Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Mama\Lara\setup.exe

C:\Program Files (x86)\VK Downloader\BackgroundSingleton.exe

C:\Program Files (x86)\VK Downloader\Interfaces32.dll

C:\Program Files (x86)\VK Downloader\Interfaces64.dll

C:\Program Files (x86)\VK Downloader\Loader.exe

C:\Program Files (x86)\VK Downloader\uninstall.exe

C:\Program Files (x86)\VK Downloader\Uninstaller.exe

C:\ProgramData\InstallMate\{A7F80DBD-08AB-A060-428B-40897C1B2F4B}\_Setupx.dll

C:\Qoobox\Quarantine\C\Program Files (x86)\ABBYY FineReader 9.0 Sprint\e8b81c09-4582-4567-aca3-7b6a8bedd113.dll.vir

C:\Qoobox\Quarantine\C\Program Files (x86)\e8b81c09-4582-4567-aca3-7b6a8bedd113\a7583f0c-5de1-4b3c-b81d-a194f7ef8d53.dll.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Local\Temp\fxn4o3xm.hgs\dcore.exe.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\3Gvk@YI.edu\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\AlVxq@2.net\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\ByBcJl@9.com\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\fa@EPiwoaew.org\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\hti@xXD.com\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\tj@Y.edu\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\TJbOjzNG@I.net\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\vk2s7@Iy8.com\content\bg.js.vir

C:\Users\All Users\InstallMate\{A7F80DBD-08AB-A060-428B-40897C1B2F4B}\_Setupx.dll

C:\Users\Fm. Medved\AppData\Local\InstallShare\2_20124_installer.exe

C:\Users\Fm. Medved\AppData\Local\SystemDir\nethost.exe

C:\Users\Fm. Medved\AppData\Local\SystemDir\nethost_update.exe

C:\Users\Fm. Medved\AppData\Local\SystemDir\setsearchm.exe

C:\Users\Fm. Medved\AppData\Roaming\AVG\Rescue\PC Tuneup 2011\120820161926670.rsc

C:\Users\Fm. Medved\AppData\Roaming\PremiumCraft_slave\Mining.exe

C:\Users\Fm. Medved\AppData\Roaming\TicnoTemp\homepage.exe

C:\Users\Fm. Medved\AppData\Roaming\TicnoTemp\multibar_setup.exe

C:\Users\Fm. Medved\AppData\Roaming\TomTom\adobeupd.exe

C:\Users\Fm. Medved\Downloads\Plants vs. Zombies Garden Warfare\Setup.exe

C:\Windows\setup.exe

C:\Windows\assembly\GAC_MSIL\BandObjectLib\1.0.0.0__4b827ebe229d539f\BandObjectLib.dll

C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll

C:\Windows\Installer\f2f010.msi

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[1].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[2].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[3].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[4].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[5].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[6].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[1].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[2].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[3].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[4].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[5].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[6].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].exe
HKLM-x32\...\Run: [Adobe Flash Player SU] => C:\Windows\System32\cmd.exe /k if %date:~6,4%%date:~3,2%%date:~0,2% LEQ 20130606 (exit) else (start hxxp://liketour.org/ && exit)
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [7bb57c0fd12a2022cd4bb9ea] => iexplore.exe
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [mliznprdtc] => cmd /c start hxxp://foretuned.com/
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [MaxDownload] => C:\Users\Fm. Medved\AppData\Roaming\MaxDownload\Updater.exe [308224 2014-10-13] ()
GroupPolicyUsers\S-1-5-21-347752443-2393636236-3195270278-1009\User: Group Policy restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 192.168.1.1

Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de



Java und Adobe updaten.



Frisches FRST log bitte.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-02-2015 01
Ran by Fm. Medved at 2015-02-26 16:16:01 Run:1
Running from C:\Users\Fm. Medved\Desktop
Loaded Profiles: Fm. Medved (Available profiles: Fm. Medved & UpdatusUser & Gast)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Mama\Lara\setup.exe

C:\Program Files (x86)\VK Downloader\BackgroundSingleton.exe

C:\Program Files (x86)\VK Downloader\Interfaces32.dll

C:\Program Files (x86)\VK Downloader\Interfaces64.dll

C:\Program Files (x86)\VK Downloader\Loader.exe

C:\Program Files (x86)\VK Downloader\uninstall.exe

C:\Program Files (x86)\VK Downloader\Uninstaller.exe

C:\ProgramData\InstallMate\{A7F80DBD-08AB-A060-428B-40897C1B2F4B}\_Setupx.dll

C:\Qoobox\Quarantine\C\Program Files (x86)\ABBYY FineReader 9.0 Sprint\e8b81c09-4582-4567-aca3-7b6a8bedd113.dll.vir

C:\Qoobox\Quarantine\C\Program Files (x86)\e8b81c09-4582-4567-aca3-7b6a8bedd113\a7583f0c-5de1-4b3c-b81d-a194f7ef8d53.dll.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Local\Temp\fxn4o3xm.hgs\dcore.exe.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\3Gvk@YI.edu\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\AlVxq@2.net\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\ByBcJl@9.com\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\fa@EPiwoaew.org\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\hti@xXD.com\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\tj@Y.edu\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\TJbOjzNG@I.net\content\bg.js.vir

C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\vk2s7@Iy8.com\content\bg.js.vir

C:\Users\All Users\InstallMate\{A7F80DBD-08AB-A060-428B-40897C1B2F4B}\_Setupx.dll

C:\Users\Fm. Medved\AppData\Local\InstallShare\2_20124_installer.exe

C:\Users\Fm. Medved\AppData\Local\SystemDir\nethost.exe

C:\Users\Fm. Medved\AppData\Local\SystemDir\nethost_update.exe

C:\Users\Fm. Medved\AppData\Local\SystemDir\setsearchm.exe

C:\Users\Fm. Medved\AppData\Roaming\AVG\Rescue\PC Tuneup 2011\120820161926670.rsc

