Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   PUP.Blabbers - mindestens 63 infizierte Dateien! (https://www.trojaner-board.de/131428-pup-blabbers-mindestens-63-infizierte-dateien.html)

frappuccino 23.02.2013 18:33
PUP.Blabbers - mindestens 63 infizierte Dateien!
 
Guten Tag,
nachdem mein Pc immer langsamer und komischer wurde ( d.h. z.B. beim Start von Firefox wurden irgendwelche Seiten geöffnet, addOns waren da, welche nicht installiert wurden, Pornobilder bei Facebook etc.) habe ich mir langsam sorgen um ein Virusbefall gemacht. Schließlich habe ich einen Quickscan mit Malwarebytes Anti-Malware durchgeführt, welcher ganze 63 infizierte Dateien fand :eek: Ich habe sämtliche Scans gemacht, wie es in der Anleitung stand, aber komischer weise bekam ich bei OLT keine Extras.txt :confused: . Also wie schon oben geschrieben handelt es sich bei den Funden um ''PUP.Blabbers'' .... Ich selbst habe keine Ahnung was das ist, und woher es kommt :( Ich schick jetzt einfach mal die Logs mit, in der Hoffnung, dass ihr mir helfen könnt. Da die Logs zu lang sind kommen sie als .zip im Anhang :)

Schon mal Vielen Dank im Voraus

LG

Alexander

markusg 24.02.2013 19:52
hi,
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

frappuccino 24.02.2013 22:15
Hallo,
danke für die schnelle Antwort :)
Also das ganze hat 8 Sachen gefunden. Hier ist das Log-File:
Code:
22:06:27.0724 7228  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
22:06:27.0942 7228  ============================================================
22:06:27.0942 7228  Current date / time: 2013/02/24 22:06:27.0942
22:06:27.0942 7228  SystemInfo:
22:06:27.0942 7228 
22:06:27.0942 7228  OS Version: 6.1.7601 ServicePack: 1.0
22:06:27.0942 7228  Product type: Workstation
22:06:27.0942 7228  ComputerName: SIXPACK-PC
22:06:27.0942 7228  UserName: Alexander
22:06:27.0942 7228  Windows directory: C:\Windows
22:06:27.0942 7228  System windows directory: C:\Windows
22:06:27.0942 7228  Running under WOW64
22:06:27.0942 7228  Processor architecture: Intel x64
22:06:27.0942 7228  Number of processors: 4
22:06:27.0942 7228  Page size: 0x1000
22:06:27.0942 7228  Boot type: Normal boot
22:06:27.0942 7228  ============================================================
22:06:29.0440 7228  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:06:29.0456 7228  ============================================================
22:06:29.0456 7228  \Device\Harddisk0\DR0:
22:06:29.0456 7228  MBR partitions:
22:06:29.0456 7228  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1B58800, BlocksNum 0x32000
22:06:29.0456 7228  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1B8A800, BlocksNum 0x395BE000
22:06:29.0456 7228  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3B148800, BlocksNum 0x395BDDB0
22:06:29.0456 7228  ============================================================
22:06:29.0471 7228  C: <-> \Device\Harddisk0\DR0\Partition2
22:06:29.0518 7228  D: <-> \Device\Harddisk0\DR0\Partition3
22:06:29.0518 7228  ============================================================
22:06:29.0518 7228  Initialize success
22:06:29.0518 7228  ============================================================
22:07:07.0098 4176  ============================================================
22:07:07.0098 4176  Scan started
22:07:07.0098 4176  Mode: Manual; SigCheck; TDLFS;
22:07:07.0098 4176  ============================================================
22:07:09.0485 4176  ================ Scan system memory ========================
22:07:09.0485 4176  System memory - ok
22:07:09.0501 4176  ================ Scan services =============================
22:07:09.0610 4176  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
22:07:09.0735 4176  1394ohci - ok
22:07:09.0860 4176  [ B33CF4DE909A5B30F526D82053A63C8E ] ABBYY.Licensing.FineReader.Sprint.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
22:07:09.0875 4176  ABBYY.Licensing.FineReader.Sprint.9.0 - ok
22:07:09.0922 4176  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
22:07:09.0938 4176  ACPI - ok
22:07:09.0984 4176  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
22:07:10.0047 4176  AcpiPmi - ok
22:07:10.0125 4176  [ 8B46D5A1D3EF08232C04D0EAFB871FB2 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
22:07:10.0172 4176  Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
22:07:10.0172 4176  Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
22:07:10.0296 4176  [ 41D15EAD554396BF35B7C5246AD47A28 ] Adobe Version Cue CS2 c:\Creative Suite CS2\Adobe Creative Suite 2.0\Adobe Version Cue CS2\bin\VersionCueCS2.exe
22:07:10.0328 4176  Adobe Version Cue CS2 ( UnsignedFile.Multi.Generic ) - warning
22:07:10.0328 4176  Adobe Version Cue CS2 - detected UnsignedFile.Multi.Generic (1)
22:07:10.0421 4176  [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
22:07:10.0437 4176  AdobeARMservice - ok
22:07:10.0530 4176  [ 563CDCFEEAEF97163E206AF71A61AA6E ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
22:07:10.0546 4176  AdobeFlashPlayerUpdateSvc - ok
22:07:10.0593 4176  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
22:07:10.0624 4176  adp94xx - ok
22:07:10.0640 4176  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
22:07:10.0671 4176  adpahci - ok
22:07:10.0686 4176  [ E109549C90F62FB570B9540C4B148E54 ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
22:07:10.0702 4176  adpu320 - ok
22:07:10.0718 4176  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
22:07:10.0811 4176  AeLookupSvc - ok
22:07:10.0858 4176  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD            C:\Windows\system32\drivers\afd.sys
22:07:10.0936 4176  AFD - ok
22:07:10.0983 4176  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
22:07:10.0998 4176  agp440 - ok
22:07:11.0030 4176  [ 3290D6946B5E30E70414990574883DDB ] ALG            C:\Windows\System32\alg.exe
22:07:11.0076 4176  ALG - ok
22:07:11.0092 4176  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
22:07:11.0108 4176  aliide - ok
22:07:11.0154 4176  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
22:07:11.0170 4176  amdide - ok
22:07:11.0201 4176  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
22:07:11.0264 4176  AmdK8 - ok
22:07:11.0279 4176  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
22:07:11.0310 4176  AmdPPM - ok
22:07:11.0373 4176  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
22:07:11.0388 4176  amdsata - ok
22:07:11.0404 4176  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
22:07:11.0435 4176  amdsbs - ok
22:07:11.0435 4176  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
22:07:11.0451 4176  amdxata - ok
22:07:11.0544 4176  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
22:07:11.0560 4176  AntiVirSchedulerService - ok
22:07:11.0607 4176  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
22:07:11.0622 4176  AntiVirService - ok
22:07:11.0685 4176  [ 89A69C3F2F319B43379399547526D952 ] AppID          C:\Windows\system32\drivers\appid.sys
22:07:11.0794 4176  AppID - ok
22:07:11.0825 4176  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
22:07:11.0872 4176  AppIDSvc - ok
22:07:11.0919 4176  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo        C:\Windows\System32\appinfo.dll
22:07:11.0981 4176  Appinfo - ok
22:07:12.0028 4176  [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
22:07:12.0044 4176  Apple Mobile Device - ok
22:07:12.0075 4176  [ C484F8CEB1717C540242531DB7845C4E ] arc            C:\Windows\system32\DRIVERS\arc.sys
22:07:12.0090 4176  arc - ok
22:07:12.0106 4176  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
22:07:12.0122 4176  arcsas - ok
22:07:12.0153 4176  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
22:07:12.0215 4176  AsyncMac - ok
22:07:12.0262 4176  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi          C:\Windows\system32\drivers\atapi.sys
22:07:12.0278 4176  atapi - ok
22:07:12.0324 4176  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
22:07:12.0387 4176  AudioEndpointBuilder - ok
22:07:12.0387 4176  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
22:07:12.0434 4176  AudioSrv - ok
22:07:12.0480 4176  [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
22:07:12.0512 4176  avgntflt - ok
22:07:12.0558 4176  [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
22:07:12.0590 4176  avipbb - ok
22:07:12.0605 4176  [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
22:07:12.0621 4176  avkmgr - ok
