 Bytes 13.07.2014 14:37:40
XBV00083.VDF : 8.11.160.130 193024 Bytes 13.07.2014 14:37:42
XBV00084.VDF : 8.11.160.132 2048 Bytes 13.07.2014 14:37:42
XBV00085.VDF : 8.11.160.152 20480 Bytes 13.07.2014 20:37:37
XBV00086.VDF : 8.11.160.154 2048 Bytes 13.07.2014 20:37:37
XBV00087.VDF : 8.11.160.156 20992 Bytes 14.07.2014 08:37:41
XBV00088.VDF : 8.11.160.158 2560 Bytes 14.07.2014 08:37:41
XBV00089.VDF : 8.11.160.160 11264 Bytes 14.07.2014 14:37:42
XBV00090.VDF : 8.11.160.162 2560 Bytes 14.07.2014 14:37:42
XBV00091.VDF : 8.11.160.166 14336 Bytes 14.07.2014 14:37:42
XBV00092.VDF : 8.11.160.168 5120 Bytes 14.07.2014 14:37:42
XBV00093.VDF : 8.11.160.178 7168 Bytes 14.07.2014 20:37:41
XBV00094.VDF : 8.11.160.180 2048 Bytes 14.07.2014 20:37:41
XBV00095.VDF : 8.11.160.182 2048 Bytes 14.07.2014 20:37:41
XBV00096.VDF : 8.11.160.188 256000 Bytes 14.07.2014 02:37:43
XBV00097.VDF : 8.11.160.190 7680 Bytes 14.07.2014 02:37:43
XBV00098.VDF : 8.11.160.194 18432 Bytes 15.07.2014 08:37:38
XBV00099.VDF : 8.11.160.212 184832 Bytes 15.07.2014 19:24:53
XBV00100.VDF : 8.11.160.230 289792 Bytes 15.07.2014 19:24:55
XBV00101.VDF : 8.11.160.232 2048 Bytes 15.07.2014 19:24:55
XBV00102.VDF : 8.11.160.234 176128 Bytes 15.07.2014 19:24:56
XBV00103.VDF : 8.11.160.254 18432 Bytes 15.07.2014 17:26:06
XBV00104.VDF : 8.11.161.16 6144 Bytes 16.07.2014 17:26:06
XBV00105.VDF : 8.11.161.32 2048 Bytes 16.07.2014 17:26:06
XBV00106.VDF : 8.11.161.34 2048 Bytes 16.07.2014 17:26:06
XBV00107.VDF : 8.11.161.52 26624 Bytes 16.07.2014 17:26:07
XBV00108.VDF : 8.11.161.68 184832 Bytes 16.07.2014 17:26:08
XBV00109.VDF : 8.11.161.84 2048 Bytes 16.07.2014 17:26:08
XBV00110.VDF : 8.11.162.2 2560 Bytes 16.07.2014 17:26:08
XBV00111.VDF : 8.11.162.6 16896 Bytes 16.07.2014 17:26:08
XBV00112.VDF : 8.11.162.8 24064 Bytes 16.07.2014 17:26:08
XBV00113.VDF : 8.11.162.10 2560 Bytes 16.07.2014 17:26:09
XBV00114.VDF : 8.11.162.14 41472 Bytes 17.07.2014 17:26:09
XBV00115.VDF : 8.11.162.16 2048 Bytes 17.07.2014 17:26:09
XBV00116.VDF : 8.11.162.18 215040 Bytes 17.07.2014 17:26:10
XBV00117.VDF : 8.11.162.22 184320 Bytes 17.07.2014 17:26:12
XBV00118.VDF : 8.11.162.40 258048 Bytes 17.07.2014 17:26:14
XBV00119.VDF : 8.11.162.42 3584 Bytes 17.07.2014 17:26:14
XBV00120.VDF : 8.11.162.58 3072 Bytes 17.07.2014 17:26:14
XBV00121.VDF : 8.11.162.78 2048 Bytes 17.07.2014 17:26:14
XBV00122.VDF : 8.11.162.94 2048 Bytes 17.07.2014 17:26:14
XBV00123.VDF : 8.11.162.110 35840 Bytes 17.07.2014 17:26:14
XBV00124.VDF : 8.11.162.112 2048 Bytes 18.07.2014 17:26:14
XBV00125.VDF : 8.11.162.130 23040 Bytes 18.07.2014 17:26:14
XBV00126.VDF : 8.11.162.134 184320 Bytes 18.07.2014 17:26:16
XBV00127.VDF : 8.11.162.136 2048 Bytes 18.07.2014 17:26:16
XBV00128.VDF : 8.11.162.152 231424 Bytes 18.07.2014 17:26:22