C:\Users\Fm. Medved\AppData\Roaming\PremiumCraft_slave\Mining.exe

C:\Users\Fm. Medved\AppData\Roaming\TicnoTemp\homepage.exe

C:\Users\Fm. Medved\AppData\Roaming\TicnoTemp\multibar_setup.exe

C:\Users\Fm. Medved\AppData\Roaming\TomTom\adobeupd.exe

C:\Users\Fm. Medved\Downloads\Plants vs. Zombies Garden Warfare\Setup.exe

C:\Windows\setup.exe

C:\Windows\assembly\GAC_MSIL\BandObjectLib\1.0.0.0__4b827ebe229d539f\BandObjectLib.dll

C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll

C:\Windows\Installer\f2f010.msi

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[1].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[2].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[3].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[4].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[5].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[6].exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[1].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[2].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[3].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[4].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[5].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[6].exe

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].exe
HKLM-x32\...\Run: [Adobe Flash Player SU] => C:\Windows\System32\cmd.exe /k if %date:~6,4%%date:~3,2%%date:~0,2% LEQ 20130606 (exit) else (start hxxp://liketour.org/ && exit)
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [7bb57c0fd12a2022cd4bb9ea] => iexplore.exe
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [mliznprdtc] => cmd /c start hxxp://foretuned.com/
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [MaxDownload] => C:\Users\Fm. Medved\AppData\Roaming\MaxDownload\Updater.exe [308224 2014-10-13] ()
GroupPolicyUsers\S-1-5-21-347752443-2393636236-3195270278-1009\User: Group Policy restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 192.168.1.1

Emptytemp:
         
*****************

C:\Mama\Lara\setup.exe => Moved successfully.
C:\Program Files (x86)\VK Downloader\BackgroundSingleton.exe => Moved successfully.
C:\Program Files (x86)\VK Downloader\Interfaces32.dll => Moved successfully.
C:\Program Files (x86)\VK Downloader\Interfaces64.dll => Moved successfully.
C:\Program Files (x86)\VK Downloader\Loader.exe => Moved successfully.
C:\Program Files (x86)\VK Downloader\uninstall.exe => Moved successfully.
C:\Program Files (x86)\VK Downloader\Uninstaller.exe => Moved successfully.
C:\ProgramData\InstallMate\{A7F80DBD-08AB-A060-428B-40897C1B2F4B}\_Setupx.dll => Moved successfully.
C:\Qoobox\Quarantine\C\Program Files (x86)\ABBYY FineReader 9.0 Sprint\e8b81c09-4582-4567-aca3-7b6a8bedd113.dll.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Program Files (x86)\e8b81c09-4582-4567-aca3-7b6a8bedd113\a7583f0c-5de1-4b3c-b81d-a194f7ef8d53.dll.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Local\Temp\fxn4o3xm.hgs\dcore.exe.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\3Gvk@YI.edu\content\bg.js.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\AlVxq@2.net\content\bg.js.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\ByBcJl@9.com\content\bg.js.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\fa@EPiwoaew.org\content\bg.js.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\hti@xXD.com\content\bg.js.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\tj@Y.edu\content\bg.js.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\TJbOjzNG@I.net\content\bg.js.vir => Moved successfully.
C:\Qoobox\Quarantine\C\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged\vk2s7@Iy8.com\content\bg.js.vir => Moved successfully.
"C:\Users\All Users\InstallMate\{A7F80DBD-08AB-A060-428B-40897C1B2F4B}\_Setupx.dll" => File/Directory not found.
C:\Users\Fm. Medved\AppData\Local\InstallShare\2_20124_installer.exe => Moved successfully.
C:\Users\Fm. Medved\AppData\Local\SystemDir\nethost.exe => Moved successfully.
C:\Users\Fm. Medved\AppData\Local\SystemDir\nethost_update.exe => Moved successfully.
C:\Users\Fm. Medved\AppData\Local\SystemDir\setsearchm.exe => Moved successfully.
C:\Users\Fm. Medved\AppData\Roaming\AVG\Rescue\PC Tuneup 2011\120820161926670.rsc => Moved successfully.
C:\Users\Fm. Medved\AppData\Roaming\PremiumCraft_slave\Mining.exe => Moved successfully.
C:\Users\Fm. Medved\AppData\Roaming\TicnoTemp\homepage.exe => Moved successfully.
C:\Users\Fm. Medved\AppData\Roaming\TicnoTemp\multibar_setup.exe => Moved successfully.
C:\Users\Fm. Medved\AppData\Roaming\TomTom\adobeupd.exe => Moved successfully.
C:\Users\Fm. Medved\Downloads\Plants vs. Zombies Garden Warfare\Setup.exe => Moved successfully.
C:\Windows\setup.exe => Moved successfully.
C:\Windows\assembly\GAC_MSIL\BandObjectLib\1.0.0.0__4b827ebe229d539f\BandObjectLib.dll => Moved successfully.
C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll => Moved successfully.
C:\Windows\Installer\f2f010.msi => Moved successfully.
"C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[1].exe" => File/Directory not found.
"C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[2].exe" => File/Directory not found.
"C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[3].exe" => File/Directory not found.
"C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[4].exe" => File/Directory not found.
"C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[5].exe" => File/Directory not found.
"C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[6].exe" => File/Directory not found.
"C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].exe" => File/Directory not found.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[1].exe => Moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[2].exe => Moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[3].exe => Moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[4].exe => Moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[5].exe => Moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\inethnfd-setup[6].exe => Moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].exe => Moved successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe Flash Player SU => value deleted successfully.
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\Software\Microsoft\Windows\CurrentVersion\Run\\7bb57c0fd12a2022cd4bb9ea => value deleted successfully.
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\Software\Microsoft\Windows\CurrentVersion\Run\\mliznprdtc => value deleted successfully.
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\Software\Microsoft\Windows\CurrentVersion\Run\\MaxDownload => value deleted successfully.
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-347752443-2393636236-3195270278-1009\User => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value deleted successfully.
EmptyTemp: => Removed 51.8 MB temporary data.


The system needed a reboot. 

==== End of Fixlog 16:17:18 ====
         

Wie soll ich adobe ugraden?

er meint java ist schon auf den aktuellen Stand

wenn ich chrome deinstalliere gehen Lesezeichen verloren?

