| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Ungewolltes Aktivieren der Proxyserververbindung in den InterneteinstellungenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
12.08.2014, 18:22
| #16 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Jo, die Logs wären gut
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
12.08.2014, 18:25
| #17 | |
| /// Helfer-Team   | Ungewolltes Aktivieren der Proxyserververbindung in den InterneteinstellungenZitat:
OT Hallo Cosinus Du siehst, meine Gedanken gehen in eine ganz andere Richtung Nicht überall müssen Schädlinge schuld sein. LG /OT
__________________ |
|
12.08.2014, 19:03
| #18 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ungewolltes Aktivieren der Proxyserververbindung in den InterneteinstellungenZitat:
 Hier hab ich aber (noch) nicht drauf geschaut welche Edition von Windows genau werkelt Natürlich hast du recht, dass nicht immer Schädlinge am Werkeln sein müssen, aber hier hatte den Verdacht wegen des nicht sich startenden FRST und dem Proxy in nur bestimmten Browsern.
__________________ |
|
12.08.2014, 19:48
| #19 | |
 | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen zuerst die FRST.txt: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Admin (administrator) on ADMIN-PC on 12-08-2014 17:56:09
Running from C:\Users\Admin\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
(Evoluent) C:\Program Files\Evoluent\VMouse\EvoMouseExec.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe
(AGFEO ) C:\Program Files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\WizMouse\WizMouse.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AGFEO ) C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe
() C:\Program Files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(AGFEO ) C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tkmedia.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Firetrust) C:\Program Files (x86)\Firetrust\MailWasher\MailWasherPro.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(ESTOS GmbH) C:\Program Files (x86)\ESTOS\ProCall One\ECtiClientOne.exe
(Marek Jasinski) C:\Program Files (x86)\FreeCommander XE\FreeCommander.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [BullGuardUpdate2] => c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe [2933584 2014-08-06] (BullGuard Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-19] (Realtek Semiconductor)
HKLM\...\Run: [IntelliType Pro] => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1464944 2012-11-02] (Microsoft Corporation)
HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2076272 2012-11-02] (Microsoft Corporation)
HKLM\...\Run: [BullGuard] => C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe [1319248 2014-08-07] (BullGuard Ltd.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613536 2010-10-27] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-10-27] (Atheros Commnucations)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)
HKLM\...\Run: [BgDelayStartup] => c:\program files\bullguard ltd\bullguard\BgDelayStartup.exe [86352 2014-07-31] (BullGuard Ltd.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440 2014-02-07] (Tlapia)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-79635218-2301998975-3311727660-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-79635218-2301998975-3311727660-1000\...\Run: [CAHeadless] => C:\Program Files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe [1401040 2014-05-09] (Adobe Systems Incorporated)
AppInit_DLLs: C:\Windows\System32\BgGamingMonitor.dll => C:\Windows\System32\BgGamingMonitor.dll [153712 2014-08-07] (BullGuard Ltd.)
AppInit_DLLs: c:\PROGRA~1\BULLGU~1\BULLGU~1\BgAgent.dll => c:\Program Files\BullGuard Ltd\BullGuard\BgAgent.dll [100656 2014-07-31] (BullGuard Ltd.)
AppInit_DLLs-x32: C:\Windows\System32\BgGamingMonitor.dll => C:\Windows\SysWOW64\BgGamingMonitor.dll [140280 2014-08-07] (BullGuard Ltd.)
AppInit_DLLs-x32: c:\PROGRA~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll => c:\Program Files\BullGuard Ltd\BullGuard\Files32\BgAgent.dll [86200 2014-07-31] (BullGuard Ltd.)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Evoluent Mouse Manager.lnk
ShortcutTarget: Evoluent Mouse Manager.lnk -> C:\Windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe ()
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PhraseExpress.lnk
ShortcutTarget: PhraseExpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ProCall One.lnk
ShortcutTarget: ProCall One.lnk -> C:\Program Files (x86)\ESTOS\ProCall One\ECtiClientOne.exe (ESTOS GmbH)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TK-Suite Client.lnk
ShortcutTarget: TK-Suite Client.lnk -> C:\Program Files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe (AGFEO )
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Evoluent Mouse Manager.lnk
ShortcutTarget: Evoluent Mouse Manager.lnk -> C:\Windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe ()
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PhraseExpress.lnk
ShortcutTarget: PhraseExpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ProCall One.lnk
ShortcutTarget: ProCall One.lnk -> C:\Program Files (x86)\ESTOS\ProCall One\ECtiClientOne.exe (ESTOS GmbH)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TK-Suite Client.lnk
ShortcutTarget: TK-Suite Client.lnk -> C:\Program Files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe (AGFEO )
ShellIconOverlayIdentifiers: BackupOverlayErr -> {8749448C-D907-45BF-A842-4D3898894AC8} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll (BullGuard Ltd.)
ShellIconOverlayIdentifiers: BackupOverlayInProgress -> {3FFBF330-7839-476B-BE14-2C8597CE11B6} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll (BullGuard Ltd.)
ShellIconOverlayIdentifiers: BackupOverlaySynced -> {C62CF4DB-48CB-4B03-BFD0-30A29125FA49} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll (BullGuard Ltd.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyServer: http=127.0.0.1:8877
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x954321BBB774CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll ()
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: PDFXChange 4.0 IE Plugin -> {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} -> C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll (Tracker Softaware)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll ()
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll ()
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll ()
Toolbar: HKLM-x32 - PDFXChange 4.0 IE Plugin - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll (Tracker Softaware)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\searchplugins\acoon.xml
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\searchplugins\startpage-https---deutsch.xml
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\searchplugins\wolframalpha.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: LastPass - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\support@lastpass.com [2014-08-12]
FF Extension: Autocopy - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\{0FED7D55-65D4-47b6-A6DE-9A4ADB55355F} [2013-01-07]
FF Extension: FireGestures - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\firegestures@xuldev.org.xpi [2012-08-09]
FF Extension: Secure Login - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\secureLogin@blueimp.net.xpi [2012-08-16]
FF Extension: Tile Tabs - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\tiletabs@DW-dev.xpi [2014-05-06]
FF Extension: BetterPrivacy - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2012-09-17]
FF HKLM-x32\...\Firefox\Extensions: [antiphishing@bullguard] - c:\program files\bullguard ltd\bullguard\Files32\Antiphishing\FF\antiphishing@bullguard
FF Extension: BullGuard Safe Browsing - c:\program files\bullguard ltd\bullguard\Files32\Antiphishing\FF\antiphishing@bullguard [2013-07-29]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-05-04]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
CHR HomePage: hxxp://www.netvibes.com/privatepage/4#Home
CHR StartupUrls: "hxxp://blog.24stundenbetreut.com/", "chrome-extension://jkkenjlnjfemconejajakbijbheoffli/chrome/sidebar.html?v=__YOONO_BUILD__"
CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-28]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-23]
CHR Extension: (https://translate.google.de/#pl/de/Kochany%20) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkmlelhnmpnjbijdijnmagddkjnjkihn [2014-07-28]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-23]
CHR Extension: (Google-Suche) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-23]
CHR Extension: (Google Kalender) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-07-28]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-07-28]
CHR Extension: (Yoono - Twitter, Facebook, LinkedIn, YouTube™) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli [2014-07-28]
CHR Extension: (Smooth Gestures) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfkgmnnajiljnolcgolmmgnecgldgeld [2014-07-28]
CHR Extension: (Google Maps) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2014-07-28]
CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-23]
CHR Extension: (ImTranslator: Google Translate) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2014-07-28]
CHR Extension: (Picasa) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb [2014-07-28]
CHR Extension: (Google Mail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-23]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - C:\Program Files (x86)\LastPass\lpchrome.crx [2012-08-28]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-03] (Adobe Systems Incorporated)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [52896 2010-10-27] (Atheros Commnucations) [File not signed]
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
R2 BsBackup; c:\program files\bullguard ltd\bullguard\BsBackup.dll [728400 2014-08-07] (BullGuard Ltd.)
R2 BsBhvScan; c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe [529744 2014-08-07] (BullGuard Ltd.)
R2 BsCache; c:\program files\bullguard ltd\bullguard\BsCache.dll [145744 2014-08-07] (BullGuard Ltd.)
R2 BsFileScan; c:\program files\bullguard ltd\bullguard\BsFileScan.dll [419152 2014-08-07] (BullGuard Ltd.)
R2 BsFire; c:\program files\bullguard ltd\bullguard\BsFire.dll [766800 2014-08-07] (BullGuard Ltd.)
R2 BsMailProxy; c:\program files\bullguard ltd\bullguard\BsMailProxy\BsMailProxy.dll [745296 2014-08-07] (BullGuard Ltd.)
R2 BsMain; c:\program files\bullguard ltd\bullguard\bsmain.dll [499536 2014-08-07] (BullGuard Ltd.)
R2 BsScanner; c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe [273232 2014-08-07] (BullGuard Ltd.)
R2 BsUpdate; c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe [366928 2014-08-06] (BullGuard Ltd.)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
S2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [399640 2014-02-07] (Tlapia)
S2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [397080 2013-09-29] (Tlapia)
R2 tksock; C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe [2220664 2013-08-20] (AGFEO )
R2 TVGOnlineUpdateSvc; C:\Program Files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe [398128 2010-12-14] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AFW; C:\Windows\System32\DRIVERS\afw.sys [42760 2014-05-19] (Agnitum Ltd.)
R3 afwcore; C:\Windows\System32\DRIVERS\afwcore.sys [469256 2014-05-19] (Agnitum Ltd.)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R1 BdAgent; C:\Windows\System32\DRIVERS\BdAgent.sys [117184 2014-05-28] (BullGuard Ltd.)
R3 BdNet; C:\Windows\System32\drivers\BdNet.sys [34896 2014-05-19] (BullGuard Ltd.)