22:07:12.0668 4176  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
22:07:12.0746 4176  AxInstSV - ok
22:07:12.0777 4176  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbda.sys
22:07:12.0839 4176  b06bdrv - ok
22:07:12.0870 4176  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
22:07:12.0933 4176  b57nd60a - ok
22:07:12.0964 4176  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
22:07:13.0026 4176  BDESVC - ok
22:07:13.0042 4176  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
22:07:13.0089 4176  Beep - ok
22:07:13.0151 4176  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE            C:\Windows\System32\bfe.dll
22:07:13.0214 4176  BFE - ok
22:07:13.0245 4176  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
22:07:13.0338 4176  BITS - ok
22:07:13.0370 4176  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
22:07:13.0416 4176  blbdrive - ok
22:07:13.0494 4176  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
22:07:13.0510 4176  Bonjour Service - ok
22:07:13.0557 4176  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
22:07:13.0619 4176  bowser - ok
22:07:13.0619 4176  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:07:13.0697 4176  BrFiltLo - ok
22:07:13.0713 4176  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:07:13.0744 4176  BrFiltUp - ok
22:07:13.0791 4176  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser        C:\Windows\System32\browser.dll
22:07:13.0838 4176  Browser - ok
22:07:13.0853 4176  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
22:07:13.0931 4176  Brserid - ok
22:07:13.0947 4176  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
22:07:13.0978 4176  BrSerWdm - ok
22:07:14.0009 4176  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
22:07:14.0040 4176  BrUsbMdm - ok
22:07:14.0056 4176  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
22:07:14.0087 4176  BrUsbSer - ok
22:07:14.0134 4176  [ FF7C57973EEAD140062238C5A0B7D455 ] BTCFilterService C:\Windows\system32\DRIVERS\motfilt.sys
22:07:14.0181 4176  BTCFilterService - ok
22:07:14.0243 4176  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum        C:\Windows\system32\drivers\BthEnum.sys
22:07:14.0306 4176  BthEnum - ok
22:07:14.0321 4176  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
22:07:14.0368 4176  BTHMODEM - ok
22:07:14.0399 4176  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
22:07:14.0430 4176  BthPan - ok
22:07:14.0493 4176  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT        C:\Windows\System32\Drivers\BTHport.sys
22:07:14.0555 4176  BTHPORT - ok
22:07:14.0586 4176  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv        C:\Windows\system32\bthserv.dll
22:07:14.0633 4176  bthserv - ok
22:07:14.0696 4176  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
22:07:14.0742 4176  BTHUSB - ok
22:07:14.0758 4176  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
22:07:14.0805 4176  cdfs - ok
22:07:14.0867 4176  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
22:07:14.0898 4176  cdrom - ok
22:07:14.0945 4176  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc    C:\Windows\System32\certprop.dll
22:07:14.0992 4176  CertPropSvc - ok
22:07:15.0008 4176  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
22:07:15.0070 4176  circlass - ok
22:07:15.0086 4176  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
22:07:15.0117 4176  CLFS - ok
22:07:15.0148 4176  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:07:15.0195 4176  clr_optimization_v2.0.50727_32 - ok
22:07:15.0242 4176  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:07:15.0257 4176  clr_optimization_v2.0.50727_64 - ok
22:07:15.0351 4176  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:07:15.0398 4176  clr_optimization_v4.0.30319_32 - ok
22:07:15.0413 4176  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:07:15.0429 4176  clr_optimization_v4.0.30319_64 - ok
22:07:15.0476 4176  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
22:07:15.0507 4176  CmBatt - ok
22:07:15.0616 4176  [ 65FB5097D9EE7E3A99E932CFA0E4B344 ] cmdAgent        C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
22:07:15.0678 4176  cmdAgent - ok
22:07:15.0725 4176  [ 919ACCC22ABDC1C3CA68326C0E5DEAF9 ] cmdGuard        C:\Windows\system32\DRIVERS\cmdguard.sys
22:07:15.0741 4176  cmdGuard - ok
22:07:15.0772 4176  [ F8FECE0F1D44C4A58778083B00EEADAC ] cmdHlp          C:\Windows\system32\DRIVERS\cmdhlp.sys
22:07:15.0788 4176  cmdHlp - ok
22:07:15.0819 4176  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
22:07:15.0834 4176  cmdide - ok
22:07:15.0881 4176  [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG            C:\Windows\system32\Drivers\cng.sys
22:07:15.0928 4176  CNG - ok
22:07:15.0944 4176  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
22:07:15.0959 4176  Compbatt - ok
22:07:16.0006 4176  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
22:07:16.0037 4176  CompositeBus - ok
22:07:16.0068 4176  COMSysApp - ok
22:07:16.0084 4176  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
22:07:16.0100 4176  crcdisk - ok
22:07:16.0146 4176  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
22:07:16.0224 4176  CryptSvc - ok
22:07:16.0271 4176  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
22:07:16.0334 4176  DcomLaunch - ok
22:07:16.0365 4176  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc      C:\Windows\System32\defragsvc.dll
22:07:16.0412 4176  defragsvc - ok
22:07:16.0443 4176  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
22:07:16.0490 4176  DfsC - ok
22:07:16.0552 4176  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
22:07:16.0614 4176  Dhcp - ok
22:07:16.0630 4176  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
22:07:16.0677 4176  discache - ok
22:07:16.0677 4176  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
22:07:16.0692 4176  Disk - ok
22:07:16.0724 4176  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
22:07:16.0786 4176  Dnscache - ok
22:07:16.0817 4176  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc        C:\Windows\System32\dot3svc.dll
22:07:16.0880 4176  dot3svc - ok
22:07:16.0926 4176  [ B42ED0320C6E41102FDE0005154849BB ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys
22:07:16.0973 4176  Dot4 - ok
22:07:17.0036 4176  [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print      C:\Windows\system32\drivers\Dot4Prt.sys
22:07:17.0067 4176  Dot4Print - ok
22:07:17.0082 4176  [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb        C:\Windows\system32\DRIVERS\dot4usb.sys
22:07:17.0114 4176  dot4usb - ok
22:07:17.0145 4176  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS            C:\Windows\system32\dps.dll
22:07:17.0192 4176  DPS - ok
22:07:17.0223 4176  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
22:07:17.0254 4176  drmkaud - ok
22:07:17.0301 4176  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
22:07:17.0332 4176  DXGKrnl - ok
22:07:17.0363 4176  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost        C:\Windows\System32\eapsvc.dll
22:07:17.0410 4176  EapHost - ok
22:07:17.0472 4176  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv          C:\Windows\system32\DRIVERS\evbda.sys
22:07:17.0566 4176  ebdrv - ok
22:07:17.0597 4176  [ C118A82CD78818C29AB228366EBF81C3 ] EFS            C:\Windows\System32\lsass.exe
22:07:17.0660 4176  EFS - ok
22:07:17.0722 4176  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
22:07:17.0800 4176  ehRecvr - ok
22:07:17.0816 4176  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched        C:\Windows\ehome\ehsched.exe
22:07:17.0878 4176  ehSched - ok
22:07:17.0909 4176  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
22:07:17.0940 4176  elxstor - ok
22:07:18.0003 4176  [ 7DB097F4F6786307168C0DDDEC43A565 ] EPSON_EB_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
22:07:18.0050 4176  EPSON_EB_RPCV4_04 - ok
22:07:18.0065 4176  [ 258AA65A0862E19B7DE6981FDA3758AD ] EPSON_PM_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
22:07:18.0096 4176  EPSON_PM_RPCV4_04 - ok
22:07:18.0128 4176  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
22:07:18.0159 4176  ErrDev - ok
22:07:18.0206 4176  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem    C:\Windows\system32\es.dll
22:07:18.0252 4176  EventSystem - ok
22:07:18.0268 4176  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat          C:\Windows\system32\drivers\exfat.sys
22:07:18.0299 4176  exfat - ok