Lesezeichen kannste vorher exportieren, aber sonst nix. Adobe Reader deinstallieren, aktuelle Version installieren.

Danke für deine Hilfe! Kannst du mir bitte sagen welches Adobe ich deinstallieren soll, da sind viele z. B. Adobe Flas hplayer 16 NPAPI, Adobe Flas hplayer 16 activX, Adobe air, adobe reader X, adobe media player und adbe schockwavwe player...

google chrome neuaufgesetzt


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01
Ran by Fm. Medved (administrator) on FMMEDVED-PC on 27-02-2015 16:18:39
Running from C:\Users\Fm. Medved\Desktop\Trojaner Board
Loaded Profiles: Fm. Medved (Available profiles: Fm. Medved & UpdatusUser & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIHJE.EXE
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(BitTorrent Inc.) C:\Users\Fm. Medved\AppData\Roaming\uTorrent\uTorrent.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-08-30] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2014-10-14] (Microsoft Corporation)
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHJE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Run: [Google Update] => C:\Users\Fm. Medved\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-06-14] (Google Inc.)
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\RunOnce: [SeznamInstall-uninstall:5e0b3d2518a49c7e9878480c49c74fe7] => C:\Users\FM3A93~1.MED\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe [534528 2015-02-26] () <===== ATTENTION
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-347752443-2393636236-3195270278-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-347752443-2393636236-3195270278-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = 
SearchScopes: HKLM-x32 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-347752443-2393636236-3195270278-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.134.0.cab
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Fm. Medved\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @Skype Technologies S.A..com/Skype Web Plugin -> C:\Program Files (x86)\SkypeWebPlugin\3.1.15602.22612\npSkypeWebPlugin64.dll (Skype)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Skype Technologies S.A..com/Skype Web Plugin -> C:\Program Files (x86)\SkypeWebPlugin\3.1.15602.22612\npSkypeWebPlugin.dll (Skype)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-347752443-2393636236-3195270278-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Fm. Medved\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-347752443-2393636236-3195270278-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Fm. Medved\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-347752443-2393636236-3195270278-1001: @talk.google.com/O1DPlugin -> C:\Users\Fm. Medved\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-347752443-2393636236-3195270278-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Fm. Medved\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-347752443-2393636236-3195270278-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Fm. Medved\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-347752443-2393636236-3195270278-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Fm. Medved\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-347752443-2393636236-3195270278-1001: ubisoft.com/uplaypc -> C:\Spiele\The.Settlers7.PtaK.Multi9-RU.Repack\INstall\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\orbit\npuplaypc.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\Fm. Medved\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Fm. Medved\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKU\S-1-5-21-347752443-2393636236-3195270278-1001\...\Firefox\Extensions: [{8c9ee4c1-6fb6-4773-afd6-23f4398777ac}] - C:\Program Files (x86)\LyricsPal\130.xpi