R1 BdSpy; C:\Windows\System32\drivers\BdSpy.sys [67680 2014-05-19] (BullGuard Ltd.)
R3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
R3 EvoMouseDriverFilterHidUsb; C:\Windows\System32\DRIVERS\EvoMouseDriverFilterHidUsb.sys [25656 2010-06-23] (Evoluent)
R3 EvoMouseDriverMini; C:\Windows\System32\drivers\EvoMouseDriverMini.sys [22584 2010-06-23] ()
R3 FPCIBASE; C:\Windows\System32\DRIVERS\fpcibase.sys [899328 2009-06-10] (AVM Berlin)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-22] (AVM GmbH)
R1 NovaShieldFilterDriver; C:\Windows\System32\DRIVERS\NSKernel.sys [296368 2014-05-19] (BullGuard Ltd.)
R1 NovaShieldTDIDriver; C:\Windows\System32\DRIVERS\NSNetmon.sys [27544 2014-05-19] (BullGuard Ltd.)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [350160 2013-01-25] (BitDefender S.R.L.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-12 17:56 - 2014-08-12 17:56 - 00028353 _____ () C:\Users\Admin\Desktop\FRST.txt
2014-08-12 17:56 - 2014-08-12 17:56 - 00000000 ____D () C:\FRST
2014-08-12 17:54 - 2014-08-12 17:54 - 02099712 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2014-08-12 16:48 - 2014-08-12 16:48 - 00000081 _____ () C:\Users\Admin\Desktop\bsi.txt
2014-08-12 16:39 - 2014-08-12 16:39 - 00031682 _____ () C:\ComboFix.txt
2014-08-12 16:31 - 2014-08-12 16:31 - 05569662 ____R (Swearware) C:\Users\Admin\Desktop\ComboFix.exe
2014-08-12 10:04 - 2014-08-12 10:04 - 00000512 _____ () C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD
2014-08-12 10:02 - 2014-08-12 10:02 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-08-10 18:29 - 2014-08-10 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-10 18:08 - 2014-08-10 18:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-08 08:09 - 2014-08-12 10:02 - 00000784 _____ () C:\Windows\setupact.log
2014-08-08 08:09 - 2014-08-08 08:09 - 00000468 _____ () C:\Windows\PFRO.log
2014-08-08 08:09 - 2014-08-08 08:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-07 08:34 - 2014-08-07 08:34 - 00153712 _____ (BullGuard Ltd.) C:\Windows\system32\BgGamingMonitor.dll
2014-08-07 08:34 - 2014-08-07 08:34 - 00140280 _____ (BullGuard Ltd.) C:\Windows\SysWOW64\BgGamingMonitor.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00076624 _____ (BullGuard Ltd.) C:\Windows\system32\BGLsp.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00064336 _____ (BullGuard Ltd.) C:\Windows\SysWOW64\BGLsp.dll
2014-07-30 20:25 - 2014-07-30 20:28 - 00000000 ____D () C:\Users\Admin\Desktop\CSV-JS
2014-07-29 10:13 - 2014-07-29 10:13 - 00000000 ___SD () C:\Users\Admin\Documents\Meine Datenquellen
2014-07-28 20:54 - 2014-07-28 20:54 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-28 20:54 - 2014-07-28 20:54 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-28 09:12 - 2014-07-28 09:12 - 00000146 _____ () C:\Users\Admin\Desktop\Internetoptionen - Verknüpfung.lnk
2014-07-25 16:54 - 2014-07-25 17:38 - 00004858 _____ () C:\dvdfab_burn_vso.log
2014-07-25 16:00 - 2014-07-25 16:00 - 00000000 ____D () C:\Users\Admin\AppData\Local\PackageAware
2014-07-24 20:42 - 2014-07-24 20:42 - 00000000 ____D () C:\Windows\ERUNT
2014-07-24 20:38 - 2014-07-24 20:38 - 00003262 _____ () C:\Windows\System32\Tasks\{9ADD4159-A8BD-499E-9697-AE7AEE8E3035}
2014-07-24 20:37 - 2014-07-24 20:37 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-24 20:30 - 2014-08-12 17:55 - 00000000 ____D () C:\Users\Admin\Desktop\Malware
2014-07-24 18:48 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-07-24 18:48 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-07-24 16:27 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-07-24 16:27 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-07-24 16:17 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-07-24 16:17 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-07-24 16:17 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-07-24 16:17 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-07-24 15:52 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-07-24 15:52 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-24 15:52 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-24 15:52 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-07-24 15:52 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-07-24 15:52 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-07-24 15:52 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-07-24 15:52 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-07-24 15:52 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-07-24 15:52 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-07-24 15:52 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-07-24 15:52 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-07-24 15:52 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-07-24 15:52 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-07-24 15:52 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-07-24 15:52 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-07-24 15:15 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-07-24 15:15 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-07-24 14:54 - 2014-07-24 14:35 - 01354223 _____ () C:\AdwCleaner(17).exe
2014-07-24 14:54 - 2013-07-14 17:32 - 04009167 _____ () C:\ServicesRepair.exe
2014-07-21 20:44 - 2014-07-21 20:44 - 00003320 _____ () C:\Windows\System32\Tasks\ASP
2014-07-21 20:44 - 2014-07-21 20:44 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ASP
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-12 17:56 - 2014-08-12 17:56 - 00028353 _____ () C:\Users\Admin\Desktop\FRST.txt
2014-08-12 17:56 - 2014-08-12 17:56 - 00000000 ____D () C:\FRST
2014-08-12 17:55 - 2014-07-24 20:30 - 00000000 ____D () C:\Users\Admin\Desktop\Malware
2014-08-12 17:55 - 2013-07-29 10:57 - 00000000 ____D () C:\ProgramData\BullGuard
2014-08-12 17:55 - 2012-08-08 17:05 - 00000224 _____ () C:\Windows\system32\config\afw_hm.conf
2014-08-12 17:55 - 2012-08-08 17:05 - 00000004 _____ () C:\Windows\system32\config\afw_db.conf
2014-08-12 17:54 - 2014-08-12 17:54 - 02099712 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2014-08-12 17:47 - 2012-08-23 11:08 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-12 17:29 - 2013-11-05 16:29 - 00000338 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-08-12 17:29 - 2012-08-08 09:58 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-12 17:14 - 2012-08-07 17:37 - 01905718 _____ () C:\Windows\WindowsUpdate.log
2014-08-12 16:56 - 2012-08-08 17:43 - 00000000 ____D () C:\Users\Admin\Documents\Outlook-Dateien
2014-08-12 16:48 - 2014-08-12 16:48 - 00000081 _____ () C:\Users\Admin\Desktop\bsi.txt
2014-08-12 16:39 - 2014-08-12 16:39 - 00031682 _____ () C:\ComboFix.txt
2014-08-12 16:39 - 2013-07-27 20:01 - 00000000 ____D () C:\Qoobox
2014-08-12 16:38 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-08-12 16:31 - 2014-08-12 16:31 - 05569662 ____R (Swearware) C:\Users\Admin\Desktop\ComboFix.exe
2014-08-12 14:33 - 2013-03-31 18:29 - 00000000 ____D () C:\Program Files (x86)\StarMoney 9.0
2014-08-12 14:27 - 2012-08-08 17:46 - 00000000 ____D () C:\Users\Admin\Documents\PhraseExpress
2014-08-12 14:26 - 2012-08-09 13:28 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Skype
2014-08-12 10:37 - 2009-07-14 06:45 - 00022368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-12 10:37 - 2009-07-14 06:45 - 00022368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-12 10:12 - 2014-06-20 07:55 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2014-08-12 10:12 - 2010-11-21 08:50 - 00702942 _____ () C:\Windows\system32\perfh007.dat
2014-08-12 10:12 - 2010-11-21 08:50 - 00150582 _____ () C:\Windows\system32\perfc007.dat
2014-08-12 10:12 - 2009-07-14 07:13 - 01637932 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-12 10:04 - 2014-08-12 10:04 - 00000512 _____ () C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD
2014-08-12 10:02 - 2014-08-12 10:02 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-08-12 10:02 - 2014-08-08 08:09 - 00000784 _____ () C:\Windows\setupact.log
2014-08-12 10:02 - 2014-06-24 10:32 - 00003608 _____ () C:\Windows\System32\Tasks\WizMouse
2014-08-12 10:02 - 2012-08-23 11:08 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-12 10:02 - 2012-08-07 17:47 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-08-12 10:02 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-11 19:47 - 2013-04-10 10:26 - 00000000 ____D () C:\Users\Admin\~tmp
2014-08-11 18:10 - 2013-10-15 20:16 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D781DCA7-39F3-4ADE-9B92-F10BCBB64E55}
2014-08-11 09:38 - 2012-08-09 11:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-10 19:55 - 2012-08-12 19:38 - 00000000 ____D () C:\Users\Admin\Desktop\Medien
2014-08-10 18:38 - 2014-02-07 11:59 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc
2014-08-10 18:30 - 2012-12-17 18:31 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\dvdcss
2014-08-10 18:29 - 2014-08-10 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-10 18:08 - 2014-08-10 18:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-08 16:59 - 2014-07-02 21:02 - 00000000 ____D () C:\Users\Admin\Desktop\Bullguard
2014-08-08 16:23 - 2012-09-03 17:50 - 00000000 ____D () C:\Program Files (x86)\Music Wizard
2014-08-08 16:00 - 2013-05-20 17:49 - 00000000 __HDC () C:\Users\Admin\AppData\Local\{C6B707E6-325A-4AB7-BC10-1D3EB2DDFF13}
2014-08-08 16:00 - 2012-08-09 10:35 - 00000372 _____ () C:\Windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job
2014-08-08 09:14 - 2012-08-08 16:52 - 00000000 ____D () C:\Users\Admin\Desktop\Tools
2014-08-08 08:09 - 2014-08-08 08:09 - 00000468 _____ () C:\Windows\PFRO.log