22:07:18.0330 4176  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
22:07:18.0377 4176  fastfat - ok
22:07:18.0440 4176  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax            C:\Windows\system32\fxssvc.exe
22:07:18.0502 4176  Fax - ok
22:07:18.0518 4176  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
22:07:18.0549 4176  fdc - ok
22:07:18.0580 4176  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost        C:\Windows\system32\fdPHost.dll
22:07:18.0627 4176  fdPHost - ok
22:07:18.0642 4176  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
22:07:18.0705 4176  FDResPub - ok
22:07:18.0736 4176  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
22:07:18.0752 4176  FileInfo - ok
22:07:18.0752 4176  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
22:07:18.0830 4176  Filetrace - ok
22:07:18.0845 4176  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
22:07:18.0876 4176  flpydisk - ok
22:07:18.0923 4176  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
22:07:18.0939 4176  FltMgr - ok
22:07:19.0001 4176  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache      C:\Windows\system32\FntCache.dll
22:07:19.0064 4176  FontCache - ok
22:07:19.0110 4176  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:07:19.0157 4176  FontCache3.0.0.0 - ok
22:07:19.0220 4176  [ A9FF65EA14E4CABFCC1BB8ECE111A249 ] ForceWare Intelligent Application Manager (IAM) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
22:07:19.0235 4176  ForceWare Intelligent Application Manager (IAM) - ok
22:07:19.0251 4176  [ D43703496149971890703B4B1B723EAC ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
22:07:19.0282 4176  FsDepends - ok
22:07:19.0313 4176  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
22:07:19.0344 4176  Fs_Rec - ok
22:07:19.0376 4176  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
22:07:19.0391 4176  fvevol - ok
22:07:19.0407 4176  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
22:07:19.0438 4176  gagp30kx - ok
22:07:19.0485 4176  [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM    C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
22:07:19.0516 4176  GEARAspiWDM - ok
22:07:19.0563 4176  [ 16C2A6BCDDA8952C2035DEC861492A19 ] ggflt          C:\Windows\system32\DRIVERS\ggflt.sys
22:07:19.0594 4176  ggflt - ok
22:07:19.0610 4176  [ 6B503DF845EABF3457E49FBBDA26C10E ] ggsemc          C:\Windows\system32\DRIVERS\ggsemc.sys
22:07:19.0625 4176  ggsemc - ok
22:07:19.0672 4176  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc          C:\Windows\System32\gpsvc.dll
22:07:19.0719 4176  gpsvc - ok
22:07:19.0781 4176  [ 816FD5A6F3C2F3D600900096632FC60E ] Greg_Service    C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
22:07:19.0812 4176  Greg_Service - ok
22:07:19.0844 4176  [ 2ED7FF3E1ADA4092632393781518B3A7 ] grmnusb        C:\Windows\system32\drivers\grmnusb.sys
22:07:19.0859 4176  grmnusb - ok
22:07:19.0922 4176  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:07:19.0937 4176  gupdate - ok
22:07:19.0953 4176  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:07:19.0968 4176  gupdatem - ok
22:07:19.0984 4176  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
22:07:20.0062 4176  hcw85cir - ok
22:07:20.0109 4176  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
22:07:20.0156 4176  HdAudAddService - ok
22:07:20.0187 4176  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
22:07:20.0234 4176  HDAudBus - ok
22:07:20.0249 4176  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
22:07:20.0280 4176  HidBatt - ok
22:07:20.0312 4176  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
22:07:20.0358 4176  HidBth - ok
22:07:20.0374 4176  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
22:07:20.0421 4176  HidIr - ok
22:07:20.0436 4176  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv        C:\Windows\system32\hidserv.dll
22:07:20.0483 4176  hidserv - ok
22:07:20.0546 4176  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
22:07:20.0561 4176  HidUsb - ok
22:07:20.0577 4176  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
22:07:20.0639 4176  hkmsvc - ok
22:07:20.0670 4176  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
22:07:20.0717 4176  HomeGroupListener - ok
22:07:20.0764 4176  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
22:07:20.0795 4176  HomeGroupProvider - ok
22:07:20.0904 4176  [ 1DAE5C46D42B02A6D5862E1482EFB390 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
22:07:20.0936 4176  hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning
22:07:20.0936 4176  hpqcxs08 - detected UnsignedFile.Multi.Generic (1)
22:07:20.0951 4176  [ 99E8EEF42FE2F4AF29B08C3355DD7685 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
22:07:20.0982 4176  hpqddsvc ( UnsignedFile.Multi.Generic ) - warning
22:07:20.0982 4176  hpqddsvc - detected UnsignedFile.Multi.Generic (1)
22:07:21.0045 4176  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
22:07:21.0060 4176  HpSAMD - ok
22:07:21.0107 4176  [ 7F57926169C1B8ABA9274EA7D4B70F18 ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
22:07:21.0138 4176  HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning
22:07:21.0138 4176  HPSLPSVC - detected UnsignedFile.Multi.Generic (1)
22:07:21.0185 4176  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
22:07:21.0248 4176  HTTP - ok
22:07:21.0279 4176  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
22:07:21.0294 4176  hwpolicy - ok
22:07:21.0341 4176  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
22:07:21.0372 4176  i8042prt - ok
22:07:21.0388 4176  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
22:07:21.0419 4176  iaStorV - ok
22:07:21.0466 4176  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:07:21.0528 4176  idsvc - ok
22:07:21.0575 4176  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
22:07:21.0591 4176  iirsp - ok
22:07:21.0638 4176  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
22:07:21.0700 4176  IKEEXT - ok
22:07:21.0762 4176  [ C4E67D3037DC79E39D7136581A947F50 ] inspect        C:\Windows\system32\DRIVERS\inspect.sys
22:07:21.0778 4176  inspect - ok
22:07:21.0840 4176  [ BC64B75E8E0A0B8982AB773483164E72 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
22:07:21.0903 4176  IntcAzAudAddService - ok
22:07:21.0934 4176  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
22:07:21.0950 4176  intelide - ok
22:07:21.0981 4176  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
22:07:22.0012 4176  intelppm - ok
22:07:22.0043 4176  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
22:07:22.0090 4176  IPBusEnum - ok
22:07:22.0137 4176  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:07:22.0184 4176  IpFilterDriver - ok
22:07:22.0215 4176  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
22:07:22.0277 4176  iphlpsvc - ok
22:07:22.0308 4176  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
22:07:22.0355 4176  IPMIDRV - ok
22:07:22.0371 4176  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
22:07:22.0433 4176  IPNAT - ok
22:07:22.0480 4176  [ 0F261EC4F514926177C70C1832374231 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
22:07:22.0496 4176  iPod Service - ok
22:07:22.0511 4176  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
22:07:22.0589 4176  IRENUM - ok
22:07:22.0620 4176  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
22:07:22.0636 4176  isapnp - ok
22:07:22.0667 4176  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
22:07:22.0714 4176  iScsiPrt - ok
22:07:22.0730 4176  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
22:07:22.0745 4176  kbdclass - ok
22:07:22.0776 4176  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
22:07:22.0823 4176  kbdhid - ok
22:07:22.0839 4176  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
22:07:22.0854 4176  KeyIso - ok
22:07:22.0886 4176  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
22:07:22.0901 4176  KSecDD - ok
22:07:22.0932 4176  [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
22:07:22.0964 4176  KSecPkg - ok
22:07:22.0979 4176  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
22:07:23.0026 4176  ksthunk - ok
22:07:23.0057 4176  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm          C:\Windows\system32\msdtckrm.dll
22:07:23.0120 4176  KtmRm - ok
22:07:23.0182 4176  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
22:07:23.0244 4176  LanmanServer - ok
22:07:23.0276 4176  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