Chrome: 
=======
CHR Profile: C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-27]
CHR Extension: (Google Docs) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-27]
CHR Extension: (Google Drive) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-27]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-27]
CHR Extension: (YouTube) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-27]
CHR Extension: (Google Search) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-27]
CHR Extension: (Google Sheets) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-27]
CHR Extension: (Google Wallet) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-27]
CHR Extension: (Gmail) - C:\Users\Fm. Medved\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-27]
CHR HKLM-x32\...\Chrome\Extension: [cifhijkiiikloafabeloklapclpjgpom] - C:\Users\Fm. Medved\AppData\Roaming\VkVideo\chrome.crx [2012-10-24]
CHR HKLM-x32\...\Chrome\Extension: [gdknicmnhbaajdglbinpahhapghpakch] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jedelkhanefmcnpappfhachbpnlhomai] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [mfhobjnbhogmcagcbgjlileeghfbbodm] - C:\ProgramData\ADDICT-THING\mfhobjnbhogmcagcbgjlileeghfbbodm.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [pganlglbhgfjfgopijbhemcpbehjnpia] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [phfiheafjohhojemkgljhlhfpgdlpppa] - C:\Program Files (x86)\TrustMediaViewerV1\TrustMediaViewerV1alpha6627\ch\TrustMediaViewerV1alpha6627.crx [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-02-14] (BitRaider, LLC)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-03-13] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-03-13] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [770832 2014-03-13] (BlueStack Systems, Inc.)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-11-03] (CyberGhost S.R.L)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174624 2015-02-02] (EasyAntiCheat Ltd)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-01-31] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-01-24] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2015-02-05] ()
S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2015-02-14] (BitRaider)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [121616 2014-03-13] (BlueStack Systems)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2015-02-05] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R1 MpKsl9f0314ef; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{84E2FA39-B9C8-4C46-8A69-ABF342B7CDB7}\MpKsl9f0314ef.sys [45352 2015-02-26] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2012-02-04] () [File not signed]
U3 avaywmde; C:\Windows\System32\Drivers\avaywmde.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero size file/folder)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-27 16:11 - 2015-02-27 16:11 - 00002211 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-27 16:11 - 2015-02-27 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-27 16:10 - 2015-02-27 16:10 - 00004114 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d051d7613d839e
2015-02-27 15:09 - 2015-02-27 15:09 - 00211183 _____ () C:\Users\Fm. Medved\Desktop\bookmarks_27.02.15WL.html
2015-02-27 13:34 - 2015-02-27 13:34 - 00211183 _____ () C:\Users\Fm. Medved\Desktop\bookmarks_27.02.15.html
2015-02-27 11:50 - 2015-02-27 11:50 - 00000000 ____D () C:\Users\Fm. Medved\Downloads\Тяжёлая Атлетика - Санкции [EP] (2015)
2015-02-27 04:33 - 2015-02-27 04:35 - 00000000 ____D () C:\Users\Fm. Medved\Downloads\sagrada_[tfile.ru]
2015-02-27 04:16 - 2015-02-27 04:16 - 00012885 _____ () C:\Users\Fm. Medved\Downloads\[Sound-Park.ru] Òÿæåëàÿ Àòëåòèêà - Ñàíêöèè EP.torrent
2015-02-27 03:37 - 2015-02-27 03:41 - 16961973 _____ () C:\Users\Fm. Medved\Desktop\Саграда(Соль Земли) - Лицо огня.mp4
2015-02-26 17:34 - 2015-02-26 17:35 - 69509120 _____ () C:\Users\Fm. Medved\Downloads\calibre-64bit-2.20.0.msi
2015-02-26 16:58 - 2015-02-26 16:58 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\Oracle
2015-02-26 16:53 - 2015-02-27 16:18 - 00000000 ____D () C:\Users\Fm. Medved\Desktop\Trojaner Board
2015-02-26 16:24 - 2015-02-26 16:24 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-02-26 16:23 - 2015-02-26 16:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Fm. Medved\Downloads\revosetup95.exe
2015-02-26 16:17 - 2015-02-27 16:15 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d051d7613d839e.job
2015-02-26 05:33 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-26 05:33 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 23:38 - 2015-02-25 23:38 - 00000000 _____ () C:\Users\Fm. Medved\Sti_Trace.log
2015-02-23 22:18 - 2015-02-23 22:18 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-20 16:13 - 2015-02-20 16:13 - 00042114 _____ () C:\ComboFix.txt
2015-02-20 15:57 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-02-20 15:57 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-02-20 15:57 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-02-20 15:57 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-02-20 15:57 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-02-20 15:57 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2015-02-20 15:57 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2015-02-20 15:57 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2015-02-20 15:44 - 2015-02-20 16:13 - 00000000 ____D () C:\Qoobox
2015-02-20 15:43 - 2015-02-20 16:11 - 00000000 ____D () C:\Windows\erdnt
2015-02-20 04:17 - 2015-02-20 04:19 - 00000023 _____ () C:\Users\Fm. Medved\jagexappletviewer.preferences
2015-02-20 04:17 - 2015-02-20 04:17 - 00000049 _____ () C:\Users\Fm. Medved\jagex_cl_runescape_LIVE.dat
2015-02-19 21:58 - 2015-02-20 04:17 - 00000000 ____D () C:\Users\Fm. Medved\jagexcache
2015-02-19 21:58 - 2015-02-19 21:58 - 00002118 _____ () C:\Users\Fm. Medved\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape.lnk
2015-02-19 21:58 - 2015-02-19 21:58 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape
2015-02-19 16:03 - 2015-02-20 15:34 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-02-18 15:00 - 2015-02-18 15:00 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2015-02-18 15:00 - 2015-02-18 15:00 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\Canneverbe Limited
2015-02-18 15:00 - 2015-02-18 15:00 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2015-02-18 15:00 - 2015-02-18 15:00 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2015-02-17 13:56 - 2015-02-27 16:18 - 00000000 ____D () C:\FRST
2015-02-15 13:07 - 2015-02-15 13:11 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\.technic
2015-02-14 20:00 - 2015-02-14 20:00 - 00000000 ____D () C:\Users\Fm. Medved\Desktop\Das Lied von Eis & Feuer
2015-02-14 19:48 - 2015-02-14 20:02 - 00000000 ____D () C:\Users\Fm. Medved\Desktop\Knigy
2015-02-14 19:48 - 2015-02-14 19:48 - 00096768 _____ () C:\Users\Fm. Medved\Downloads\Буньян Джон. Путешествие пилигрима - royallib.com.fb2.zip
2015-02-14 13:37 - 2015-02-14 13:37 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\SWTOR
2015-02-14 12:43 - 2015-02-14 12:43 - 00000000 ____D () C:\Users\Public\Documents\BitRaider
2015-02-14 12:43 - 2015-02-14 12:43 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\SWTORPerf
2015-02-14 12:43 - 2015-02-14 12:43 - 00000000 ____D () C:\ProgramData\BitRaider
2015-02-14 12:40 - 2015-02-14 12:40 - 00015881 _____ () C:\Users\Fm. Medved\Documents\Install STAR WARS The Old Republic.log
2015-02-14 12:40 - 2015-02-14 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA
2015-02-14 12:04 - 2015-02-14 12:05 - 00003582 _____ () C:\Windows\System32\Tasks\WdfHG
2015-02-14 11:54 - 2015-02-14 12:05 - 00000000 ____D () C:\Program Files (x86)\Plants vs. Zombies Garden Warfare
2015-02-14 10:54 - 2015-02-14 10:54 - 00000097 _____ () C:\Users\Fm. Medved\Documents\Plants v.s Zombies Garden Warfare.rar
2015-02-14 10:10 - 2015-02-14 10:10 - 00000000 ____D () C:\Users\Fm. Medved\Downloads\The.Amazing.Spider-Man.2.Proper-RELOADED
2015-02-14 10:07 - 2015-02-14 10:07 - 00001951 _____ () C:\Users\UpdatusUser.FmMedved-PC\Desktop\MaxDownload.lnk
2015-02-14 10:07 - 2015-02-14 10:07 - 00001951 _____ () C:\Users\Gast.FmMedved-PC\Desktop\MaxDownload.lnk
2015-02-14 10:07 - 2015-02-14 10:07 - 00000000 ____D () C:\Users\Fm. Medved\Downloads\maxload