XBV00129.VDF : 8.11.162.154 2048 Bytes 18.07.2014 17:26:22
XBV00130.VDF : 8.11.162.170 108032 Bytes 18.07.2014 17:26:25
XBV00131.VDF : 8.11.162.172 9728 Bytes 18.07.2014 17:26:25
XBV00132.VDF : 8.11.162.174 2048 Bytes 18.07.2014 17:26:25
XBV00133.VDF : 8.11.162.188 20992 Bytes 18.07.2014 17:26:25
XBV00134.VDF : 8.11.162.192 2048 Bytes 18.07.2014 17:26:25
XBV00135.VDF : 8.11.162.194 2048 Bytes 18.07.2014 17:26:26
XBV00136.VDF : 8.11.162.200 19968 Bytes 18.07.2014 17:26:26
XBV00137.VDF : 8.11.162.204 2048 Bytes 18.07.2014 17:26:26
XBV00138.VDF : 8.11.162.212 2048 Bytes 18.07.2014 17:26:26
XBV00139.VDF : 8.11.162.228 227840 Bytes 19.07.2014 17:26:27
XBV00140.VDF : 8.11.162.244 2048 Bytes 19.07.2014 17:26:27
XBV00141.VDF : 8.11.163.2 31232 Bytes 19.07.2014 17:26:28
XBV00142.VDF : 8.11.163.16 62464 Bytes 20.07.2014 16:13:15
XBV00143.VDF : 8.11.163.20 202752 Bytes 20.07.2014 16:13:17
XBV00144.VDF : 8.11.163.22 2048 Bytes 20.07.2014 16:13:17
XBV00145.VDF : 8.11.163.26 50176 Bytes 21.07.2014 10:13:04
XBV00146.VDF : 8.11.163.28 23040 Bytes 21.07.2014 10:13:05
XBV00147.VDF : 8.11.163.42 6144 Bytes 21.07.2014 10:13:05
XBV00148.VDF : 8.11.163.44 2560 Bytes 21.07.2014 10:13:05
XBV00149.VDF : 8.11.163.56 5120 Bytes 21.07.2014 10:13:05
XBV00150.VDF : 8.11.163.68 8192 Bytes 21.07.2014 16:13:27
XBV00151.VDF : 8.11.163.74 213504 Bytes 21.07.2014 16:13:28
XBV00152.VDF : 8.11.163.78 22528 Bytes 22.07.2014 04:13:04
XBV00153.VDF : 8.11.163.82 2560 Bytes 22.07.2014 10:13:30
XBV00154.VDF : 8.11.163.84 181248 Bytes 22.07.2014 10:13:31
XBV00155.VDF : 8.11.163.86 9728 Bytes 22.07.2014 10:13:31
XBV00156.VDF : 8.11.163.92 2560 Bytes 22.07.2014 16:13:16
XBV00157.VDF : 8.11.163.98 230400 Bytes 22.07.2014 22:13:15
XBV00158.VDF : 8.11.163.100 2048 Bytes 22.07.2014 22:13:15
XBV00159.VDF : 8.11.163.102 2048 Bytes 22.07.2014 22:13:15
XBV00160.VDF : 8.11.163.108 22528 Bytes 22.07.2014 22:13:15
XBV00161.VDF : 8.11.163.112 17920 Bytes 22.07.2014 04:13:11
XBV00162.VDF : 8.11.163.116 2048 Bytes 23.07.2014 04:13:11
XBV00163.VDF : 8.11.163.130 194048 Bytes 23.07.2014 10:13:40
XBV00164.VDF : 8.11.163.142 20992 Bytes 23.07.2014 10:13:40
XBV00165.VDF : 8.11.163.154 11776 Bytes 23.07.2014 16:13:16
XBV00166.VDF : 8.11.163.158 17920 Bytes 23.07.2014 16:13:16
XBV00167.VDF : 8.11.163.164 2048 Bytes 23.07.2014 16:13:17
XBV00168.VDF : 8.11.163.170 14848 Bytes 23.07.2014 07:42:57
XBV00169.VDF : 8.11.163.174 193024 Bytes 23.07.2014 07:43:00
XBV00170.VDF : 8.11.163.176 3072 Bytes 23.07.2014 07:43:01
XBV00171.VDF : 8.11.163.178 3072 Bytes 23.07.2014 07:43:01
XBV00172.VDF : 8.11.163.184 199168 Bytes 24.07.2014 07:43:09
XBV00173.VDF : 8.11.163.186 421376 Bytes 24.07.2014 13:42:49
XBV00174.VDF : 8.11.163.198 2048 Bytes 24.07.2014 13:42:49
XBV00175.VDF : 8.11.163.200 2048 Bytes 24.07.2014 13:42:49