22:07:23.0322 4176  LanmanWorkstation - ok
22:07:23.0354 4176  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
22:07:23.0416 4176  lltdio - ok
22:07:23.0447 4176  [ C1185803384AB3FEED115F79F109427F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
22:07:23.0510 4176  lltdsvc - ok
22:07:23.0525 4176  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts        C:\Windows\System32\lmhsvc.dll
22:07:23.0572 4176  lmhosts - ok
22:07:23.0588 4176  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
22:07:23.0619 4176  LSI_FC - ok
22:07:23.0634 4176  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
22:07:23.0666 4176  LSI_SAS - ok
22:07:23.0666 4176  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:07:23.0697 4176  LSI_SAS2 - ok
22:07:23.0697 4176  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:07:23.0728 4176  LSI_SCSI - ok
22:07:23.0744 4176  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv          C:\Windows\system32\drivers\luafv.sys
22:07:23.0790 4176  luafv - ok
22:07:23.0868 4176  [ 92EB844D90615CB266F84C3202B8786E ] MBAMProtector  C:\Windows\system32\drivers\mbam.sys
22:07:23.0868 4176  MBAMProtector - ok
22:07:23.0962 4176  [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
22:07:23.0978 4176  MBAMScheduler - ok
22:07:24.0009 4176  [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
22:07:24.0040 4176  MBAMService - ok
22:07:24.0071 4176  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
22:07:24.0102 4176  Mcx2Svc - ok
22:07:24.0134 4176  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
22:07:24.0149 4176  megasas - ok
22:07:24.0165 4176  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
22:07:24.0196 4176  MegaSR - ok
22:07:24.0227 4176  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS          C:\Windows\system32\mmcss.dll
22:07:24.0274 4176  MMCSS - ok
22:07:24.0290 4176  [ 800BA92F7010378B09F9ED9270F07137 ] Modem          C:\Windows\system32\drivers\modem.sys
22:07:24.0352 4176  Modem - ok
22:07:24.0368 4176  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
22:07:24.0414 4176  monitor - ok
22:07:24.0461 4176  [ 43E754047C6DEE50666554D3C66D6279 ] motccgp        C:\Windows\system32\DRIVERS\motccgp.sys
22:07:24.0508 4176  motccgp - ok
22:07:24.0524 4176  [ 577399C75CF85AC68E7830EB150F45EF ] motccgpfl      C:\Windows\system32\DRIVERS\motccgpfl.sys
22:07:24.0555 4176  motccgpfl - ok
22:07:24.0617 4176  [ AC9D6E3629E4388A9EA9B4172493AAEE ] Motorola Device Manager C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
22:07:24.0633 4176  Motorola Device Manager - ok
22:07:24.0664 4176  [ 19BC2161C3FCCED802F1BCD9B78C3466 ] MotoSwitchService C:\Windows\system32\DRIVERS\motswch.sys
22:07:24.0680 4176  MotoSwitchService - ok
22:07:24.0726 4176  [ C4F1495598C7E1FEF53BCFD84A5BD53E ] Motousbnet      C:\Windows\system32\DRIVERS\Motousbnet.sys
22:07:24.0742 4176  Motousbnet - ok
22:07:24.0789 4176  [ D075B1D964A314D240F5498773EE89DF ] motusbdevice    C:\Windows\system32\DRIVERS\motusbdevice.sys
22:07:24.0836 4176  motusbdevice - ok
22:07:24.0882 4176  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\drivers\mouclass.sys
22:07:24.0914 4176  mouclass - ok
22:07:24.0929 4176  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
22:07:24.0976 4176  mouhid - ok
22:07:25.0007 4176  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
22:07:25.0023 4176  mountmgr - ok
22:07:25.0085 4176  [ 5C5E45DDABEFBC9F564F1D5C83258B8F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
22:07:25.0101 4176  MozillaMaintenance - ok
22:07:25.0132 4176  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
22:07:25.0163 4176  mpio - ok
22:07:25.0163 4176  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
22:07:25.0226 4176  mpsdrv - ok
22:07:25.0257 4176  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
22:07:25.0304 4176  MpsSvc - ok
22:07:25.0335 4176  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
22:07:25.0382 4176  MRxDAV - ok
22:07:25.0413 4176  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
22:07:25.0475 4176  mrxsmb - ok
22:07:25.0506 4176  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:07:25.0538 4176  mrxsmb10 - ok
22:07:25.0569 4176  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:07:25.0584 4176  mrxsmb20 - ok
22:07:25.0616 4176  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
22:07:25.0631 4176  msahci - ok
22:07:25.0678 4176  [ DB801A638D011B9633829EB6F663C900 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
22:07:25.0694 4176  msdsm - ok
22:07:25.0725 4176  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC          C:\Windows\System32\msdtc.exe
22:07:25.0772 4176  MSDTC - ok
22:07:25.0787 4176  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
22:07:25.0834 4176  Msfs - ok
22:07:25.0834 4176  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
22:07:25.0896 4176  mshidkmdf - ok
22:07:25.0928 4176  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
22:07:25.0928 4176  msisadrv - ok
22:07:25.0959 4176  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
22:07:26.0021 4176  MSiSCSI - ok
22:07:26.0021 4176  msiserver - ok
22:07:26.0052 4176  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
22:07:26.0115 4176  MSKSSRV - ok
22:07:26.0130 4176  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
22:07:26.0177 4176  MSPCLOCK - ok
22:07:26.0208 4176  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
22:07:26.0255 4176  MSPQM - ok
22:07:26.0286 4176  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
22:07:26.0302 4176  MsRPC - ok
22:07:26.0349 4176  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
22:07:26.0364 4176  mssmbios - ok
22:07:26.0396 4176  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
22:07:26.0442 4176  MSTEE - ok
22:07:26.0458 4176  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
22:07:26.0489 4176  MTConfig - ok
22:07:26.0505 4176  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup            C:\Windows\system32\Drivers\mup.sys
22:07:26.0520 4176  Mup - ok
22:07:26.0552 4176  [ 6FFECC25B39DC7652A0CEC0ADA9DB589 ] mwlPSDFilter    C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
22:07:26.0567 4176  mwlPSDFilter - ok
22:07:26.0567 4176  [ 0BEFE32CA56D6EE89D58175725596A85 ] mwlPSDNServ    C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
22:07:26.0583 4176  mwlPSDNServ - ok
22:07:26.0598 4176  [ D43BC633B8660463E446E28E14A51262 ] mwlPSDVDisk    C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
22:07:26.0614 4176  mwlPSDVDisk - ok
22:07:26.0661 4176  [ 2F139207F618EC2933830227EEFFDDB4 ] MWLService      C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe
22:07:26.0676 4176  MWLService - ok
22:07:26.0723 4176  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
22:07:26.0770 4176  napagent - ok
22:07:26.0817 4176  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
22:07:26.0832 4176  NativeWifiP - ok
22:07:26.0895 4176  [ DACA803A8D732FE5EEAA024EC342F81D ] NBVol          C:\Windows\system32\DRIVERS\NBVol.sys
22:07:26.0910 4176  NBVol - ok
22:07:26.0942 4176  [ 6208F622E9E35860DFB0753DFF56F0C0 ] NBVolUp        C:\Windows\system32\DRIVERS\NBVolUp.sys
22:07:26.0957 4176  NBVolUp - ok
22:07:27.0004 4176  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
22:07:27.0035 4176  NDIS - ok
22:07:27.0051 4176  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
22:07:27.0113 4176  NdisCap - ok
22:07:27.0144 4176  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
22:07:27.0191 4176  NdisTapi - ok
22:07:27.0222 4176  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
22:07:27.0285 4176  Ndisuio - ok
22:07:27.0316 4176  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
22:07:27.0378 4176  NdisWan - ok
22:07:27.0410 4176  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
22:07:27.0456 4176  NDProxy - ok
22:07:27.0519 4176  [ 7D2633295EB6FF2B938185874884059D ] Nero BackItUp Scheduler 4.0 C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
22:07:27.0581 4176  Nero BackItUp Scheduler 4.0 - ok
22:07:27.0644 4176  [ D5AC41AE382738483FAFFBD7E373D49A ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
22:07:27.0659 4176  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
22:07:27.0659 4176  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
22:07:27.0690 4176  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
22:07:27.0737 4176  NetBIOS - ok