2015-02-14 10:07 - 2015-02-14 10:07 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MaxDownload
2015-02-14 10:07 - 2015-02-14 10:07 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\MaxDownload
2015-02-14 10:07 - 2015-02-14 10:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaxDownload
2015-02-14 00:18 - 2015-02-14 00:18 - 00839110 _____ () C:\Users\Fm. Medved\Downloads\Толстой Лев. Анна Каренина - royallib.com.fb2.zip
2015-02-14 00:12 - 2015-02-14 00:12 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\calibre-cache
2015-02-14 00:10 - 2015-02-26 17:43 - 00000000 ____D () C:\Users\Fm. Medved\Documents\Calibre-Bibliothek
2015-02-14 00:10 - 2015-02-14 20:05 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\calibre
2015-02-14 00:09 - 2015-02-26 17:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2015-02-14 00:09 - 2015-02-26 17:45 - 00000000 ____D () C:\Program Files\Calibre2
2015-02-12 17:00 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 17:00 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 17:00 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 17:00 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 14:45 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 14:45 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 14:45 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 14:45 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 14:45 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 14:45 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 14:45 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 14:45 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 14:45 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 14:45 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 14:45 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 14:45 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 14:45 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 14:45 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 14:45 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 14:45 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 14:45 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 14:45 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 14:45 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 14:45 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 14:45 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 14:45 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 14:45 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 14:45 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 14:45 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 14:45 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 14:45 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 14:45 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 14:45 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 14:45 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 14:45 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 14:45 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 14:45 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 14:45 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 14:45 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 14:45 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 14:45 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 14:45 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 14:45 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 14:45 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 14:45 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 14:45 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 14:45 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 14:45 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 14:45 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 14:45 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 14:45 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 14:44 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 14:44 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 14:44 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 14:44 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 14:44 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 14:44 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 14:44 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 14:44 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 14:44 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 14:44 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 14:44 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 14:44 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 14:44 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 14:44 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 14:44 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 14:44 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 14:44 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 14:44 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 14:44 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 14:44 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 14:44 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 14:44 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 14:44 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 14:44 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 14:44 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 14:44 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 14:44 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 14:44 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 14:44 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 14:44 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 14:44 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 14:44 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 14:44 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 14:44 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 14:44 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 14:44 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 14:44 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 14:44 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 14:44 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 14:44 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 14:44 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 14:44 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 14:44 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 14:44 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 14:44 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 14:44 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 14:44 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 14:44 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 14:44 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 14:44 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 14:44 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 14:43 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 14:43 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 14:43 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 14:43 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 14:43 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 14:43 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 14:43 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 14:43 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 14:43 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 14:43 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-10 01:53 - 2015-02-26 16:53 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-10 01:53 - 2015-02-19 17:27 - 00097496 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-10 01:53 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-10 01:52 - 2015-02-10 01:53 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-02-10 01:52 - 2015-02-10 01:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-10 01:52 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-10 01:29 - 2015-02-13 13:23 - 00000000 ____D () C:\Windows\pss
2015-02-10 01:02 - 2015-02-22 15:29 - 00000000 ____D () C:\AdwCleaner
2015-02-09 11:49 - 2015-02-09 11:49 - 00000687 _____ () C:\awh3BE7.tmp