XBV00176.VDF : 8.11.163.212 212992 Bytes 24.07.2014 19:42:59
XBV00177.VDF : 8.11.163.222 34816 Bytes 24.07.2014 19:42:59
XBV00178.VDF : 8.11.163.226 2048 Bytes 24.07.2014 19:42:59
XBV00179.VDF : 8.11.163.230 21504 Bytes 24.07.2014 08:55:39
XBV00180.VDF : 8.11.163.234 18944 Bytes 25.07.2014 08:55:39
XBV00181.VDF : 8.11.163.236 6656 Bytes 25.07.2014 08:55:39
XBV00182.VDF : 8.11.163.238 2048 Bytes 25.07.2014 08:55:39
XBV00183.VDF : 8.11.163.240 198144 Bytes 25.07.2014 08:55:39
XBV00184.VDF : 8.11.163.244 38400 Bytes 25.07.2014 08:55:39
XBV00185.VDF : 8.11.163.246 2048 Bytes 25.07.2014 08:55:39
XBV00186.VDF : 8.11.163.248 6144 Bytes 25.07.2014 08:55:39
XBV00187.VDF : 8.11.163.252 11776 Bytes 25.07.2014 08:55:39
XBV00188.VDF : 8.11.163.254 2048 Bytes 25.07.2014 08:55:39
XBV00189.VDF : 8.11.164.2 2048 Bytes 26.07.2014 08:55:39
XBV00190.VDF : 8.11.164.6 5120 Bytes 26.07.2014 14:55:17
XBV00191.VDF : 8.11.164.8 2048 Bytes 26.07.2014 14:55:17
XBV00192.VDF : 8.11.164.20 32768 Bytes 26.07.2014 08:39:11
XBV00193.VDF : 8.11.164.30 2048 Bytes 26.07.2014 08:39:11
XBV00194.VDF : 8.11.164.42 37376 Bytes 27.07.2014 14:38:27
LOCAL001.VDF : 8.11.164.42 108966400 Bytes 27.07.2014 14:38:45
Engineversion : 8.3.22.12
AEVDF.DLL : 8.3.0.4 118976 Bytes 02.07.2014 11:06:41
AESCRIPT.DLL : 8.2.0.12 426184 Bytes 21.07.2014 16:13:27
AESCN.DLL : 8.3.2.2 139456 Bytes 21.07.2014 16:13:25
AESBX.DLL : 8.2.20.24 1409224 Bytes 02.07.2014 11:06:41
AERDL.DLL : 8.2.0.138 704888 Bytes 02.07.2014 11:06:41
AEPACK.DLL : 8.4.0.42 786632 Bytes 10.07.2014 14:50:04
AEOFFICE.DLL : 8.3.0.14 213192 Bytes 21.07.2014 16:13:25
AEHEUR.DLL : 8.1.4.1166 7233736 Bytes 21.07.2014 16:13:24
AEHELP.DLL : 8.3.1.0 278728 Bytes 02.07.2014 11:06:41
AEGEN.DLL : 8.1.7.28 450752 Bytes 02.07.2014 11:06:41
AEEXP.DLL : 8.4.2.6 237760 Bytes 02.07.2014 11:06:41
AEEMU.DLL : 8.1.3.2 393587 Bytes 02.07.2014 11:06:41
AEDROID.DLL : 8.4.2.24 442568 Bytes 02.07.2014 11:06:41
AECORE.DLL : 8.3.2.2 241864 Bytes 21.07.2014 16:13:03
AEBB.DLL : 8.1.1.4 53619 Bytes 02.07.2014 11:06:41
AVWINLL.DLL : 14.0.5.320 24144 Bytes 02.07.2014 11:06:44
AVPREF.DLL : 14.0.5.320 50256 Bytes 02.07.2014 11:06:43
AVREP.DLL : 14.0.5.320 219216 Bytes 02.07.2014 11:06:43
AVARKT.DLL : 14.0.5.368 226384 Bytes 02.07.2014 11:06:42
AVEVTLOG.DLL : 14.0.5.320 182352 Bytes 02.07.2014 11:06:42
SQLITE3.DLL : 14.0.5.320 452176 Bytes 02.07.2014 11:06:47
AVSMTP.DLL : 14.0.5.320 76368 Bytes 02.07.2014 11:06:44
NETNT.DLL : 14.0.5.320 13392 Bytes 02.07.2014 11:06:46
RCIMAGE.DLL : 14.0.5.320 4998224 Bytes 02.07.2014 11:06:46
RCTEXT.DLL : 14.0.5.322 73808 Bytes 02.07.2014 11:06:46
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Beginn des Suchlaufs: Montag, 28. Juli 2014 08:38
Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D:)'
[INFO] Es wurde kein Virus gefunden!