2014-08-08 08:09 - 2014-08-08 08:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-07 20:41 - 2012-08-08 11:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-07 08:34 - 2014-08-07 08:34 - 00153712 _____ (BullGuard Ltd.) C:\Windows\system32\BgGamingMonitor.dll
2014-08-07 08:34 - 2014-08-07 08:34 - 00140280 _____ (BullGuard Ltd.) C:\Windows\SysWOW64\BgGamingMonitor.dll
2014-08-06 15:43 - 2012-12-13 20:58 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-07-31 12:55 - 2014-07-31 12:55 - 00076624 _____ (BullGuard Ltd.) C:\Windows\system32\BGLsp.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00064336 _____ (BullGuard Ltd.) C:\Windows\SysWOW64\BGLsp.dll
2014-07-30 20:28 - 2014-07-30 20:25 - 00000000 ____D () C:\Users\Admin\Desktop\CSV-JS
2014-07-29 10:13 - 2014-07-29 10:13 - 00000000 ___SD () C:\Users\Admin\Documents\Meine Datenquellen
2014-07-28 20:54 - 2014-07-28 20:54 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-28 20:54 - 2014-07-28 20:54 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-28 09:12 - 2014-07-28 09:12 - 00000146 _____ () C:\Users\Admin\Desktop\Internetoptionen - Verknüpfung.lnk
2014-07-25 17:40 - 2012-08-14 16:05 - 00000000 ____D () C:\Users\Admin\Desktop\Brennen
2014-07-25 17:39 - 2014-04-01 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 9
2014-07-25 17:39 - 2014-04-01 15:31 - 00000000 ____D () C:\Program Files (x86)\DVDFab 9
2014-07-25 17:39 - 2013-12-11 20:35 - 00000000 ____D () C:\Users\Admin\Documents\DVDFab9
2014-07-25 17:38 - 2014-07-25 16:54 - 00004858 _____ () C:\dvdfab_burn_vso.log
2014-07-25 16:00 - 2014-07-25 16:00 - 00000000 ____D () C:\Users\Admin\AppData\Local\PackageAware
2014-07-25 14:15 - 2013-10-17 18:25 - 00000076 _____ () C:\Windows\SETSCAN.INI
2014-07-25 14:00 - 2012-08-09 17:17 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\PhraseExpress
2014-07-25 10:37 - 2013-01-16 12:16 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-25 09:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-25 08:13 - 2013-07-29 10:57 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\BullGuard
2014-07-24 20:42 - 2014-07-24 20:42 - 00000000 ____D () C:\Windows\ERUNT
2014-07-24 20:38 - 2014-07-24 20:38 - 00003262 _____ () C:\Windows\System32\Tasks\{9ADD4159-A8BD-499E-9697-AE7AEE8E3035}
2014-07-24 20:37 - 2014-07-24 20:37 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-24 16:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-07-24 16:15 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-24 15:37 - 2013-03-11 15:06 - 00000000 ____D () C:\Users\Admin\AppData\Local\LogMeIn Rescue Applet
2014-07-24 14:40 - 2012-12-04 14:12 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 14:40 - 2012-12-04 14:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 14:35 - 2014-07-24 14:54 - 01354223 _____ () C:\AdwCleaner(17).exe
2014-07-24 09:52 - 2012-12-04 14:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-22 07:57 - 2009-07-14 06:45 - 06305968 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-21 20:51 - 2012-08-07 17:53 - 00088800 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-21 20:44 - 2014-07-21 20:44 - 00003320 _____ () C:\Windows\System32\Tasks\ASP
2014-07-21 20:44 - 2014-07-21 20:44 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ASP
2014-07-21 20:30 - 2012-08-13 19:48 - 00000000 ____D () C:\Users\Admin\AppData\Local\CrashDumps
2014-07-21 20:29 - 2013-04-04 20:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
Files to move or delete:
====================
C:\Users\Admin\phraseexpresssqlclientmanagersetup.exe
Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\IntResource.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-07 09:00
==================== End Of Log ============================
--- --- --- --- --- --- jetzt die Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-08-2014 01
Ran by Admin at 2014-08-12 17:56:26
Running from C:\Users\Admin\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: BullGuard Antivirus (Disabled - Out of date) {C3CCAC61-52F7-A056-1860-6406566E2578}
AS: BullGuard Antispyware (Disabled - Out of date) {78AD4D85-74CD-AFD8-22D0-5F742DE96FC5}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: BullGuard Firewall (Disabled) {FBF72D44-1898-A10E-333F-CD33A8BD6203}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
8000A809 (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
8000A809_eDocs (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
8000A809_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe Photoshop Elements 12 (HKLM-x32\...\Adobe Photoshop Elements 12) (Version: 12.1.0.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 12 (x32 Version: 12.1.0.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop Lightroom 5.4 64-bit (HKLM\...\{558B5965-CC1B-4AF1-BA07-5D6832404050}) (Version: 5.4.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AGFEO TK-Suite Server (HKLM-x32\...\tksuite_tksuite_server) (Version: 4.4.13 - AGFEO GmbH & Co. KG)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 12 v.12.0.5 (HKLM-x32\...\{91B33C97-93EB-244C-F687-71D85E45A206}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG)
Ashampoo Slideshow Studio HD 3 v.3.0.3 (HKLM-x32\...\{91B33C97-0CE8-6ABD-1CF4-0DAF2CCF492A}_is1) (Version: 3.0.3 - Ashampoo GmbH & Co. KG)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.4.5.0 - Asmedia Technology)
ATI AVIVO64 Codecs (Version: 11.6.0.50825 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{70DFF8B2-44A3-2C2C-FB21-783E8291265F}) (Version: 3.0.790.0 - ATI Technologies, Inc.)
AttachmentsManager 1.8.6 (HKLM-x32\...\AttachmentsManager_is1) (Version: 1.8.6 - EDV-Service Marchert)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin)
BayWotch Update v4.2.24 (HKLM-x32\...\baywotch4_is1) (Version: - Elmar Denkmann)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.40 - Atheros Communications)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
BullGuard (HKLM\...\BullGuard) (Version: 13.0 - BullGuard Ltd.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0825.2146.37182 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0825.2146.37182 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0825.2146.37182 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0825.2146.37182 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help English (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help French (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help German (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0825.2145.37182 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0825.2146.37182 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0825.2146.37182 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4214 - CDBurnerXP)
CUEcards 2000 (HKLM-x32\...\CUEcards 2000) (Version: - Marcus Humann Software-Technik)
cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 6.10.0 - REINER SCT)
Das Telefonbuch Deutschland (HKLM-x32\...\DasTelefonbuch Deutschland) (Version: - TVG Telefonbuch- und Verzeichnisverlag GmbH & Co. KG)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft)
DesignPro 5 (HKLM-x32\...\InstallShield_{F82C6574-AD88-4B40-A432-970BC77F1BD2}) (Version: 5.5.708 - Avery Dennison)
DesignPro 5 (x32 Version: 5.5.708 - Avery Dennison) Hidden
DeviceDiscovery (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DVD Profiler Version 3.8.2 (HKLM-x32\...\InvelosDVDProfiler_is1) (Version: - )
DVDFab 9.1.5.9 (25/07/2014) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.)
EASY Office (HKLM-x32\...\{079F01C3-751A-43BA-BBB6-6239D4F0F19A}) (Version: 2.10.0 - FAX.de)
Elements 12 Organizer (x32 Version: 12.0 - Ihr Firmenname) Hidden
ESTOS ProCall One (HKLM-x32\...\{1F30C083-169A-48AA-A24A-427194AEAB84}) (Version: 3.0.3.1045 - ESTOS)
Evoluent Mouse Manager (HKLM\...\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}) (Version: 3.9.1 - Evoluent)
Firmen-SMS (HKLM-x32\...\{4A1946BC-2D29-40EE-9783-51150DD6F21C}) (Version: 2.4.91 - Krämer IT Solutions GmbH)
FreeCommander 2009.02b (HKLM-x32\...\FreeCommander_is1) (Version: 2009.02 - Marek Jasinski)
FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version: Preview - Marek Jasinski)
FreeFileSync 6.0 (HKLM-x32\...\FreeFileSync) (Version: 6.0 - Zenju)
GO Contact Sync Mod (HKLM-x32\...\{CD178FDD-086A-4C2E-935E-8CDB747B0F29}) (Version: 3.6.1 - WebGear, Create Software, Stru.be, saller.NET)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP IDF Software (HKLM-x32\...\{974025B1-769B-49E9-817C-C638ABE8F372}) (Version: 11.15.1000 - Hewlett-Packard Company)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Officejet Pro 8000 A809 Series (HKLM\...\{A9E695CB-A6AA-4B4C-9754-BA3CFF1C3B00}) (Version: 14.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12992 - HP)
HP Scanjet 7650 Document ISIS/TWAIN (HKLM-x32\...\HP Scanjet 7650 Document ISIS/TWAIN) (Version: - )
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{74DC0593-6BC6-4001-AD5F-D810AFB68D86}) (Version: 5.002.002.002 - Hewlett-Packard)
HPProductAssistant (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
HPScanjet7650Corporate (HKLM-x32\...\{8A6CC564-4900-4282-8BD1-B3C419432148}) (Version: 2.20.0000 - Ihr Firmenname)
HPScanjet7650Corporate (HKLM-x32\...\{8CCA32E6-9A53-41D5-91F8-5ACF71FBEBD4}) (Version: 2.20.0000 - Ihr Firmenname)
HPSSupply (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HydraVision (x32 Version: 4.2.180.0 - ATI Technologies Inc.) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Network Connections 15.6.25.0 (HKLM\...\PROSetDX) (Version: 15.6.25.0 - Intel)
Intel(R) Network Connections 15.6.25.0 (Version: 15.6.25.0 - Intel) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.58.2 - JMicron Technology Corp.)
LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)
MailWasherPro (HKLM-x32\...\{4622F96A-780B-48B8-8304-1CD8A40043E8}) (Version: 7.3.0 - Firetrust)
MailWasherPro (HKLM-x32\...\{6657DA03-A39B-472C-8458-6292E128A3D9}) (Version: 7.2.0 - Firetrust)
MarketResearch (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.0.0.1045 - Marvell)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.0.162.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.0.162.0 - Microsoft Corporation) Hidden
MOBackup - Datensicherung für Outlook (Vollversion) (HKLM-x32\...\MOBackup-DatensicherungfürOutlook) (Version: 7.95 - Heiko Schröder)
Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Music Wizard Professional 8.0.9 (HKLM-x32\...\MUSICWIZARD_is1) (Version: - Stefan Hollesch)
myPrintMileage (Officejet Pro 8000 A809) (HKLM-x32\...\{366584A4-1D35-49B2-97B3-C803DDFCC543}) (Version: 1.00.0000 - Hewlett-Packard)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
PantsOff 2.0 (HKLM-x32\...\{EC1F15E1-F3CC-46EE-B7A5-849A08ED60DC}}_is1) (Version: 2.0 - Christoph Bünger Software)
Password Depot 5 (HKLM-x32\...\{66815B84-05B8-4FA3-AACA-3E7C434F78B8}_is1) (Version: 5.3.1 - AceBIT GmbH)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.208.0 - Tracker Software Products Ltd)
PDF-XChange Pro 4.0 (HKLM\...\{421E2E8D-F119-431D-A1F4-5F78989BEC75}) (Version: 4.197.197.0 - Tracker Software Products Ltd.)
Perfect Effects 8 (HKLM-x32\...\{C982ACFF-5997-4B7D-B3E1-CF7273A06FB2}) (Version: 8.1.0 - onOne Software)
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
PhraseExpress v10.1.59 (HKLM-x32\...\PhraseExpress_is1) (Version: 10.1.59 - Bartels Media GmbH)
ProductContext (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
PSE12 STI Installer (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
QuickScan 4.6.1 (HKLM-x32\...\{09F26C15-F1FE-4560-9AF2-41A7052B1B76}) (Version: 4.6.8372 - EMC Captiva)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6251 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.15.0 - SAMSUNG Electronics Co., Ltd.)
SchnapperPlus 1.9.11 (HKLM-x32\...\SchnapperPlus) (Version: 1.9.11 - Schnapper-Software Robert Beer)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
StarMoney (x32 Version: 3.0.4.48 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney 9.0 (HKLM-x32\...\{5B4B2623-E55E-451C-B448-5761B92ADE04}) (Version: 9.0 - Star Finanz GmbH)
Startup Manager 1.5 (HKLM-x32\...\Startup Manager 1.5_is1) (Version: - )
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 2.5.2 - Krzysztof Kowalczyk)
sysTPL (HKLM-x32\...\{4B74BC31-B353-4B8F-8CBE-DAB4FF326FF1}) (Version: 1.0.0 - Tlapia) <==== ATTENTION
Textbausteinverwaltung Outlook Add-In v10.0.0 (HKLM-x32\...\Textbausteinverwaltung Outlook Add-In_is1) (Version: 10.0.0 - Bartels Media GmbH)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
TSP7 (HKLM\...\{4E3C43BF-52C0-4FAC-8E36-E2B4872A7F4F}) (Version: 7.0.06 - AGFEO)
TSP7 (HKLM\...\{AEEC99DE-C6EA-443C-BFF5-7AB75F720BE7}) (Version: 7.0.04 - AGFEO)
Turbo Lister 2 (HKLM-x32\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)
Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VoiceOver Kit (HKLM-x32\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)
WebReg (x32 Version: 140.0.213.017 - Hewlett-Packard) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WizMouse v1.7.0.3 (HKLM-x32\...\WizMouse_is1) (Version: - Antibody Software)
yourMail free edition (HKCU\...\yourMail free edition) (Version: 13.1.37 - yourTime Solutions GmbH)
yourMail free edition (x32 Version: 13.1.37 - yourTime Solutions GmbH) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{0120BEF9-D180-3FFA-B803-EF7D1B3E4A4E}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{0292BF0D-D3B5-3EC1-AE7F-299E91D63287}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{056B2B25-2625-37D8-B54B-1C281EFD4BDE}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{0ABB0535-FA7C-3B83-AD58-C157D46592FA}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{0DBB2152-8146-321E-AFBF-96B3E0710D03}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{1279D0F4-C5D4-309A-ADB1-6E706CF4665E}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{144AED71-7513-36C9-9A2C-C48947FDD237}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{1549D32B-48CF-3EC9-B7DC-DD5613B62CB9}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{19FE1B34-64E9-37D8-B00B-5A3DF01F3442}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{1C88D2B1-377B-3579-AE03-469D05EA854D}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{2120FB0E-F9F5-3AFF-9F5A-E15F673F8725}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{250191BA-C4C5-33B5-843C-C03E34321763}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{261ED200-50C1-3915-996E-F5686B5452C0}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{2C9E8E7F-56BA-3D7C-9600-9BE8EF3B2617}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{36ACA068-EF97-3CBF-95C0-DA96067FB0B4}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{374D5443-D596-3E2B-A5A1-79006BE585CA}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{3789CED9-3F14-304B-970D-F38BE8ADB00F}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{388407B2-A219-3AEF-86E0-4CC8E35B6DB5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{3A7C40AB-6839-3CE3-A763-A89D55FCC7D7}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{3C1F4A65-C8AC-3BCD-B9CD-F8F4A82CF27D}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{3C9238D3-56EF-3387-97EA-9EFDDC07DE54}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{3CA4EC05-94BE-39C1-A8B8-9670EE42DDD2}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{3E5A7E05-5230-318E-8C4D-FBCE4A4BE5C4}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{406BF0CD-E30C-34BB-92EE-BE2043B9D335}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{4311841D-D8F6-36CC-A6F7-1D8495C049DC}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{43897AE7-032A-39EF-AD07-3280A2A4E239}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{45CBF5F2-7B7C-303C-A5A1-4209E5650E02}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{4894777D-AE8C-346D-BE00-BD2A870B9F6D}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{4DD88CAA-50FA-3A12-88A0-73A7CB13C741}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{50CF5CEE-2F89-3058-B8ED-03B73287460D}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{5377B11F-255F-34F5-93E4-360A84166F71}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{5C387E9E-C7E6-3548-B0EE-72E0403DEA28}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{5F6D2F1B-AC0F-3D23-ADC9-D3805EB7B3DB}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{618D2AF3-4818-3377-ADD2-52AF733DDD28}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{6794B28C-7E32-3026-A886-354712D7B1E3}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{6F558239-7A7C-35BD-82D7-54728DA4B111}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{70439584-B32E-32FA-AAFE-683FF2E4BAA2}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{71413B42-2BC7-3BF9-970B-725151B58D51}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{78FD893E-8C4E-3601-A0AE-D95D591DCDB8}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{7D21CFD5-1B1E-3B77-90EB-5CD884DE6A5C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{7D59FBC7-B480-385C-8B79-A14DB9627169}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{8E9B4076-E988-4ED5-9EC5-3202814D535B}\InprocServer32 -> C:\Users\Admin\AppData\Local\yourTime\yourMail\components\adxloader64.dll ()
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{8EB13808-8010-3E2C-B712-650C20D3FB22}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{8ED1BC64-F066-3AFC-80A5-6B725C9521D6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{A6A8EFD9-8026-3E50-B8CD-B0B20CBE9766}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{A8E7D70B-7778-30EE-8750-280F88B7F206}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{B05BA62E-E406-3153-94A0-C02655698D9B}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{B2F3B90D-E351-3B8C-A2B6-E0D8F6EFA8F4}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{B529C9BF-3D8C-36CE-BC9F-7C948EF7FE70}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{B94EDB05-554D-36BC-8308-3331B2F8E3A9}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{BF7BCEFA-4E90-3597-B2DF-821EB9034307}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{BFE4DF3C-9CF1-3B16-9755-BE2A11BF4BFC}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{CEBFB8B4-7D6F-39DD-A128-7BBF2A1FD1DA}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{D127EC81-AF67-3BED-B391-A268599A0B52}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{D7F03C6C-B820-30CE-8F7F-4491A3C1F042}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{DAB9F861-6438-3544-A9BA-C34C902AE078}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{DBAF149A-3897-33BE-B82E-FFDA15FF4B8C}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{DCEDAFBB-4865-3DA0-8E79-263A6B349B7E}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{E02F2817-DA99-3750-A784-D15702DC05A4}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{E592DABA-C195-3B0B-B77E-79E807F6C2D5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{E8C3692E-DB82-3F0D-9593-800112B4B61B}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{EFC4CBC9-9BF6-326E-851F-2CBB0E4A1465}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{F0105D64-4CD6-3FD6-A1B1-B6E57BB8A9A9}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{F40FB7C7-62E9-357A-95B5-55C1762595E6}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{F56DBDF8-437A-3458-B1E1-A52B7FC7A6BF}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{F5E65528-44E8-34E3-B131-A7FE7B20B22F}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{F8C07970-7C72-3BB2-8F2F-FF2A405E37EA}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{FB3E0669-DFF1-3AEE-AC92-E94AE298C9E7}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-79635218-2301998975-3311727660-1000_Classes\CLSID\{FD07B9F9-910F-31F7-93C2-8ACDE3AA71A3}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
==================== Restore Points =========================
28-07-2014 18:53:56 Installed Java 7 Update 65
30-07-2014 16:41:12 Windows Update
06-08-2014 13:53:02 Windows Update
12-08-2014 08:12:25 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2014-08-12 14:33 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {263D7530-1331-48A3-ABC5-01157B3F1C1B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {368CC4E9-DFAC-48AD-BED9-DA7C2EC48040} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)
Task: {39B02345-F0DC-4E57-889F-F0ED949A62C2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {6A532441-BDE4-4107-87D0-91AFAEEFAD94} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2012-11-02] (Microsoft Corporation)
Task: {6E24544F-0CC9-4ACA-9E7A-0F329F450561} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2014-05-05] ()
Task: {787E4459-3082-4ADD-9099-49FCD9B5DA6C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23] (Google Inc.)