2015-02-09 09:32 - 2015-02-09 09:32 - 00000687 _____ () C:\awh777F.tmp
2015-02-08 23:33 - 2015-02-09 01:28 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\ArmA 2 OA
2015-02-08 23:33 - 2015-02-08 23:35 - 00000000 ____D () C:\Users\Fm. Medved\Documents\ArmA 2
2015-02-08 18:12 - 2015-02-08 18:13 - 00000000 ____D () C:\Program Files (x86)\Team Liquid Streams
2015-02-08 14:13 - 2015-02-08 14:13 - 00000000 ____D () C:\Program Files (x86)\Click free Browsing
2015-02-08 09:56 - 2015-02-08 09:56 - 00000687 _____ () C:\awh8729.tmp
2015-02-08 09:47 - 2015-02-26 16:16 - 00000000 ____D () C:\Users\Fm. Medved\Downloads\Plants vs. Zombies Garden Warfare
2015-02-08 09:17 - 2015-02-08 09:17 - 00000687 _____ () C:\awh862F.tmp
2015-02-07 22:16 - 2015-02-07 22:16 - 00000687 _____ () C:\awhA85F.tmp
2015-02-07 11:26 - 2015-02-07 12:05 - 00000000 ____D () C:\Program Files (x86)\The Sims 3 Designer Edition
2015-02-07 10:13 - 2015-02-07 10:13 - 00000687 _____ () C:\awh52E.tmp
2015-02-06 18:50 - 2015-02-06 19:00 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\CyberGhost
2015-02-06 18:50 - 2015-02-06 18:50 - 00000000 ____D () C:\Program Files\TAP-Windows
2015-02-06 18:49 - 2015-02-07 12:24 - 00001897 _____ () C:\Users\Fm. Medved\Desktop\CyberGhost 5.lnk
2015-02-06 18:49 - 2015-02-06 18:50 - 00000000 ____D () C:\Program Files\CyberGhost 5
2015-02-06 18:49 - 2015-02-06 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5
2015-02-06 16:20 - 2015-02-06 16:20 - 00002655 _____ () C:\Users\Public\Desktop\Assassin's Creed 4 - Черный Флаг.lnk
2015-02-06 16:20 - 2015-02-06 16:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assassin's Creed 4 - Черный Флаг
2015-02-06 15:55 - 2015-02-06 15:55 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Setup Integrity Check
2015-02-06 12:58 - 2015-02-06 12:58 - 00000687 _____ () C:\awh1BE9.tmp
2015-02-05 20:47 - 2015-02-05 20:47 - 00000687 _____ () C:\awh7722.tmp
2015-02-05 20:37 - 2015-02-06 16:58 - 00000000 ____D () C:\Users\Fm. Medved\Documents\Assassin's Creed IV Black Flag
2015-02-05 14:17 - 2015-02-05 14:17 - 00001375 _____ () C:\Users\Fm. Medved\Desktop\Play Settlers 6 - Verknüpfung.lnk
2015-02-05 14:10 - 2015-02-05 14:10 - 00310984 _____ () C:\Windows\system32\Drivers\atksgt.sys
2015-02-05 14:10 - 2015-02-05 14:10 - 00042696 _____ () C:\Windows\system32\Drivers\lirsgt.sys
2015-02-05 11:17 - 2015-02-06 13:04 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\VoipConnect
2015-02-05 11:17 - 2015-02-05 11:17 - 00001191 _____ () C:\Users\Fm. Medved\Desktop\VoipConnect.lnk
2015-02-05 11:17 - 2015-02-05 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VoipConnect
2015-02-05 11:17 - 2015-02-05 11:17 - 00000000 ____D () C:\Program Files (x86)\VoipConnect.com
2015-02-05 11:13 - 2015-02-05 11:13 - 00000687 _____ () C:\awhB9FB.tmp
2015-02-05 04:54 - 2015-02-25 16:10 - 00000020 _____ () C:\Users\Fm. Medved\AppData\Roaming\appdataFr3.bin
2015-02-04 18:20 - 2015-02-04 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-02-04 18:17 - 2015-02-04 18:17 - 00000687 _____ () C:\awh32B3.tmp
2015-02-04 16:10 - 2015-02-26 16:45 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\VK Downloader
2015-02-04 15:44 - 2015-02-04 15:44 - 00000687 _____ () C:\awhEF4D.tmp
2015-02-04 15:34 - 2015-02-04 15:34 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Вoйти в Интeрнет 2inf.net
2015-02-04 15:26 - 2015-02-04 15:26 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Поиcк в Интeрнете
2015-02-04 15:24 - 2015-02-26 16:16 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\SystemDir
2015-02-04 15:24 - 2015-02-04 15:29 - 00003516 _____ () C:\Windows\System32\Tasks\nethost task
2015-02-04 14:46 - 2015-02-04 14:46 - 00000000 ____D () C:\Users\Fm. Medved\Documents\LEGO Creations
2015-02-04 14:46 - 2015-02-04 14:46 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\LEGO Company
2015-02-04 14:45 - 2015-02-04 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Company
2015-02-04 14:37 - 2015-02-04 14:37 - 00000687 _____ () C:\awh74C1.tmp
2015-02-03 20:03 - 2015-02-03 20:03 - 00000000 ____D () C:\Users\Fm. Medved\Documents\DIE SIEDLER - Aufstieg eines Königreichs
2015-02-03 10:40 - 2015-02-03 10:40 - 00000687 _____ () C:\awhF056.tmp
2015-02-03 10:30 - 2015-02-03 10:30 - 00000687 _____ () C:\awhDC4A.tmp
2015-02-02 23:31 - 2015-02-02 23:31 - 00000687 _____ () C:\awhF9F7.tmp
2015-02-02 19:03 - 2015-02-02 19:03 - 00000222 _____ () C:\Users\Fm. Medved\Desktop\Rust.url
2015-02-02 13:57 - 2015-02-02 13:57 - 00000687 _____ () C:\awh5955.tmp
2015-02-02 01:19 - 2015-02-02 01:19 - 00000687 _____ () C:\awh8A83.tmp
2015-02-01 16:03 - 2015-02-06 16:58 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Game Updater
2015-02-01 13:52 - 2015-02-01 13:52 - 00000687 _____ () C:\awh312D.tmp
2015-02-01 11:38 - 2015-02-01 11:38 - 00000687 _____ () C:\awh7B27.tmp
2015-01-31 21:08 - 2015-02-20 16:09 - 00000000 ____D () C:\Program Files (x86)\e8b81c09-4582-4567-aca3-7b6a8bedd113
2015-01-31 14:00 - 2015-01-31 14:00 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\QuickScan
2015-01-30 19:38 - 2015-01-30 19:53 - 00000000 ____D () C:\Users\TEMP
2015-01-30 19:38 - 2013-01-31 09:00 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\TuneUp Software
2015-01-30 19:38 - 2012-05-28 11:07 - 00000000 ____D () C:\Users\TEMP\Documents\Visual Studio 2008
2015-01-30 19:38 - 2012-05-28 11:07 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2015-01-30 19:38 - 2011-10-14 04:54 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2015-01-30 19:38 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-30 19:38 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-30 08:45 - 2015-01-30 08:45 - 00000687 _____ () C:\awh5705.tmp
2015-01-29 14:20 - 2015-01-29 14:20 - 00000687 _____ () C:\awh3FFC.tmp
2015-01-28 10:00 - 2015-01-28 10:00 - 00000687 _____ () C:\awh6306.tmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-27 16:18 - 2012-06-14 13:11 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-27 16:15 - 2012-02-06 19:52 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\uTorrent
2015-02-27 16:11 - 2012-06-14 13:10 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-27 16:11 - 2012-02-24 00:50 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Google
2015-02-27 16:10 - 2012-06-14 13:11 - 00003862 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-27 16:10 - 2012-06-14 13:11 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-27 16:10 - 2012-02-24 00:49 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Deployment
2015-02-27 16:09 - 2012-02-07 13:05 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Apps\2.0
2015-02-27 15:55 - 2012-02-05 12:35 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\Skype
2015-02-27 15:52 - 2014-12-26 22:49 - 00000000 ____D () C:\Program Files (x86)\WarThunder
2015-02-27 15:45 - 2013-04-16 09:54 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-27 15:34 - 2012-07-03 19:17 - 00001140 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-347752443-2393636236-3195270278-1001UA.job
2015-02-27 15:07 - 2011-12-15 11:47 - 01288505 _____ () C:\Windows\WindowsUpdate.log
2015-02-27 14:47 - 2014-12-23 21:10 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-27 13:55 - 2012-08-08 18:50 - 00000948 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-347752443-2393636236-3195270278-1001UA.job
2015-02-27 06:03 - 2015-01-02 02:27 - 00000000 ____D () C:\Users\Fm. Medved\Downloads\New Music niko
2015-02-27 01:47 - 2014-11-01 12:25 - 00000680 _____ () C:\Users\Fm. Medved\Desktop\Serialy.txt
2015-02-26 21:56 - 2013-12-11 20:41 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3A8A8C6A-E170-415F-84EB-4159B6166112}
2015-02-26 19:55 - 2012-08-08 18:50 - 00000926 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-347752443-2393636236-3195270278-1001Core.job
2015-02-26 19:53 - 2012-03-19 11:07 - 00295049 _____ () C:\Windows\setupact.log
2015-02-26 16:53 - 2011-10-14 04:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-02-26 16:53 - 2011-10-14 04:48 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-26 16:40 - 2012-07-03 19:17 - 00001088 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-347752443-2393636236-3195270278-1001Core.job
2015-02-26 16:29 - 2012-07-03 19:17 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-347752443-2393636236-3195270278-1001UA