22:07:27.0768 4176  [ 09594D1089C523423B32A4229263F068 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
22:07:27.0815 4176  NetBT - ok
22:07:27.0815 4176  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
22:07:27.0831 4176  Netlogon - ok
22:07:27.0862 4176  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
22:07:27.0924 4176  Netman - ok
22:07:27.0971 4176  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
22:07:28.0034 4176  netprofm - ok
22:07:28.0065 4176  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:07:28.0096 4176  NetTcpPortSharing - ok
22:07:28.0127 4176  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
22:07:28.0143 4176  nfrd960 - ok
22:07:28.0205 4176  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
22:07:28.0236 4176  NlaSvc - ok
22:07:28.0330 4176  [ EF7A048FE8E3F102C78C9BD7C448BB6C ] nosGetPlusHelper C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll
22:07:28.0377 4176  nosGetPlusHelper - ok
22:07:28.0408 4176  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
22:07:28.0439 4176  Npfs - ok
22:07:28.0455 4176  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi            C:\Windows\system32\nsisvc.dll
22:07:28.0502 4176  nsi - ok
22:07:28.0533 4176  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
22:07:28.0580 4176  nsiproxy - ok
22:07:28.0626 4176  [ C04F5DEF37E55F6A34428B050F44D3D6 ] nSvcIp          C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
22:07:28.0642 4176  nSvcIp - ok
22:07:28.0689 4176  [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
22:07:28.0736 4176  Ntfs - ok
22:07:28.0782 4176  [ BD691091AC7D9713D8F0B07C6B099E6C ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
22:07:28.0798 4176  NTI IScheduleSvc - ok
22:07:28.0814 4176  [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr        C:\Windows\system32\drivers\NTIDrvr.sys
22:07:28.0829 4176  NTIDrvr - ok
22:07:28.0845 4176  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
22:07:28.0876 4176  Null - ok
22:07:28.0892 4176  [ A85B4F2EF3A7304A5399EF0526423040 ] NVENETFD        C:\Windows\system32\DRIVERS\nvm62x64.sys
22:07:28.0938 4176  NVENETFD - ok
22:07:28.0970 4176  [ 1F07B814C0BB5AABA703ABFF1F31F2E8 ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
22:07:29.0001 4176  NVHDA - ok
22:07:29.0188 4176  [ 26AA3C7E6E1DB7107BF93503F6F57E88 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
22:07:29.0484 4176  nvlddmkm - ok
22:07:29.0531 4176  [ 0AD267A4674805B61A5D7B911D2A978A ] NVNET          C:\Windows\system32\DRIVERS\nvmf6264.sys
22:07:29.0547 4176  NVNET - ok
22:07:29.0594 4176  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
22:07:29.0609 4176  nvraid - ok
22:07:29.0640 4176  [ AFDE3015BB8D76E26BEC3B287C5443A0 ] nvsmu          C:\Windows\system32\DRIVERS\nvsmu.sys
22:07:29.0656 4176  nvsmu - ok
22:07:29.0672 4176  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
22:07:29.0703 4176  nvstor - ok
22:07:29.0718 4176  [ 7C7EEF51979658CE15BBC04F96A77D56 ] nvstor64        C:\Windows\system32\DRIVERS\nvstor64.sys
22:07:29.0734 4176  nvstor64 - ok
22:07:29.0781 4176  [ A83AC04D672567CAF8BE7A4D73C0B850 ] nvsvc          C:\Windows\system32\nvvsvc.exe
22:07:29.0812 4176  nvsvc - ok
22:07:29.0921 4176  [ FB660F80BDC4F13D594996976AFAECD9 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
22:07:29.0952 4176  nvUpdatusService - ok
22:07:29.0999 4176  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
22:07:30.0015 4176  nv_agp - ok
22:07:30.0046 4176  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
22:07:30.0077 4176  ohci1394 - ok
22:07:30.0140 4176  [ 5A432A042DAE460ABE7199B758E8606C ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:07:30.0155 4176  ose - ok
22:07:30.0171 4176  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
22:07:30.0218 4176  p2pimsvc - ok
22:07:30.0249 4176  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
22:07:30.0280 4176  p2psvc - ok
22:07:30.0296 4176  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
22:07:30.0311 4176  Parport - ok
22:07:30.0358 4176  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
22:07:30.0374 4176  partmgr - ok
22:07:30.0374 4176  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
22:07:30.0420 4176  PcaSvc - ok
22:07:30.0452 4176  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci            C:\Windows\system32\drivers\pci.sys
22:07:30.0467 4176  pci - ok
22:07:30.0498 4176  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
22:07:30.0514 4176  pciide - ok
22:07:30.0530 4176  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
22:07:30.0545 4176  pcmcia - ok
22:07:30.0561 4176  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw            C:\Windows\system32\drivers\pcw.sys
22:07:30.0576 4176  pcw - ok
22:07:30.0608 4176  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
22:07:30.0670 4176  PEAUTH - ok
22:07:30.0732 4176  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
22:07:30.0779 4176  PerfHost - ok
22:07:30.0826 4176  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla            C:\Windows\system32\pla.dll
22:07:30.0920 4176  pla - ok
22:07:30.0951 4176  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
22:07:30.0982 4176  PlugPlay - ok
22:07:31.0107 4176  [ CBCEC2C45E7D672EC6E46CBFF23BDF8E ] PMBDeviceInfoProvider C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
22:07:31.0169 4176  PMBDeviceInfoProvider - ok
22:07:31.0200 4176  [ 37F6046CDC630442D7DC087501FF6FC6 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
22:07:31.0232 4176  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
22:07:31.0232 4176  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
22:07:31.0247 4176  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
22:07:31.0294 4176  PNRPAutoReg - ok
22:07:31.0310 4176  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
22:07:31.0325 4176  PNRPsvc - ok
22:07:31.0372 4176  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
22:07:31.0419 4176  PolicyAgent - ok
22:07:31.0450 4176  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power          C:\Windows\system32\umpo.dll
22:07:31.0512 4176  Power - ok
22:07:31.0559 4176  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
22:07:31.0622 4176  PptpMiniport - ok
22:07:31.0653 4176  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor      C:\Windows\system32\DRIVERS\processr.sys
22:07:31.0684 4176  Processor - ok
22:07:31.0715 4176  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc        C:\Windows\system32\profsvc.dll
22:07:31.0762 4176  ProfSvc - ok
22:07:31.0778 4176  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
22:07:31.0793 4176  ProtectedStorage - ok
22:07:31.0840 4176  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
22:07:31.0887 4176  Psched - ok
22:07:31.0996 4176  [ EA735BF6DF13A857A83C99BF27A422AD ] PST Service    C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
22:07:31.0996 4176  PST Service ( UnsignedFile.Multi.Generic ) - warning
22:07:31.0996 4176  PST Service - detected UnsignedFile.Multi.Generic (1)
22:07:32.0027 4176  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
22:07:32.0090 4176  ql2300 - ok
22:07:32.0105 4176  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
22:07:32.0136 4176  ql40xx - ok
22:07:32.0168 4176  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE          C:\Windows\system32\qwave.dll
22:07:32.0199 4176  QWAVE - ok
22:07:32.0199 4176  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
22:07:32.0230 4176  QWAVEdrv - ok
22:07:32.0308 4176  [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr        C:\Windows\WindowsMobile\rapimgr.dll
22:07:32.0324 4176  RapiMgr - ok
22:07:32.0339 4176  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
22:07:32.0386 4176  RasAcd - ok
22:07:32.0417 4176  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
22:07:32.0464 4176  RasAgileVpn - ok
22:07:32.0480 4176  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto        C:\Windows\System32\rasauto.dll
22:07:32.0526 4176  RasAuto - ok
22:07:32.0573 4176  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
22:07:32.0620 4176  Rasl2tp - ok
22:07:32.0636 4176  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
22:07:32.0714 4176  RasMan - ok
22:07:32.0729 4176  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
22:07:32.0792 4176  RasPppoe - ok
22:07:32.0823 4176  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
22:07:32.0885 4176  RasSstp - ok