Task: {8489915A-F53B-4CF9-9905-D44A1039E31F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {932BDFAD-3EB2-41C1-AB67-DB8F9E252FF8} - System32\Tasks\ASP => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe <==== ATTENTION
Task: {B8BE736A-9E61-44BD-8302-1BBE0149EFBD} - System32\Tasks\WizMouse => C:\Program Files (x86)\WizMouse\WizMouseLaunch.exe [2013-09-22] ()
Task: {CD56A220-2DC7-4FA5-A7F7-FA99D8F8E783} - System32\Tasks\AdobeAAMUpdater-1.0-Admin-PC-Admin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {D6BB99C2-A0AF-46C1-9AAD-1D771052FB99} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2012-11-02] (Microsoft)
Task: {DDFE6514-1EB1-4098-9626-493488A2DE79} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-23] (Google Inc.)
Task: {E539B7D2-8102-47A5-92B4-BC8F0D23722D} - System32\Tasks\yourMail free edition Updates for Admin-PC_Admin => C:\Users\Admin\AppData\Local\yourTime\yourMail\components\schedule\yourMail Free Edition Updates.lnk [2014-07-21] ()
Task: {F3BA925C-50A3-40C9-B6B3-F51CAC31ECC7} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2012-11-02] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
Task: C:\Windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job => ?
==================== Loaded Modules (whitelisted) =============
2014-07-31 12:55 - 2014-07-31 12:55 - 00613200 _____ () c:\program files\bullguard ltd\bullguard\SQLite.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00084304 _____ () c:\program files\bullguard ltd\bullguard\zlib1.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00653136 _____ () c:\program files\bullguard ltd\bullguard\LibXml2.dll
2014-05-19 14:16 - 2014-05-19 14:16 - 00023376 _____ () c:\program files\bullguard ltd\bullguard\res\de\BullGuardBhvScannerRes.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00064848 _____ () c:\program files\bullguard ltd\bullguard\LIBBZ2.dll
2014-03-13 11:47 - 2013-09-22 11:27 - 00119000 _____ () C:\Program Files (x86)\WizMouse\wizmouse.exe
2010-08-04 15:58 - 2010-08-04 15:58 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-08-25 21:44 - 2010-08-25 21:44 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-04-08 09:12 - 2010-12-14 10:47 - 00398128 _____ () C:\Program Files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe
2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-08-08 12:17 - 2007-05-31 07:38 - 00167936 ____N () C:\Windows\SysWOW64\SerialXP.dll
2014-07-21 09:01 - 2011-01-13 10:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 9.0\ouservice\PATCHW32.dll
2013-08-20 18:48 - 2013-08-20 18:48 - 00024576 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tkmedia_lib.dll
2013-08-20 18:48 - 2013-08-20 18:48 - 00028672 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tkmedia_capi.dll
2013-08-20 18:48 - 2013-08-20 18:48 - 00011776 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tkmedia_serial.dll
2013-08-20 18:48 - 2013-08-20 18:48 - 00012288 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tkmedia_xport.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00835584 _____ () C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00093696 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00094208 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00057344 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00096256 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00062976 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00067072 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00158208 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00312832 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00038912 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00073728 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll
2012-08-08 17:08 - 2014-04-26 16:53 - 00101888 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll
2014-07-18 09:48 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-18 09:48 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-18 09:48 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-18 09:48 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-18 09:48 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2013-06-07 18:49 - 2013-06-07 18:49 - 00061952 _____ () C:\Program Files (x86)\Firetrust\MailWasher\MWPBridgeDLL.dll
2013-06-07 18:49 - 2013-06-07 18:49 - 04642816 _____ () C:\Program Files (x86)\Firetrust\MailWasher\MWPappDLL.dll
2011-04-26 17:37 - 2011-04-26 17:37 - 00061952 _____ () C:\Program Files (x86)\Firetrust\MailWasher\FTBridge.dll
2011-04-26 17:37 - 2011-04-26 17:37 - 00272384 _____ () C:\Program Files (x86)\Firetrust\MailWasher\FTClientNode.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2012-08-09 10:50 - 2013-05-07 10:33 - 00360448 _____ () C:\Program Files (x86)\Common Files\ESM-Tools Shared\License.dll
2012-08-09 10:50 - 2013-08-29 06:31 - 01966080 _____ () C:\Program Files (x86)\ESM-Tools\AttachmentsManager\AttachmentsManager.dll
2012-08-09 10:50 - 2012-08-01 10:45 - 00212992 _____ () C:\Program Files (x86)\Common Files\ESM-Tools Shared\LiveUpdate.dll
2013-04-27 18:26 - 2013-04-04 11:57 - 04053504 _____ () C:\Program Files (x86)\PhraseExpress\pexmsol.dll
2013-04-24 17:00 - 2013-04-24 17:00 - 00499712 _____ () C:\Users\Admin\AppData\Local\yourTime\yourMail\components\adxloader.dll
2013-02-14 16:46 - 2013-02-14 16:46 - 01044048 _____ () C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2013-05-20 18:12 - 2013-05-20 18:12 - 00872448 _____ () C:\Users\Admin\AppData\Local\assembly\dl3\JTK0W0YG.Y7R\8ADW7DWQ.96L\6606d554\f1ce1d75_fc40ce01\YourMailMetroSkin.DLL
2010-05-11 03:00 - 2010-05-11 03:00 - 01785856 _____ () C:\Program Files (x86)\ESTOS\ProCall One\TfD.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Admin\Lokale Einstellungen:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\Lokale Einstellungen:jcS6QwtlG8eyLFEGR4trRBW8rB9I
AlternateDataStreams: C:\Users\Admin\AppData\Local:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\AppData\Local:jcS6QwtlG8eyLFEGR4trRBW8rB9I
AlternateDataStreams: C:\Users\Admin\AppData\Local\Anwendungsdaten:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\AppData\Local\Anwendungsdaten:jcS6QwtlG8eyLFEGR4trRBW8rB9I
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsUpdate => ""="Service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: MemeoBackgroundService => 2
MSCONFIG\Services: StarMoney 8.0 OnlineUpdate => 2
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/12/2014 04:28:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 10.8.2014.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1518
Startzeit: 01cfb639426ca0be
Endzeit: 60000
Anwendungspfad: D:\Download\Aktuell\FRST64.exe
Berichts-ID: b5a57190-222c-11e4-a29e-0026831840ab
Error: (08/12/2014 11:46:12 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/12/2014 11:46:11 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/12/2014 11:46:10 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/12/2014 11:46:09 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/12/2014 11:46:09 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/12/2014 11:46:07 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/12/2014 11:46:03 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/12/2014 11:46:01 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (08/12/2014 11:46:00 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
System errors:
=============
Error: (08/12/2014 04:38:50 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (08/12/2014 04:37:02 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (08/12/2014 02:33:37 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (08/12/2014 02:32:28 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (08/12/2014 02:32:28 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (08/12/2014 02:30:57 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (08/12/2014 02:27:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "HP CUE DeviceDiscovery Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/12/2014 02:27:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "hpqcxs08" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/12/2014 10:08:31 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "BullGuard firewall service" wurde nicht richtig gestartet.
Error: (08/12/2014 10:06:40 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (120000 ms) wurde beim Verbindungsversuch mit dem Dienst sysTPLService erreicht.