2015-02-26 16:29 - 2012-07-03 19:17 - 00003724 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-347752443-2393636236-3195270278-1001Core
2015-02-26 16:26 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-26 16:26 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-26 16:19 - 2012-02-04 20:13 - 00000000 ____D () C:\ProgramData\clear.fi
2015-02-26 16:18 - 2013-09-21 10:39 - 00000008 __RSH () C:\Users\Fm. Medved\ntuser.pol
2015-02-26 16:18 - 2012-02-23 00:13 - 00196608 _____ () C:\Windows\system32\Ikeext.etl
2015-02-26 16:18 - 2012-02-04 19:54 - 00000000 ____D () C:\Users\Fm. Medved
2015-02-26 16:18 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-26 16:16 - 2015-01-25 09:33 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\PremiumCraft_slave
2015-02-26 16:16 - 2013-05-20 13:23 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\TomTom
2015-02-26 16:16 - 2013-01-02 15:03 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\TicnoTemp
2015-02-26 16:16 - 2012-12-01 11:18 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\InstallShare
2015-02-26 16:16 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-26 00:26 - 2012-10-28 16:29 - 00000000 ____D () C:\Users\Fm. Medved\Desktop\Alles
2015-02-24 18:57 - 2015-01-20 11:55 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\.minecraft
2015-02-22 15:29 - 2012-04-28 20:44 - 00393736 _____ () C:\Windows\PFRO.log
2015-02-22 15:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-02-21 14:52 - 2014-12-20 19:38 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-02-21 14:52 - 2011-10-14 04:30 - 00000000 ____D () C:\ProgramData\Skype
2015-02-21 11:53 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-20 16:09 - 2012-10-28 16:33 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2015-02-20 16:09 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-02-20 04:17 - 2012-03-30 20:14 - 00000000 ____D () C:\Windows\.jagex_cache_32
2015-02-20 00:39 - 2014-12-09 13:08 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Steam
2015-02-19 18:52 - 2011-10-14 04:42 - 00000000 ____D () C:\Windows\tr
2015-02-19 00:04 - 2012-11-14 11:55 - 00007605 _____ () C:\Users\Fm. Medved\AppData\Local\Resmon.ResmonCfg
2015-02-18 19:38 - 2013-01-02 15:09 - 00000000 ____D () C:\ProgramData\Origin
2015-02-18 19:31 - 2013-01-02 15:08 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-17 16:31 - 2012-02-04 20:39 - 00000000 ___RD () C:\Spiele
2015-02-17 01:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\schemas
2015-02-17 01:02 - 2014-06-20 10:08 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-17 01:02 - 2013-10-19 22:15 - 00000000 ____D () C:\ProgramData\Oracle
2015-02-17 00:59 - 2014-07-19 12:51 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-02-17 00:59 - 2014-07-19 12:51 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-02-17 00:59 - 2014-07-19 12:51 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-02-17 00:59 - 2014-07-19 12:51 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-02-16 22:12 - 2012-08-31 19:04 - 778444645 _____ () C:\Windows\MEMORY.DMP
2015-02-16 22:12 - 2012-08-31 19:04 - 00000000 ____D () C:\Windows\Minidump
2015-02-16 03:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-15 10:58 - 2014-10-25 01:42 - 00000000 ____D () C:\Users\Fm. Medved\Documents\Outlook-Dateien
2015-02-15 02:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-14 19:30 - 2011-12-15 20:39 - 00703214 _____ () C:\Windows\system32\perfh007.dat
2015-02-14 19:30 - 2011-12-15 20:39 - 00150822 _____ () C:\Windows\system32\perfc007.dat
2015-02-14 19:30 - 2009-07-14 06:13 - 01629436 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-14 12:40 - 2012-03-12 18:39 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2015-02-14 12:40 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-14 12:33 - 2013-01-02 15:35 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\Origin
2015-02-13 14:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2015-02-12 20:57 - 2013-08-26 18:18 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\TS3Client
2015-02-12 16:49 - 2009-07-14 05:45 - 03056376 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 16:47 - 2014-12-17 13:33 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 16:47 - 2014-05-07 03:46 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 02:35 - 2013-04-23 22:30 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-12 02:33 - 2012-05-26 22:15 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-12 02:33 - 2009-07-14 03:34 - 00000510 _____ () C:\Windows\win.ini
2015-02-12 02:29 - 2014-10-20 02:26 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-12 02:29 - 2014-10-20 02:25 - 00002121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-12 02:28 - 2014-10-20 02:24 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-12 02:28 - 2014-10-20 02:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-12 02:28 - 2013-07-18 22:26 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 02:22 - 2012-02-13 21:38 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 20:44 - 2014-06-30 16:46 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2015-02-11 20:44 - 2012-02-05 21:03 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2015-02-11 20:38 - 2012-02-05 20:48 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2015-02-10 17:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-10 02:51 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2015-02-10 02:49 - 2014-10-10 23:47 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\9181
2015-02-10 02:49 - 2014-09-23 08:23 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\12260
2015-02-10 02:49 - 2012-09-06 06:33 - 00000000 ____D () C:\Program Files\14
2015-02-10 02:49 - 2012-05-31 14:34 - 00000000 ____D () C:\ProgramData\InstallMate
2015-02-10 02:06 - 2012-05-30 20:33 - 00000000 ___RD () C:\Bogdan
2015-02-10 02:04 - 2014-04-01 18:07 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\NVIDIA Corporation
2015-02-10 02:04 - 2013-10-05 13:33 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-10 02:04 - 2013-05-27 22:23 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\NVIDIA
2015-02-10 02:04 - 2011-12-15 11:52 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-02-10 02:04 - 2011-12-15 11:52 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-02-10 01:18 - 2014-11-13 01:26 - 00002998 _____ () C:\Windows\System32\Tasks\AdobeFlashPlayer-S-2-1-24-198293847112UI
2015-02-10 01:05 - 2012-02-05 12:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-09 21:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-09 05:45 - 2013-04-16 09:54 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-09 05:45 - 2012-05-24 01:42 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-09 05:45 - 2011-10-14 04:49 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-08 18:14 - 2012-03-16 07:20 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-02-07 12:05 - 2014-06-25 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 3 Designer Edition
2015-02-07 11:26 - 2012-04-07 20:30 - 00000000 ____D () C:\Users\Fm. Medved\Documents\Electronic Arts
2015-02-07 11:11 - 2014-03-02 08:00 - 00000813 _____ () C:\Users\Fm. Medved\AppData\Roaming\tlauncher.rmo.cfg
2015-02-07 06:28 - 2012-02-06 19:05 - 00000000 ___RD () C:\Nikita
2015-02-06 19:00 - 2012-02-04 19:54 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\VirtualStore
2015-02-05 20:37 - 2014-06-30 17:20 - 00000000 ____D () C:\ProgramData\Orbit
2015-02-05 14:11 - 2012-04-08 10:24 - 00340271 _____ () C:\Windows\DirectX.log
2015-02-05 14:01 - 2011-10-14 04:15 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-04 16:12 - 2014-06-01 13:27 - 00000000 ____D () C:\Users\Fm. Medved\Desktop\The Sims 3
2015-02-04 15:30 - 2014-06-13 13:06 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\Amigo
2015-02-04 15:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-02-02 19:04 - 2014-06-19 13:26 - 00174624 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2015-02-02 14:22 - 2013-08-26 18:17 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Local\TeamSpeak 3 Client
2015-01-31 21:04 - 2012-02-07 13:46 - 00000000 ____D () C:\Users\Fm. Medved\Documents\My Games
2015-01-30 14:29 - 2012-05-27 19:21 - 00000000 ____D () C:\Users\Fm. Medved\AppData\Roaming\Mozilla