22:07:32.0916 4176  [ 77F665941019A1594D887A74F301FA2F ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
22:07:32.0979 4176  rdbss - ok
22:07:32.0979 4176  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
22:07:33.0026 4176  rdpbus - ok
22:07:33.0041 4176  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
22:07:33.0072 4176  RDPCDD - ok
22:07:33.0104 4176  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
22:07:33.0150 4176  RDPENCDD - ok
22:07:33.0166 4176  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
22:07:33.0213 4176  RDPREFMP - ok
22:07:33.0260 4176  [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
22:07:33.0322 4176  RdpVideoMiniport - ok
22:07:33.0369 4176  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
22:07:33.0431 4176  RDPWD - ok
22:07:33.0478 4176  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
22:07:33.0494 4176  rdyboost - ok
22:07:33.0509 4176  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
22:07:33.0572 4176  RemoteAccess - ok
22:07:33.0587 4176  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
22:07:33.0650 4176  RemoteRegistry - ok
22:07:33.0696 4176  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
22:07:33.0743 4176  RFCOMM - ok
22:07:33.0759 4176  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
22:07:33.0790 4176  RpcEptMapper - ok
22:07:33.0821 4176  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
22:07:33.0852 4176  RpcLocator - ok
22:07:33.0884 4176  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs          C:\Windows\system32\rpcss.dll
22:07:33.0930 4176  RpcSs - ok
22:07:33.0962 4176  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
22:07:34.0008 4176  rspndr - ok
22:07:34.0071 4176  [ EA268BCE30691C2DD24F02E617FD2EB5 ] s0016bus        C:\Windows\system32\DRIVERS\s0016bus.sys
22:07:34.0086 4176  s0016bus - ok
22:07:34.0133 4176  [ F5F9DEB89996D333EF976624D37E24E3 ] s0016mdfl      C:\Windows\system32\DRIVERS\s0016mdfl.sys
22:07:34.0149 4176  s0016mdfl - ok
22:07:34.0164 4176  [ C17CE2AEE67480FEBCC36ECCB54C0BE8 ] s0016mdm        C:\Windows\system32\DRIVERS\s0016mdm.sys
22:07:34.0180 4176  s0016mdm - ok
22:07:34.0196 4176  [ CC267F04C54C5EC5B7BD658D7628469F ] s0016mgmt      C:\Windows\system32\DRIVERS\s0016mgmt.sys
22:07:34.0211 4176  s0016mgmt - ok
22:07:34.0242 4176  [ 30A35BBCE09D9FE67482FD62C61911FC ] s0016nd5        C:\Windows\system32\DRIVERS\s0016nd5.sys
22:07:34.0258 4176  s0016nd5 - ok
22:07:34.0274 4176  [ CA394DCC38579C7AD82E83EE64D798A0 ] s0016obex      C:\Windows\system32\DRIVERS\s0016obex.sys
22:07:34.0289 4176  s0016obex - ok
22:07:34.0305 4176  [ EB267CCEA84E6E8598D92F73332AC67B ] s0016unic      C:\Windows\system32\DRIVERS\s0016unic.sys
22:07:34.0320 4176  s0016unic - ok
22:07:34.0367 4176  [ 032F537623A7B2FB81AAA184C30B70C3 ] s0017bus        C:\Windows\system32\DRIVERS\s0017bus.sys
22:07:34.0383 4176  s0017bus - ok
22:07:34.0398 4176  [ 9964A28E569B4FF105B446EF8978FD5C ] s0017mdfl      C:\Windows\system32\DRIVERS\s0017mdfl.sys
22:07:34.0414 4176  s0017mdfl - ok
22:07:34.0430 4176  [ 06347087D274C23DCFA8C4AB5C4314DB ] s0017mdm        C:\Windows\system32\DRIVERS\s0017mdm.sys
22:07:34.0445 4176  s0017mdm - ok
22:07:34.0461 4176  [ F0F0747B3FA50272DE6B1BF575FA4700 ] s0017mgmt      C:\Windows\system32\DRIVERS\s0017mgmt.sys
22:07:34.0476 4176  s0017mgmt - ok
22:07:34.0492 4176  [ 7224412CEA2FF2DF7D4842C1B0E71045 ] s0017nd5        C:\Windows\system32\DRIVERS\s0017nd5.sys
22:07:34.0508 4176  s0017nd5 - ok
22:07:34.0523 4176  [ 3FEADBC7F09B8B596CBFB82F12ABA87F ] s0017obex      C:\Windows\system32\DRIVERS\s0017obex.sys
22:07:34.0554 4176  s0017obex - ok
22:07:34.0554 4176  [ 2B63BEA31D939888B2A8F3F14D89B5C1 ] s0017unic      C:\Windows\system32\DRIVERS\s0017unic.sys
22:07:34.0586 4176  s0017unic - ok
22:07:34.0601 4176  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs          C:\Windows\system32\lsass.exe
22:07:34.0617 4176  SamSs - ok
22:07:34.0648 4176  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
22:07:34.0679 4176  sbp2port - ok
22:07:34.0710 4176  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
22:07:34.0773 4176  SCardSvr - ok
22:07:34.0788 4176  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
22:07:34.0835 4176  scfilter - ok
22:07:34.0882 4176  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
22:07:34.0960 4176  Schedule - ok
22:07:34.0991 4176  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc    C:\Windows\System32\certprop.dll
22:07:35.0038 4176  SCPolicySvc - ok
22:07:35.0069 4176  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
22:07:35.0116 4176  SDRSVC - ok
22:07:35.0132 4176  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
22:07:35.0194 4176  secdrv - ok
22:07:35.0210 4176  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
22:07:35.0256 4176  seclogon - ok
22:07:35.0272 4176  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
22:07:35.0334 4176  SENS - ok
22:07:35.0350 4176  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
22:07:35.0397 4176  SensrSvc - ok
22:07:35.0397 4176  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
22:07:35.0412 4176  Serenum - ok
22:07:35.0444 4176  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
22:07:35.0490 4176  Serial - ok
22:07:35.0522 4176  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
22:07:35.0553 4176  sermouse - ok
22:07:35.0600 4176  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
22:07:35.0662 4176  SessionEnv - ok
22:07:35.0678 4176  [ A554811BCD09279536440C964AE35BBF ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
22:07:35.0724 4176  sffdisk - ok
22:07:35.0740 4176  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
22:07:35.0756 4176  sffp_mmc - ok
22:07:35.0771 4176  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
22:07:35.0802 4176  sffp_sd - ok
22:07:35.0834 4176  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
22:07:35.0865 4176  sfloppy - ok
22:07:35.0896 4176  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
22:07:35.0958 4176  SharedAccess - ok
22:07:36.0005 4176  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
22:07:36.0052 4176  ShellHWDetection - ok
22:07:36.0083 4176  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:07:36.0114 4176  SiSRaid2 - ok
22:07:36.0130 4176  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
22:07:36.0146 4176  SiSRaid4 - ok
22:07:36.0224 4176  [ 8C4F0DCC6A5100D48F9B2F950CDD220F ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
22:07:36.0239 4176  SkypeUpdate - ok
22:07:36.0255 4176  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
22:07:36.0302 4176  Smb - ok
22:07:36.0333 4176  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
22:07:36.0348 4176  SNMPTRAP - ok
22:07:36.0536 4176  [ C61C05DE6443838A1EE7B34AD5D4E7FB ] SNPSTD3        C:\Windows\system32\DRIVERS\snpstd3.sys
22:07:36.0816 4176  SNPSTD3 - ok
22:07:36.0894 4176  [ 5177D14A78E60FD61DCFC6B388E7E971 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
22:07:36.0910 4176  Sony PC Companion - ok
22:07:36.0926 4176  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr          C:\Windows\system32\drivers\spldr.sys
22:07:36.0941 4176  spldr - ok
22:07:36.0988 4176  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler        C:\Windows\System32\spoolsv.exe
22:07:37.0050 4176  Spooler - ok
22:07:37.0128 4176  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
22:07:37.0238 4176  sppsvc - ok
22:07:37.0269 4176  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
22:07:37.0331 4176  sppuinotify - ok
22:07:37.0362 4176  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv            C:\Windows\system32\DRIVERS\srv.sys
22:07:37.0409 4176  srv - ok
22:07:37.0456 4176  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
22:07:37.0487 4176  srv2 - ok
22:07:37.0518 4176  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
22:07:37.0550 4176  srvnet - ok
22:07:37.0581 4176  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
22:07:37.0628 4176  SSDPSRV - ok
22:07:37.0659 4176  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc        C:\Windows\system32\sstpsvc.dll
22:07:37.0690 4176  SstpSvc - ok
22:07:37.0815 4176  [ 98CC6BDCB5F593394CE2000EC454AEE4 ] StarMoney 8.0 OnlineUpdate C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
22:07:37.0830 4176  StarMoney 8.0 OnlineUpdate - ok
22:07:37.0862 4176  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
22:07:37.0877 4176  stexstor - ok