Microsoft Office Sessions:
=========================
Error: (08/12/2014 04:28:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: FRST64.exe10.8.2014.0151801cfb639426ca0be60000D:\Download\Aktuell\FRST64.exeb5a57190-222c-11e4-a29e-0026831840ab
Error: (08/12/2014 11:46:12 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
Error: (08/12/2014 11:46:11 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
Error: (08/12/2014 11:46:10 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
Error: (08/12/2014 11:46:09 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
Error: (08/12/2014 11:46:09 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
Error: (08/12/2014 11:46:07 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
Error: (08/12/2014 11:46:03 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
Error: (08/12/2014 11:46:01 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
Error: (08/12/2014 11:46:00 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestd:\Download\Aktuell\esetsmartinstaller_deu.exe
CodeIntegrity Errors:
===================================
Date: 2014-08-12 14:32:28.891
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-08-12 14:32:28.860
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-08-12 14:32:28.829
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-08-12 14:32:28.813
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-27 20:04:34.475
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-27 20:04:34.444
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 45%
Total physical RAM: 8168.61 MB
Available physical RAM: 4421.43 MB
Total Pagefile: 16335.39 MB
Available Pagefile: 12428.39 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (SYSTEM) (Fixed) (Total:111.69 GB) (Free:46.78 GB) NTFS
Drive d: (DATEN) (Fixed) (Total:465.76 GB) (Free:361.35 GB) NTFS
Drive e: (DATEN 2) (Fixed) (Total:465.76 GB) (Free:311.66 GB) NTFS
Drive h: (Toshiba HDD) (Fixed) (Total:596.17 GB) (Free:464.15 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: ECA4EBCF)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: A570E81D)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 112 GB) (Disk ID: 2A82E0E6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)
========================================================
Disk: 3 (Size: 596 GB) (Disk ID: F5346CD7)
Partition 1: (Active) - (Size=596 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ich nutze ein kleines Heimnetzwerk mit 2 LAN-Rechnern, manchmal über WLAN mit eierpads o.ä. Zitat:
|
|
12.08.2014, 20:30
| #20 |
| /// Helfer-Team | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Poste bitte mal den Inhalt der Datei hosts aus dem Verzeichnis C:\Windows\System32\drivers\etc
__________________ LG Der Felix Keine Hilfe per PN und E-Mail |
|
12.08.2014, 20:49
| #21 |
| | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Hi Felix, dort finde ich keine Datei mit dem Namen 'hosts'! Es gibt auch keinen Ordner mit dem Namen 'etc' Es gibt hier eine Hosts-Datei: C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210 Code:
ATTFilter # Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
__________________ --> Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen |
|
12.08.2014, 21:40
| #22 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen In der Hosts Datei ist alles ok. Felix wollte wohl nur wissen, ob du dieses System vllt mal gewerblich nutzt oder genutzt hast, ob dieser Rechner gar in einem Büro stand. Da sind nämlich Windows-Server-Domains recht üblich. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyServer: http=127.0.0.1:8877
SearchScopes: HKLM - DefaultScope {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = http://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = http://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = http://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = http://www.sm.de/?q={searchTerms}
C:\Windows\System32\Tasks\{9ADD4159-A8BD-499E-9697-AE7AEE8E3035}
C:\Users\Admin\phraseexpresssqlclientmanagersetup.exe
Task: {932BDFAD-3EB2-41C1-AB67-DB8F9E252FF8} - System32\Tasks\ASP => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe <==== ATTENTION
C:\Program Files (x86)\RegClean Pro
AlternateDataStreams: C:\Users\Admin\Lokale Einstellungen:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\Lokale Einstellungen:jcS6QwtlG8eyLFEGR4trRBW8rB9I
AlternateDataStreams: C:\Users\Admin\AppData\Local:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\AppData\Local:jcS6QwtlG8eyLFEGR4trRBW8rB9I
AlternateDataStreams: C:\Users\Admin\AppData\Local\Anwendungsdaten:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\AppData\Local\Anwendungsdaten:jcS6QwtlG8eyLFEGR4trRBW8rB9I
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2014, 09:26
| #23 |
| | Ungewolltes Aktivieren der Proxyserververbindung in den InterneteinstellungenCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-08-2014
Ran by Admin at 2014-08-13 10:24:55 Run:1
Running from C:\Users\Admin\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
ProxyServer: http=127.0.0.1:8877
SearchScopes: HKLM - DefaultScope {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {ADF3D08D-C10A-4C0C-9AAA-3693A1221042} URL = hxxp://www.sm.de/?q={searchTerms}
C:\Windows\System32\Tasks\{9ADD4159-A8BD-499E-9697-AE7AEE8E3035}
C:\Users\Admin\phraseexpresssqlclientmanagersetup.exe
Task: {932BDFAD-3EB2-41C1-AB67-DB8F9E252FF8} - System32\Tasks\ASP => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe <==== ATTENTION
C:\Program Files (x86)\RegClean Pro
AlternateDataStreams: C:\Users\Admin\Lokale Einstellungen:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\Lokale Einstellungen:jcS6QwtlG8eyLFEGR4trRBW8rB9I
AlternateDataStreams: C:\Users\Admin\AppData\Local:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\AppData\Local:jcS6QwtlG8eyLFEGR4trRBW8rB9I
AlternateDataStreams: C:\Users\Admin\AppData\Local\Anwendungsdaten:Dmg2XLDiMEhwNeg9DnUiYRW2D
AlternateDataStreams: C:\Users\Admin\AppData\Local\Anwendungsdaten:jcS6QwtlG8eyLFEGR4trRBW8rB9I
*****************
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ADF3D08D-C10A-4C0C-9AAA-3693A1221042}" => Key deleted successfully.
"HKCR\CLSID\{ADF3D08D-C10A-4C0C-9AAA-3693A1221042}" => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ADF3D08D-C10A-4C0C-9AAA-3693A1221042}" => Key deleted successfully.
"HKCR\CLSID\{ADF3D08D-C10A-4C0C-9AAA-3693A1221042}" => Key not found.
C:\Windows\System32\Tasks\{9ADD4159-A8BD-499E-9697-AE7AEE8E3035} => Moved successfully.
C:\Users\Admin\phraseexpresssqlclientmanagersetup.exe => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{932BDFAD-3EB2-41C1-AB67-DB8F9E252FF8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{932BDFAD-3EB2-41C1-AB67-DB8F9E252FF8}" => Key deleted successfully.
C:\Windows\System32\Tasks\ASP => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASP" => Key deleted successfully.
"C:\Program Files (x86)\RegClean Pro" => File/Directory not found.
"C:\Users\Admin\Lokale Einstellungen" => ":Dmg2XLDiMEhwNeg9DnUiYRW2D" ADS not found.
"C:\Users\Admin\Lokale Einstellungen" => ":jcS6QwtlG8eyLFEGR4trRBW8rB9I" ADS not found.
C:\Users\Admin\AppData\Local => ":Dmg2XLDiMEhwNeg9DnUiYRW2D" ADS removed successfully.
C:\Users\Admin\AppData\Local => ":jcS6QwtlG8eyLFEGR4trRBW8rB9I" ADS removed successfully.
"C:\Users\Admin\AppData\Local\Anwendungsdaten" => ":Dmg2XLDiMEhwNeg9DnUiYRW2D" ADS not found.
"C:\Users\Admin\AppData\Local\Anwendungsdaten" => ":jcS6QwtlG8eyLFEGR4trRBW8rB9I" ADS not found.
==== End of Fixlog ====
__________________ LG der WeTi |
|
13.08.2014, 09:49
| #24 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Neu starten und frische FRST Logs bitte
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2014, 09:59
| #25 |
| | Ungewolltes Aktivieren der Proxyserververbindung in den InterneteinstellungenFRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014
Ran by Admin (administrator) on ADMIN-PC on 13-08-2014 10:58:19
Running from C:\Users\Admin\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BgDelayStartup.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe
(Evoluent) C:\Program Files\Evoluent\VMouse\EvoMouseExec.exe
(AGFEO ) C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe
() C:\Program Files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(AGFEO ) C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tkmedia.exe
(ESTOS GmbH) C:\Program Files (x86)\ESTOS\ProCall One\ECtiClientOne.exe
(AGFEO ) C:\Program Files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe
(Bartels Media GmbH) C:\Program Files (x86)\PhraseExpress\phraseexpress.exe
(AGFEO ) C:\Program Files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\Files32\Spamfilter\LittleHook.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Program Files\BullGuard Ltd\BullGuard\BgWsc.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\WizMouse\WizMouse.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [BullGuardUpdate2] => c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe [2933584 2014-08-06] (BullGuard Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-19] (Realtek Semiconductor)
HKLM\...\Run: [IntelliType Pro] => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1464944 2012-11-02] (Microsoft Corporation)
HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2076272 2012-11-02] (Microsoft Corporation)
HKLM\...\Run: [BullGuard] => C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe [1319248 2014-08-07] (BullGuard Ltd.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613536 2010-10-27] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-10-27] (Atheros Commnucations)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)
HKLM\...\Run: [BgDelayStartup] => c:\program files\bullguard ltd\bullguard\BgDelayStartup.exe [86352 2014-07-31] (BullGuard Ltd.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440 2014-02-07] (Tlapia)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-79635218-2301998975-3311727660-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-79635218-2301998975-3311727660-1000\...\Run: [CAHeadless] => C:\Program Files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe [1401040 2014-05-09] (Adobe Systems Incorporated)
AppInit_DLLs: C:\Windows\System32\BgGamingMonitor.dll => C:\Windows\System32\BgGamingMonitor.dll [153712 2014-08-07] (BullGuard Ltd.)
AppInit_DLLs: c:\PROGRA~1\BULLGU~1\BULLGU~1\BgAgent.dll => c:\Program Files\BullGuard Ltd\BullGuard\BgAgent.dll [100656 2014-07-31] (BullGuard Ltd.)
AppInit_DLLs-x32: C:\Windows\System32\BgGamingMonitor.dll => C:\Windows\SysWOW64\BgGamingMonitor.dll [140280 2014-08-07] (BullGuard Ltd.)
AppInit_DLLs-x32: c:\PROGRA~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll => c:\Program Files\BullGuard Ltd\BullGuard\Files32\BgAgent.dll [86200 2014-07-31] (BullGuard Ltd.)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Evoluent Mouse Manager.lnk
ShortcutTarget: Evoluent Mouse Manager.lnk -> C:\Windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe ()
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PhraseExpress.lnk
ShortcutTarget: PhraseExpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ProCall One.lnk
ShortcutTarget: ProCall One.lnk -> C:\Program Files (x86)\ESTOS\ProCall One\ECtiClientOne.exe (ESTOS GmbH)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TK-Suite Client.lnk
ShortcutTarget: TK-Suite Client.lnk -> C:\Program Files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe (AGFEO )
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Evoluent Mouse Manager.lnk
ShortcutTarget: Evoluent Mouse Manager.lnk -> C:\Windows\Installer\{1DF99F8F-31BC-4058-B750-DC0C86FC0038}\_97D7716B285C2208949646.exe ()
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PhraseExpress.lnk
ShortcutTarget: PhraseExpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ProCall One.lnk
ShortcutTarget: ProCall One.lnk -> C:\Program Files (x86)\ESTOS\ProCall One\ECtiClientOne.exe (ESTOS GmbH)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TK-Suite Client.lnk
ShortcutTarget: TK-Suite Client.lnk -> C:\Program Files (x86)\AGFEO\Tk-Suite\tools\ctimon.exe (AGFEO )
ShellIconOverlayIdentifiers: BackupOverlayErr -> {8749448C-D907-45BF-A842-4D3898894AC8} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll (BullGuard Ltd.)
ShellIconOverlayIdentifiers: BackupOverlayInProgress -> {3FFBF330-7839-476B-BE14-2C8597CE11B6} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll (BullGuard Ltd.)