==================== Files in the root of some directories =======

2012-04-30 21:18 - 2011-07-23 17:29 - 9591104 _____ (DT Soft Ltd.) C:\Program Files\DTLite [Bigtorrents.org].exe
2015-02-05 04:54 - 2015-02-25 16:10 - 0000020 _____ () C:\Users\Fm. Medved\AppData\Roaming\appdataFr3.bin
2012-07-06 14:19 - 2012-07-22 00:18 - 1203065 _____ () C:\Users\Fm. Medved\AppData\Roaming\haha
2013-07-10 15:22 - 2010-01-07 14:35 - 1007616 _____ (Huawei Technologies Co., Ltd.) C:\Users\Fm. Medved\AppData\Roaming\LiveUpdate.exe
2013-07-10 15:22 - 2013-07-09 23:59 - 0000713 _____ () C:\Users\Fm. Medved\AppData\Roaming\LiveUpdate.ini
2013-07-10 15:22 - 2008-10-11 09:39 - 0927504 _____ (Microsoft Corporation) C:\Users\Fm. Medved\AppData\Roaming\mfc40u.dll
2013-07-10 15:22 - 2006-12-28 04:34 - 1060864 _____ (Microsoft Corporation) C:\Users\Fm. Medved\AppData\Roaming\mfc71.dll
2013-07-10 15:22 - 2006-12-28 04:34 - 1047552 _____ (Microsoft Corporation) C:\Users\Fm. Medved\AppData\Roaming\MFC71u.dll
2013-07-10 15:22 - 2005-08-10 08:19 - 0401462 _____ (Microsoft Corporation) C:\Users\Fm. Medved\AppData\Roaming\msvcp60.dll
2013-07-10 15:22 - 2006-12-28 04:34 - 0499712 _____ (Microsoft Corporation) C:\Users\Fm. Medved\AppData\Roaming\msvcp71.dll
2013-07-10 15:22 - 2006-12-28 04:34 - 0348160 _____ (Microsoft Corporation) C:\Users\Fm. Medved\AppData\Roaming\msvcr71.dll
2013-07-06 13:36 - 2013-07-06 19:43 - 0078872 _____ () C:\Users\Fm. Medved\AppData\Roaming\svhost
2014-03-01 12:48 - 2015-01-20 11:19 - 0041984 ___SH () C:\Users\Fm. Medved\AppData\Roaming\Thumbs.db
2014-03-02 08:00 - 2015-02-07 11:11 - 0000813 _____ () C:\Users\Fm. Medved\AppData\Roaming\tlauncher.rmo.cfg
2013-07-10 15:22 - 2009-12-31 14:10 - 0151552 _____ (Huawei Technologies Co., Ltd.) C:\Users\Fm. Medved\AppData\Roaming\XMessageBox.dll
2014-03-20 02:35 - 2014-06-17 12:05 - 0013312 _____ () C:\Users\Fm. Medved\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-11-14 11:55 - 2015-02-19 00:04 - 0007605 _____ () C:\Users\Fm. Medved\AppData\Local\Resmon.ResmonCfg
2011-12-15 12:13 - 2011-12-15 12:15 - 0015230 _____ () C:\ProgramData\ArcadeDeluxe5.log

Files to move or delete:
====================
C:\Users\FM3A93~1.MED\AppData\Local\Temp\\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Fm. Medved\jagex_cl_runescape_LIVE.dat


Some content of TEMP:
====================
C:\Users\Fm. Medved\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-23 05:24

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Adobe Reader, wie oben schon geschrieben

Noch Probleme?

Schrauber, danke für deine Hilfe. Echt toll das Trojaner-Board gibt, ja die lästige Werbung ist weg, beim Einschalten des PC werden keine Browser automatisch geöffnet, einfach super und BitCoin miner ist auch weg. Jetzt habe ich auch Adobe reader auf den neusten Stand. Wollte dich fragen wie ich alte systemwiederherstellungspunkte löschen kann und ein frischen erstellen, dass ich Rückendeckung habe falls wieder was passiert.
Und wie kann ich nachschauen ob ich der Einzige Benutzer bin, es kann ja sein das ein versteckten gibt. Nur um sicher zu gehen.

Systemsteuerung > Benutzerkonten


Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Schrauber! Danke für deine Hilfe. Ich habe einfach keine Worte. Tolle Arbeit.
Machs gut!

Gern Geschehen