22:07:37.0924 4176  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
22:07:37.0955 4176  stisvc - ok
22:07:37.0986 4176  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
22:07:38.0002 4176  swenum - ok
22:07:38.0033 4176  [ E08E46FDD841B7184194011CA1955A0B ] swprv          C:\Windows\System32\swprv.dll
22:07:38.0080 4176  swprv - ok
22:07:38.0127 4176  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain        C:\Windows\system32\sysmain.dll
22:07:38.0189 4176  SysMain - ok
22:07:38.0220 4176  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
22:07:38.0252 4176  TabletInputService - ok
22:07:38.0252 4176  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv        C:\Windows\System32\tapisrv.dll
22:07:38.0314 4176  TapiSrv - ok
22:07:38.0345 4176  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS            C:\Windows\System32\tbssvc.dll
22:07:38.0392 4176  TBS - ok
22:07:38.0470 4176  [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
22:07:38.0517 4176  Tcpip - ok
22:07:38.0548 4176  [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
22:07:38.0595 4176  TCPIP6 - ok
22:07:38.0626 4176  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
22:07:38.0657 4176  tcpipreg - ok
22:07:38.0688 4176  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
22:07:38.0704 4176  TDPIPE - ok
22:07:38.0751 4176  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
22:07:38.0782 4176  TDTCP - ok
22:07:38.0813 4176  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
22:07:38.0860 4176  tdx - ok
22:07:38.0891 4176  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
22:07:38.0907 4176  TermDD - ok
22:07:38.0922 4176  [ 2E648163254233755035B46DD7B89123 ] TermService    C:\Windows\System32\termsrv.dll
22:07:39.0000 4176  TermService - ok
22:07:39.0016 4176  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
22:07:39.0063 4176  Themes - ok
22:07:39.0094 4176  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER    C:\Windows\system32\mmcss.dll
22:07:39.0125 4176  THREADORDER - ok
22:07:39.0188 4176  [ 199C2E87D9A5EC58D0BCD94E893BF629 ] TIEHDUSB        C:\Windows\system32\DRIVERS\tiehdusb.sys
22:07:39.0234 4176  TIEHDUSB - ok
22:07:39.0250 4176  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
22:07:39.0297 4176  TrkWks - ok
22:07:39.0359 4176  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
22:07:39.0406 4176  TrustedInstaller - ok
22:07:39.0437 4176  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
22:07:39.0484 4176  tssecsrv - ok
22:07:39.0546 4176  [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
22:07:39.0593 4176  TsUsbFlt - ok
22:07:39.0640 4176  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
22:07:39.0702 4176  tunnel - ok
22:07:39.0734 4176  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
22:07:39.0749 4176  uagp35 - ok
22:07:39.0765 4176  [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper        C:\Windows\system32\drivers\UBHelper.sys
22:07:39.0780 4176  UBHelper - ok
22:07:39.0827 4176  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
22:07:39.0890 4176  udfs - ok
22:07:39.0921 4176  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
22:07:39.0936 4176  UI0Detect - ok
22:07:39.0983 4176  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
22:07:39.0999 4176  uliagpkx - ok
22:07:40.0061 4176  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
22:07:40.0092 4176  umbus - ok
22:07:40.0108 4176  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
22:07:40.0155 4176  UmPass - ok
22:07:40.0202 4176  [ 70DDE3A86DBEB1D6C3C30AD687B1877A ] Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
22:07:40.0217 4176  Updater Service - ok
22:07:40.0233 4176  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
22:07:40.0280 4176  upnphost - ok
22:07:40.0295 4176  [ 43228F8EDD1B0BCDD3145AD246E63D39 ] USBAAPL64      C:\Windows\system32\Drivers\usbaapl64.sys
22:07:40.0342 4176  USBAAPL64 - ok
22:07:40.0389 4176  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
22:07:40.0436 4176  usbccgp - ok
22:07:40.0467 4176  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
22:07:40.0498 4176  usbcir - ok
22:07:40.0498 4176  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci        C:\Windows\system32\DRIVERS\usbehci.sys
22:07:40.0529 4176  usbehci - ok
22:07:40.0545 4176  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
22:07:40.0592 4176  usbhub - ok
22:07:40.0607 4176  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci        C:\Windows\system32\DRIVERS\usbohci.sys
22:07:40.0638 4176  usbohci - ok
22:07:40.0685 4176  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
22:07:40.0701 4176  usbprint - ok
22:07:40.0732 4176  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan        C:\Windows\system32\DRIVERS\usbscan.sys
22:07:40.0748 4176  usbscan - ok
22:07:40.0779 4176  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:07:40.0826 4176  USBSTOR - ok
22:07:40.0841 4176  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
22:07:40.0872 4176  usbuhci - ok
22:07:40.0888 4176  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms          C:\Windows\System32\uxsms.dll
22:07:40.0950 4176  UxSms - ok
22:07:40.0966 4176  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
22:07:40.0982 4176  VaultSvc - ok
22:07:41.0028 4176  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
22:07:41.0044 4176  vdrvroot - ok
22:07:41.0091 4176  [ 8D6B481601D01A456E75C3210F1830BE ] vds            C:\Windows\System32\vds.exe
22:07:41.0153 4176  vds - ok
22:07:41.0184 4176  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
22:07:41.0200 4176  vga - ok
22:07:41.0216 4176  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave        C:\Windows\System32\drivers\vga.sys
22:07:41.0278 4176  VgaSave - ok
22:07:41.0309 4176  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
22:07:41.0325 4176  vhdmp - ok
22:07:41.0372 4176  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
22:07:41.0387 4176  viaide - ok
22:07:41.0403 4176  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
22:07:41.0418 4176  volmgr - ok
22:07:41.0450 4176  [ A255814907C89BE58B79EF2F189B843B ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
22:07:41.0481 4176  volmgrx - ok
22:07:41.0496 4176  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
22:07:41.0512 4176  volsnap - ok
22:07:41.0528 4176  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
22:07:41.0559 4176  vsmraid - ok
22:07:41.0606 4176  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS            C:\Windows\system32\vssvc.exe
22:07:41.0684 4176  VSS - ok
22:07:41.0699 4176  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
22:07:41.0746 4176  vwifibus - ok
22:07:41.0777 4176  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time        C:\Windows\system32\w32time.dll
22:07:41.0824 4176  W32Time - ok
22:07:41.0840 4176  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
22:07:41.0871 4176  WacomPen - ok
22:07:41.0918 4176  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
22:07:41.0980 4176  WANARP - ok
22:07:41.0980 4176  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
22:07:42.0027 4176  Wanarpv6 - ok
22:07:42.0074 4176  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
22:07:42.0136 4176  wbengine - ok
22:07:42.0152 4176  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
22:07:42.0183 4176  WbioSrvc - ok
22:07:42.0245 4176  [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm        C:\Windows\WindowsMobile\wcescomm.dll
22:07:42.0261 4176  WcesComm - ok
22:07:42.0308 4176  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc        C:\Windows\System32\wcncsvc.dll
22:07:42.0370 4176  wcncsvc - ok
22:07:42.0386 4176  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
22:07:42.0401 4176  WcsPlugInService - ok
22:07:42.0417 4176  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
22:07:42.0448 4176  Wd - ok
22:07:42.0479 4176  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
22:07:42.0510 4176  Wdf01000 - ok
22:07:42.0526 4176  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
22:07:42.0588 4176  WdiServiceHost - ok
22:07:42.0588 4176  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost  C:\Windows\system32\wdi.dll
22:07:42.0604 4176  WdiSystemHost - ok
22:07:42.0651 4176  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient      C:\Windows\System32\webclnt.dll
22:07:42.0729 4176  WebClient - ok