ShellIconOverlayIdentifiers: BackupOverlaySynced -> {C62CF4DB-48CB-4B03-BFD0-30A29125FA49} => C:\Program Files\BullGuard Ltd\BullGuard\BackupShellHook.dll (BullGuard Ltd.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x954321BBB774CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll ()
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: PDFXChange 4.0 IE Plugin -> {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} -> C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll (Tracker Softaware)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll ()
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll ()
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll ()
Toolbar: HKLM-x32 - PDFXChange 4.0 IE Plugin - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll (Tracker Softaware)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\searchplugins\acoon.xml
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\searchplugins\startpage-https---deutsch.xml
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\searchplugins\wolframalpha.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: LastPass - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\support@lastpass.com [2014-08-12]
FF Extension: Autocopy - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\{0FED7D55-65D4-47b6-A6DE-9A4ADB55355F} [2013-01-07]
FF Extension: FireGestures - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\firegestures@xuldev.org.xpi [2012-08-09]
FF Extension: Secure Login - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\secureLogin@blueimp.net.xpi [2012-08-16]
FF Extension: Tile Tabs - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\tiletabs@DW-dev.xpi [2014-05-06]
FF Extension: BetterPrivacy - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\tefcdjqq.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2012-09-17]
FF HKLM-x32\...\Firefox\Extensions: [antiphishing@bullguard] - c:\program files\bullguard ltd\bullguard\Files32\Antiphishing\FF\antiphishing@bullguard
FF Extension: BullGuard Safe Browsing - c:\program files\bullguard ltd\bullguard\Files32\Antiphishing\FF\antiphishing@bullguard [2013-07-29]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-05-04]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
CHR HomePage: hxxp://www.netvibes.com/privatepage/4#Home
CHR StartupUrls: "hxxp://blog.24stundenbetreut.com/", "chrome-extension://jkkenjlnjfemconejajakbijbheoffli/chrome/sidebar.html?v=__YOONO_BUILD__"
CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-28]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-23]
CHR Extension: (https://translate.google.de/#pl/de/Kochany%20) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkmlelhnmpnjbijdijnmagddkjnjkihn [2014-07-28]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-23]
CHR Extension: (Google-Suche) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-23]
CHR Extension: (Google Kalender) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-07-28]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-07-28]
CHR Extension: (Yoono - Twitter, Facebook, LinkedIn, YouTube™) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli [2014-07-28]
CHR Extension: (Smooth Gestures) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfkgmnnajiljnolcgolmmgnecgldgeld [2014-07-28]
CHR Extension: (Google Maps) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2014-07-28]
CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-23]
CHR Extension: (ImTranslator: Google Translate) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2014-07-28]
CHR Extension: (Picasa) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb [2014-07-28]
CHR Extension: (Google Mail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-23]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - C:\Program Files (x86)\LastPass\lpchrome.crx [2012-08-28]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-03] (Adobe Systems Incorporated)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [52896 2010-10-27] (Atheros Commnucations) [File not signed]
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
R2 BsBackup; c:\program files\bullguard ltd\bullguard\BsBackup.dll [728400 2014-08-07] (BullGuard Ltd.)
R2 BsBhvScan; c:\program files\bullguard ltd\bullguard\BullGuardBhvScanner.exe [529744 2014-08-07] (BullGuard Ltd.)
R2 BsCache; c:\program files\bullguard ltd\bullguard\BsCache.dll [145744 2014-08-07] (BullGuard Ltd.)
R2 BsFileScan; c:\program files\bullguard ltd\bullguard\BsFileScan.dll [419152 2014-08-07] (BullGuard Ltd.)
R2 BsFire; c:\program files\bullguard ltd\bullguard\BsFire.dll [766800 2014-08-07] (BullGuard Ltd.)
R2 BsMailProxy; c:\program files\bullguard ltd\bullguard\BsMailProxy\BsMailProxy.dll [745296 2014-08-07] (BullGuard Ltd.)
R2 BsMain; c:\program files\bullguard ltd\bullguard\bsmain.dll [499536 2014-08-07] (BullGuard Ltd.)
R2 BsScanner; c:\program files\bullguard ltd\bullguard\BullGuardScanner.exe [273232 2014-08-07] (BullGuard Ltd.)
R2 BsUpdate; c:\program files\bullguard ltd\bullguard\BullGuardUpdate.exe [366928 2014-08-06] (BullGuard Ltd.)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [399640 2014-02-07] (Tlapia)
R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [397080 2013-09-29] (Tlapia)
R2 tksock; C:\Program Files (x86)\AGFEO\Tk-Suite\tkserver\tksock.exe [2220664 2013-08-20] (AGFEO )
R2 TVGOnlineUpdateSvc; C:\Program Files (x86)\TVG\OnlineUpdate\OnlineUpdateSvc.exe [398128 2010-12-14] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AFW; C:\Windows\System32\DRIVERS\afw.sys [42760 2014-05-19] (Agnitum Ltd.)
R3 afwcore; C:\Windows\System32\DRIVERS\afwcore.sys [469256 2014-05-19] (Agnitum Ltd.)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R1 BdAgent; C:\Windows\System32\DRIVERS\BdAgent.sys [117184 2014-05-28] (BullGuard Ltd.)
R3 BdNet; C:\Windows\System32\drivers\BdNet.sys [34896 2014-05-19] (BullGuard Ltd.)
R1 BdSpy; C:\Windows\System32\drivers\BdSpy.sys [67680 2014-05-19] (BullGuard Ltd.)
R3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
R3 EvoMouseDriverFilterHidUsb; C:\Windows\System32\DRIVERS\EvoMouseDriverFilterHidUsb.sys [25656 2010-06-23] (Evoluent)
R3 EvoMouseDriverMini; C:\Windows\System32\drivers\EvoMouseDriverMini.sys [22584 2010-06-23] ()
R3 FPCIBASE; C:\Windows\System32\DRIVERS\fpcibase.sys [899328 2009-06-10] (AVM Berlin)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-22] (AVM GmbH)
R1 NovaShieldFilterDriver; C:\Windows\System32\DRIVERS\NSKernel.sys [296368 2014-05-19] (BullGuard Ltd.)
R1 NovaShieldTDIDriver; C:\Windows\System32\DRIVERS\NSNetmon.sys [27544 2014-05-19] (BullGuard Ltd.)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [350160 2013-01-25] (BitDefender S.R.L.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-13 10:58 - 2014-08-13 10:58 - 00027946 _____ () C:\Users\Admin\Desktop\FRST.txt
2014-08-13 10:58 - 2014-08-13 10:58 - 00000512 _____ () C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-08-12 17:56 - 2014-08-13 10:58 - 00000000 ____D () C:\FRST
2014-08-12 17:54 - 2014-08-13 10:23 - 02100224 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2014-08-12 16:48 - 2014-08-12 16:48 - 00000081 _____ () C:\Users\Admin\Desktop\bsi.txt
2014-08-12 16:39 - 2014-08-12 16:39 - 00031682 _____ () C:\ComboFix.txt
2014-08-12 16:31 - 2014-08-12 16:31 - 05569662 ____R (Swearware) C:\Users\Admin\Desktop\ComboFix.exe
2014-08-10 18:29 - 2014-08-10 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-10 18:08 - 2014-08-10 18:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-08 08:09 - 2014-08-13 10:56 - 00001008 _____ () C:\Windows\setupact.log
2014-08-08 08:09 - 2014-08-13 09:41 - 00001456 _____ () C:\Windows\PFRO.log
2014-08-08 08:09 - 2014-08-08 08:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-07 08:34 - 2014-08-07 08:34 - 00153712 _____ (BullGuard Ltd.) C:\Windows\system32\BgGamingMonitor.dll
2014-08-07 08:34 - 2014-08-07 08:34 - 00140280 _____ (BullGuard Ltd.) C:\Windows\SysWOW64\BgGamingMonitor.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00076624 _____ (BullGuard Ltd.) C:\Windows\system32\BGLsp.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00064336 _____ (BullGuard Ltd.) C:\Windows\SysWOW64\BGLsp.dll
2014-07-30 20:25 - 2014-07-30 20:28 - 00000000 ____D () C:\Users\Admin\Desktop\CSV-JS
2014-07-29 10:13 - 2014-07-29 10:13 - 00000000 ___SD () C:\Users\Admin\Documents\Meine Datenquellen
2014-07-28 20:54 - 2014-07-28 20:54 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-28 20:54 - 2014-07-28 20:54 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-28 09:12 - 2014-07-28 09:12 - 00000146 _____ () C:\Users\Admin\Desktop\Internetoptionen - Verknüpfung.lnk
2014-07-25 16:54 - 2014-07-25 17:38 - 00004858 _____ () C:\dvdfab_burn_vso.log
2014-07-25 16:00 - 2014-07-25 16:00 - 00000000 ____D () C:\Users\Admin\AppData\Local\PackageAware
2014-07-24 20:42 - 2014-07-24 20:42 - 00000000 ____D () C:\Windows\ERUNT
2014-07-24 20:37 - 2014-07-24 20:37 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-24 20:30 - 2014-08-13 10:24 - 00000000 ____D () C:\Users\Admin\Desktop\Malware
2014-07-24 18:48 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-07-24 18:48 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-07-24 16:27 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-07-24 16:27 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-07-24 16:17 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-07-24 16:17 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-07-24 16:17 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-07-24 16:17 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-07-24 15:52 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-07-24 15:52 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-24 15:52 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-24 15:52 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-07-24 15:52 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-07-24 15:52 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-07-24 15:52 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-07-24 15:52 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-07-24 15:52 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-07-24 15:52 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-07-24 15:52 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-07-24 15:52 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-07-24 15:52 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-07-24 15:52 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-07-24 15:52 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-07-24 15:52 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-07-24 15:15 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-07-24 15:15 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-07-24 14:54 - 2014-07-24 14:35 - 01354223 _____ () C:\AdwCleaner(17).exe