Der Suchlauf nach versteckten Objekten wird begonnen.
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '87' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '163' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '97' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '107' Modul(e) wurden durchsucht
Durchsuche Prozess 'HD-LogRotatorService.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'dtsrvc.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'GREGsvc.exe' - '23' Modul(e) wurden durchsucht
Durchsuche Prozess 'UpdaterService.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMIGuardianSvc.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamscheduler.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbamservice.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'NOBuAgent.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'pdisrvc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'sqlwriter.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSVC.EXE' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '131' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'EscSvc64.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'hamachi-2.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'mbam.exe' - '96' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '160' Modul(e) wurden durchsucht
Durchsuche Prozess 'ScanToPCActivationApp.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'GoogleUpdate.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '136' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'hamachi-2-ui.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '147' Modul(e) wurden durchsucht
Durchsuche Prozess 'NASvc.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '117' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'wuauclt.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht
Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '11298' Dateien ).
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\' <Acer>
Beginne mit der Suche in 'D:\' <DATA>
Ende des Suchlaufs: Montag, 28. Juli 2014 13:16
Benötigte Zeit: 4:38:30 Stunde(n)
Der Suchlauf wurde vollständig durchgeführt.
106320 Verzeichnisse wurden überprüft
2498227 Dateien wurden geprüft
0 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
0 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
2498227 Dateien ohne Befall
26157 Archive wurden durchsucht
0 Warnungen
0 Hinweise
1732524 Objekte wurden beim Rootkitscan durchsucht
0 Versteckte Objekte wurden gefunden
Code:
ATTFilter Results of screen317's Security Check version 0.99.85 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` WinTuneUp 1.0 Visual Studio Extensions for Windows Library for JavaScript Java 7 Update 65 JavaScript Tooling Java version out of Date! Adobe Flash Player 14.0.0.145 Adobe Reader XI Google Chrome 35.0.1916.114 Google Chrome 36.0.1985.125 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes Anti-Malware mbamscheduler.exe Symantec Norton Online Backup NOBuAgent.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014 Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 28-07-2014 13:41:32 Running from C:\Users\Mirjam Zanetti\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.) HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation) HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.) BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc) BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31] FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25] FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff Chrome: ======= CHR HomePage: CHR DefaultSearchKeyword: ask search CHR DefaultSearchProvider: Ask Search CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms} CHR DefaultNewTabURL: CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28] CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23] CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23] CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26] CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26] CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26] CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG) S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG) S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com) S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.) R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed] S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed] S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems) R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-28] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-28 13:41 - 2014-07-28 13:41 - 00019484 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt 2014-07-28 13:41 - 2014-07-28 13:41 - 00001141 _____ () C:\Users\Mirjam Zanetti\Desktop\security.txt 2014-07-28 13:40 - 2014-07-28 13:41 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++ 2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe 2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk 2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon 2014-07-27 18:46 - 2014-07-27 18:49 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar 2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe 2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe 2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk 2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe 2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe 2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS 2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk 2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-24 11:52 - 2014-07-28 12:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-24 11:52 - 2014-07-28 11:57 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira 2014-07-23 09:45 - 2014-07-28 13:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log 2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe 2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe 2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe 2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe 2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira 2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt 2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt 2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe 2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt 2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt 2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe 2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt 2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion 2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira 2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira 2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe 2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt 2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk 2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox 2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt 2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe 2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe 2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz 2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame 2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe 2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe 2014-07-07 19:27 - 2014-07-28 13:41 - 00000000 ____D () C:\FRST 2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe 2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc 2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk 2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment 2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment 2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe 2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download 2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-28 13:42 - 2014-07-28 13:41 - 00019484 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt 2014-07-28 13:41 - 2014-07-28 13:41 - 00001141 _____ () C:\Users\Mirjam Zanetti\Desktop\security.txt 2014-07-28 13:41 - 2014-07-28 13:40 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++ 2014-07-28 13:41 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST 2014-07-28 13:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe 2014-07-28 13:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job 2014-07-28 13:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job 2014-07-28 12:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-28 11:57 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-28 09:47 - 2012-06-29 12:21 - 01291444 _____ () C:\Windows\WindowsUpdate.log 2014-07-28 09:20 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-28 08:42 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-28 08:42 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-28 08:36 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi 2014-07-28 08:34 - 2010-11-21 05:47 - 01759436 _____ () C:\Windows\PFRO.log 2014-07-28 08:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-28 08:34 - 2009-07-14 06:51 - 00102988 _____ () C:\Windows\setupact.log 2014-07-27 19:38 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-07-27 19:05 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps 2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk 2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon 2014-07-27 18:49 - 2014-07-27 18:46 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar 2014-07-27 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job 2014-07-27 16:08 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi 2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe 2014-07-27 15:04 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner 2014-07-27 15:03 - 2013-03-30 16:36 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather 2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe 2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk 2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe 2014-07-27 13:54 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe 2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent 2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype 2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi 2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol 2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim 2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol 2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven 2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol 2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti 2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS 2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt 2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion 2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe 2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk 2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment 2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0 2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google 2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira 2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP 2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter 2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle 2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log 2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java 2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe 2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe 2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe 2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012 2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe 2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat 2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat 2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat 2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat 2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat 2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat 2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira 2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt 2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT 2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe 2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt 2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt 2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe 2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt 2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE 2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira 2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira 2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe 2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache 2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt 2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox 2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt 2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert 2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport 2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe 2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk 2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET 2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe 2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk 2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz 2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp 2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment 2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame 2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame 2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe 2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe 2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc 2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk 2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment 2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe 2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download 2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download 2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll Some content of TEMP: ==================== C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe C:\Users\Mirjam Zanetti\AppData\Local\temp\Quarantine.exe C:\Users\Sven\AppData\Local\temp\avgnt.exe C:\Users\Sven\AppData\Local\temp\Quarantine.exe C:\Users\Tim\AppData\Local\temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2013-03-25 09:03 ==================== End Of Log ============================ Die Erweiterung ist weiterhin in Chrome installiert, allerdings ist sie deaktiviert und aktiviert sich nicht mehr von allein. |
|
29.07.2014, 07:19
| #28 |
| /// the machine /// TB-Ausbilder | (save , on) Links im Internet & Chrome funktioniert nicht richtig Java gibt es schon in Version 8. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]
CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
29.07.2014, 09:23
| #29 |
| | (save , on) Links im Internet & Chrome funktioniert nicht richtig Guten Morgen Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-07-2014
Ran by Mirjam Zanetti at 2014-07-29 10:20:28 Run:2
Running from C:\Users\Mirjam Zanetti\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]
CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
*****************
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} => Value not found.
C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm => Moved successfully.
C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
esgiguard => Service deleted successfully.
==== End of Fixlog ====
 |
|
29.07.2014, 11:45
| #30 |
| /// the machine /// TB-Ausbilder | (save , on) Links im Internet & Chrome funktioniert nicht richtig Revo Uninstaller - Download - Filepony damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.google.com/chrome/answer/3296214?hl=de Frisches FRST log bitte. Verbindest Du Chrome mit einem Google Konto?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu (save , on) Links im Internet & Chrome funktioniert nicht richtig |
| adware/agentcv.a.14238, adware/bho.bprotector.13, adware/installrex.gen, awesomehp, awesomehp entfernen, conduit search, conduit search entfernen, funktioniert nicht, js/blacole.gb.105, mobogenie, mobogenie entfernen, nationzoom, nationzoom entfernen, save.on adware chrome, spyhunter, spyhunter entfernen, tr/dropper.a.24596, tr/spy.gen |
Revo Uninstaller herunter.
dann auf 
und dann auf 
.
Linear-Darstellung