2014-07-24 14:54 - 2013-07-14 17:32 - 04009167 _____ () C:\ServicesRepair.exe
2014-07-21 20:44 - 2014-07-21 20:44 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ASP
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-13 10:58 - 2014-08-13 10:58 - 00027946 _____ () C:\Users\Admin\Desktop\FRST.txt
2014-08-13 10:58 - 2014-08-13 10:58 - 00000512 _____ () C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD
2014-08-13 10:58 - 2014-08-12 17:56 - 00000000 ____D () C:\FRST
2014-08-13 10:58 - 2013-07-29 10:57 - 00000000 ____D () C:\ProgramData\BullGuard
2014-08-13 10:57 - 2012-08-09 13:28 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Skype
2014-08-13 10:57 - 2012-08-08 17:43 - 00000000 ____D () C:\Users\Admin\Documents\Outlook-Dateien
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-08-13 10:56 - 2014-08-08 08:09 - 00001008 _____ () C:\Windows\setupact.log
2014-08-13 10:56 - 2014-06-24 10:32 - 00003608 _____ () C:\Windows\System32\Tasks\WizMouse
2014-08-13 10:56 - 2012-08-23 11:08 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-13 10:56 - 2012-08-07 17:47 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-08-13 10:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-13 10:55 - 2012-08-08 17:46 - 00000000 ____D () C:\Users\Admin\Documents\PhraseExpress
2014-08-13 10:55 - 2012-08-08 17:05 - 00233752 _____ () C:\Windows\system32\config\afw_db.conf
2014-08-13 10:55 - 2012-08-08 17:05 - 00000224 _____ () C:\Windows\system32\config\afw_hm.conf
2014-08-13 10:55 - 2012-08-07 17:37 - 02057582 _____ () C:\Windows\WindowsUpdate.log
2014-08-13 10:47 - 2012-08-23 11:08 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-13 10:44 - 2013-04-10 10:26 - 00000000 ____D () C:\Users\Admin\~tmp
2014-08-13 10:29 - 2013-11-05 16:29 - 00000338 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-08-13 10:29 - 2012-08-08 09:58 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-13 10:24 - 2014-07-24 20:30 - 00000000 ____D () C:\Users\Admin\Desktop\Malware
2014-08-13 10:24 - 2012-08-07 17:37 - 00000000 ____D () C:\Users\Admin
2014-08-13 10:23 - 2014-08-12 17:54 - 02100224 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2014-08-13 09:51 - 2014-06-20 07:55 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2014-08-13 09:50 - 2009-07-14 06:45 - 00022368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-13 09:50 - 2009-07-14 06:45 - 00022368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-13 09:47 - 2010-11-21 08:50 - 00702942 _____ () C:\Windows\system32\perfh007.dat
2014-08-13 09:47 - 2010-11-21 08:50 - 00150582 _____ () C:\Windows\system32\perfc007.dat
2014-08-13 09:47 - 2009-07-14 07:13 - 01637932 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-13 09:41 - 2014-08-08 08:09 - 00001456 _____ () C:\Windows\PFRO.log
2014-08-12 18:51 - 2013-10-15 20:16 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D781DCA7-39F3-4ADE-9B92-F10BCBB64E55}
2014-08-12 16:48 - 2014-08-12 16:48 - 00000081 _____ () C:\Users\Admin\Desktop\bsi.txt
2014-08-12 16:39 - 2014-08-12 16:39 - 00031682 _____ () C:\ComboFix.txt
2014-08-12 16:39 - 2013-07-27 20:01 - 00000000 ____D () C:\Qoobox
2014-08-12 16:38 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-08-12 16:31 - 2014-08-12 16:31 - 05569662 ____R (Swearware) C:\Users\Admin\Desktop\ComboFix.exe
2014-08-12 14:33 - 2013-03-31 18:29 - 00000000 ____D () C:\Program Files (x86)\StarMoney 9.0
2014-08-11 09:38 - 2012-08-09 11:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-10 19:55 - 2012-08-12 19:38 - 00000000 ____D () C:\Users\Admin\Desktop\Medien
2014-08-10 18:38 - 2014-02-07 11:59 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc
2014-08-10 18:30 - 2012-12-17 18:31 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\dvdcss
2014-08-10 18:29 - 2014-08-10 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-10 18:08 - 2014-08-10 18:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-08 16:59 - 2014-07-02 21:02 - 00000000 ____D () C:\Users\Admin\Desktop\Bullguard
2014-08-08 16:23 - 2012-09-03 17:50 - 00000000 ____D () C:\Program Files (x86)\Music Wizard
2014-08-08 16:00 - 2013-05-20 17:49 - 00000000 __HDC () C:\Users\Admin\AppData\Local\{C6B707E6-325A-4AB7-BC10-1D3EB2DDFF13}
2014-08-08 16:00 - 2012-08-09 10:35 - 00000372 _____ () C:\Windows\Tasks\yourMail free edition Updates for Admin-PC_Admin.job
2014-08-08 09:14 - 2012-08-08 16:52 - 00000000 ____D () C:\Users\Admin\Desktop\Tools
2014-08-08 08:09 - 2014-08-08 08:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-07 20:41 - 2012-08-08 11:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-07 08:34 - 2014-08-07 08:34 - 00153712 _____ (BullGuard Ltd.) C:\Windows\system32\BgGamingMonitor.dll
2014-08-07 08:34 - 2014-08-07 08:34 - 00140280 _____ (BullGuard Ltd.) C:\Windows\SysWOW64\BgGamingMonitor.dll
2014-08-06 15:43 - 2012-12-13 20:58 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-07-31 12:55 - 2014-07-31 12:55 - 00076624 _____ (BullGuard Ltd.) C:\Windows\system32\BGLsp.dll
2014-07-31 12:55 - 2014-07-31 12:55 - 00064336 _____ (BullGuard Ltd.) C:\Windows\SysWOW64\BGLsp.dll
2014-07-30 20:28 - 2014-07-30 20:25 - 00000000 ____D () C:\Users\Admin\Desktop\CSV-JS
2014-07-29 10:13 - 2014-07-29 10:13 - 00000000 ___SD () C:\Users\Admin\Documents\Meine Datenquellen
2014-07-28 20:54 - 2014-07-28 20:54 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-28 20:54 - 2014-07-28 20:54 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-28 20:54 - 2014-07-28 20:54 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-28 09:12 - 2014-07-28 09:12 - 00000146 _____ () C:\Users\Admin\Desktop\Internetoptionen - Verknüpfung.lnk
2014-07-25 17:40 - 2012-08-14 16:05 - 00000000 ____D () C:\Users\Admin\Desktop\Brennen
2014-07-25 17:39 - 2014-04-01 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 9
2014-07-25 17:39 - 2014-04-01 15:31 - 00000000 ____D () C:\Program Files (x86)\DVDFab 9
2014-07-25 17:39 - 2013-12-11 20:35 - 00000000 ____D () C:\Users\Admin\Documents\DVDFab9
2014-07-25 17:38 - 2014-07-25 16:54 - 00004858 _____ () C:\dvdfab_burn_vso.log
2014-07-25 16:00 - 2014-07-25 16:00 - 00000000 ____D () C:\Users\Admin\AppData\Local\PackageAware
2014-07-25 14:15 - 2013-10-17 18:25 - 00000076 _____ () C:\Windows\SETSCAN.INI
2014-07-25 14:00 - 2012-08-09 17:17 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\PhraseExpress
2014-07-25 10:37 - 2013-01-16 12:16 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-25 09:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-25 08:13 - 2013-07-29 10:57 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\BullGuard
2014-07-24 20:42 - 2014-07-24 20:42 - 00000000 ____D () C:\Windows\ERUNT
2014-07-24 20:37 - 2014-07-24 20:37 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-24 16:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-07-24 16:15 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-24 15:37 - 2013-03-11 15:06 - 00000000 ____D () C:\Users\Admin\AppData\Local\LogMeIn Rescue Applet
2014-07-24 14:40 - 2012-12-04 14:12 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 14:40 - 2012-12-04 14:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 14:35 - 2014-07-24 14:54 - 01354223 _____ () C:\AdwCleaner(17).exe
2014-07-24 09:52 - 2012-12-04 14:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-22 07:57 - 2009-07-14 06:45 - 06305968 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-21 20:51 - 2012-08-07 17:53 - 00088800 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-21 20:44 - 2014-07-21 20:44 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ASP
2014-07-21 20:30 - 2012-08-13 19:48 - 00000000 ____D () C:\Users\Admin\AppData\Local\CrashDumps
2014-07-21 20:29 - 2013-04-04 20:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-07 09:00
==================== End Of Log ============================
__________________ LG der WeTi |
|
13.08.2014, 10:18
| #26 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Ok, prüf mal ob die Proxyeinstellung so bleibt wie gewollt
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2014, 10:20
| #27 |
| | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Nein, der Proxy war wieder aktiviert
__________________ LG der WeTi |
|
13.08.2014, 10:35
| #28 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Welche(r) Browser?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2014, 10:47
| #29 |
| | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Lieber Cosinus, ich bin nun etwas verwirrt, denn nachdem du gefragt hast, habe ich den Chrome gestartet - und siehe da er hat eine Internetverbindung aufgebaut obwohl der Proxy aktiviert war. Ich habe dann mal einen Neustart gemacht - der Proxy ist immer noch aktiviert und Chrome und IE funzen trotzdem! Ist das Problem jetzt gelöst - oder muss ich mir weiter Gedanken machen wegen des aktivierten Proxys UND böser Tierchen? Und soll ich das aktiviert lassen?
__________________ LG der WeTi |
|
13.08.2014, 11:05
| #30 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen Der Proxy ist sowohl im IE also auch im Chrome noch aktiv?  Sicher? Machst mal nen aktuellen Screenshot davon direkt anch Neustart?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Ungewolltes Aktivieren der Proxyserververbindung in den Interneteinstellungen |
| aktivieren, einstellungen, folgendes, funktionieren, interne, keine verbindung, lan, nsis/startpage.cc, nsis/startpge.cc, ungewollte, verbindung, verbindungen, win32/adware.toolplugin.a, win32/installshare.a, win32/softonicdownloader.e, win32/startpage.oie, win32/startpage.oph, win32/systweak.d, win32/toolbar.babylon, win32/toolbar.conduit, win32/toolbar.conduit.ae, win32/toolbar.conduit.ai |
Linear-Darstellung