22:07:42.0791 4176  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
22:07:42.0932 4176  Wecsvc - ok
22:07:42.0947 4176  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
22:07:42.0994 4176  wercplsupport - ok
22:07:43.0010 4176  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
22:07:43.0056 4176  WerSvc - ok
22:07:43.0103 4176  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
22:07:43.0134 4176  WfpLwf - ok
22:07:43.0150 4176  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
22:07:43.0166 4176  WIMMount - ok
22:07:43.0181 4176  WinDefend - ok
22:07:43.0197 4176  WinHttpAutoProxySvc - ok
22:07:43.0228 4176  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
22:07:43.0290 4176  Winmgmt - ok
22:07:43.0353 4176  [ BCB1310604AA415C4508708975B3931E ] WinRM          C:\Windows\system32\WsmSvc.dll
22:07:43.0431 4176  WinRM - ok
22:07:43.0493 4176  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
22:07:43.0540 4176  WinUsb - ok
22:07:43.0571 4176  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc        C:\Windows\System32\wlansvc.dll
22:07:43.0634 4176  Wlansvc - ok
22:07:43.0649 4176  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
22:07:43.0680 4176  WmiAcpi - ok
22:07:43.0696 4176  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
22:07:43.0743 4176  wmiApSrv - ok
22:07:43.0774 4176  WMPNetworkSvc - ok
22:07:43.0790 4176  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
22:07:43.0821 4176  WPCSvc - ok
22:07:43.0852 4176  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
22:07:43.0883 4176  WPDBusEnum - ok
22:07:43.0899 4176  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
22:07:43.0946 4176  ws2ifsl - ok
22:07:43.0946 4176  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
22:07:43.0992 4176  wscsvc - ok
22:07:44.0039 4176  [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys
22:07:44.0070 4176  WSDPrintDevice - ok
22:07:44.0102 4176  [ 4A2A5C50DD1A63577D3ACA94269FBC7F ] WSDScan        C:\Windows\system32\DRIVERS\WSDScan.sys
22:07:44.0133 4176  WSDScan - ok
22:07:44.0133 4176  WSearch - ok
22:07:44.0211 4176  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
22:07:44.0273 4176  wuauserv - ok
22:07:44.0304 4176  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
22:07:44.0351 4176  WudfPf - ok
22:07:44.0382 4176  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
22:07:44.0414 4176  WUDFRd - ok
22:07:44.0460 4176  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
22:07:44.0492 4176  wudfsvc - ok
22:07:44.0523 4176  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc        C:\Windows\System32\wwansvc.dll
22:07:44.0554 4176  WwanSvc - ok
22:07:44.0601 4176  ================ Scan global ===============================
22:07:44.0616 4176  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
22:07:44.0663 4176  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
22:07:44.0663 4176  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
22:07:44.0679 4176  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
22:07:44.0694 4176  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
22:07:44.0710 4176  [Global] - ok
22:07:44.0710 4176  ================ Scan MBR ==================================
22:07:44.0710 4176  [ 70E629B51C16B3C007730C6AE57144C9 ] \Device\Harddisk0\DR0
22:07:46.0972 4176  \Device\Harddisk0\DR0 - ok
22:07:46.0972 4176  ================ Scan VBR ==================================
22:07:46.0988 4176  [ 022497C1B7BCAD2D5CEEA13EDFA891A2 ] \Device\Harddisk0\DR0\Partition1
22:07:46.0988 4176  \Device\Harddisk0\DR0\Partition1 - ok
22:07:47.0003 4176  [ 9C5F9DABAA8E66E7903661473AECA0C8 ] \Device\Harddisk0\DR0\Partition2
22:07:47.0003 4176  \Device\Harddisk0\DR0\Partition2 - ok
22:07:47.0019 4176  [ 7382E78A9C7AA3BD32F3830F3DF5E5C1 ] \Device\Harddisk0\DR0\Partition3
22:07:47.0019 4176  \Device\Harddisk0\DR0\Partition3 - ok
22:07:47.0019 4176  ============================================================
22:07:47.0019 4176  Scan finished
22:07:47.0019 4176  ============================================================
22:07:47.0034 5640  Detected object count: 8
22:07:47.0034 5640  Actual detected object count: 8
22:08:18.0515 5640  Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
22:08:18.0515 5640  Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:08:18.0515 5640  Adobe Version Cue CS2 ( UnsignedFile.Multi.Generic ) - skipped by user
22:08:18.0515 5640  Adobe Version Cue CS2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:08:18.0515 5640  hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user
22:08:18.0515 5640  hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:08:18.0515 5640  hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user
22:08:18.0515 5640  hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:08:18.0515 5640  HPSLPSVC ( UnsignedFile.Multi.Generic ) - skipped by user
22:08:18.0515 5640  HPSLPSVC ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:08:18.0515 5640  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
22:08:18.0515 5640  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:08:18.0515 5640  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
22:08:18.0515 5640  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:08:18.0515 5640  PST Service ( UnsignedFile.Multi.Generic ) - skipped by user
22:08:18.0515 5640  PST Service ( UnsignedFile.Multi.Generic ) - User select action: Skip

markusg 25.02.2013 18:07
Hi,
Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

frappuccino 25.02.2013 19:10
hi,
sind soweit keine Fehler aufgetreten.
Also hier dann das Logfile :
Code:
ComboFix 13-02-24.01 - Alexander 25.02.2013  18:37:27.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.4095.2746 [GMT 1:00]
ausgeführt von:: c:\users\Alexander\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
FW: COMODO Firewall *Disabled* {7DB03214-694B-060B-1600-BD4715C36DBB}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: COMODO Defense+ *Disabled/Updated* {FEEA52D5-051E-08DD-07EF-2F009097607D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\Acer GameZone online.ico
c:\users\Alexander\AppData\Local\._Revolution_
c:\users\Alexander\AppData\Local\Microsoft\Windows\Temporary Internet Files\autoupdate.php
c:\users\Alexander\AppData\Roaming\.#
c:\users\Alexander\Documents\~WRL3364.tmp
c:\users\Alexander\Documents\~WRL3389.tmp
c:\users\Christoph\AppData\Roaming\.#
c:\users\Christoph\AppData\Roaming\.#\MBX@1810@272770.###
c:\users\Christoph\AppData\Roaming\.#\MBX@1810@2727A0.###
c:\users\Christoph\AppData\Roaming\.#\MBX@1ABC@1F92770.###
c:\users\Christoph\AppData\Roaming\.#\MBX@1ABC@1F927A0.###
c:\users\KATHAR~1\Documents\~WRL2568.tmp
c:\users\Public\~WRL0240.tmp
c:\users\Public\~WRL2725.tmp
c:\users\Sixpack\AppData\Roaming\.#
c:\users\Sixpack\Documents\~WRL0670.tmp
c:\users\Sixpack\Documents\~WRL1172.tmp
c:\users\Sixpack\Documents\~WRL2347.tmp
c:\users\Sixpack\Documents\~WRL3278.tmp
c:\users\Sixpack\Documents\~WRL3650.tmp
c:\users\Sixpack\Documents\~WRL3726.tmp
c:\users\Sixpack\Documents\~WRL3893.tmp
c:\users\Theresa\AppData\Roaming\.#
c:\users\Theresa\Documents\~WRL2616.tmp
D:\install.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-01-25 bis 2013-02-25  ))))))))))))))))))))))))))))))
.
.
2013-02-25 17:54 . 2013-02-25 17:54        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2013-02-25 17:54 . 2013-02-25 17:54        --------        d-----w-        c:\users\Sixpack\AppData\Local\temp
2013-02-25 17:53 . 2013-02-25 17:53        --------        d-----w-        c:\users\KATHAR~1\AppData\Local\temp
2013-02-25 17:53 . 2013-02-25 17:53        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-02-25 17:53 . 2013-02-25 17:53        --------        d-----w-        c:\users\Christoph\AppData\Local\temp
2013-02-25 17:53 . 2013-02-25 17:53        --------        d-----w-        c:\users\Theresa\AppData\Local\temp
2013-02-25 17:53 . 2013-02-25 17:53        --------        d-----w-        c:\users\Gast\AppData\Local\temp
2013-02-24 09:53 . 2013-02-24 09:53        95648        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-23 15:18 . 2012-12-14 15:49        24176        ----a-w-        c:\windows\system32\drivers\mbam.sys
2013-02-23 15:18 . 2013-02-23 15:18        --------        d-----w-        c:\users\Alexander\AppData\Local\Programs
2013-02-13 02:02 . 2013-01-09 01:10        996352        ----a-w-        c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 02:02 . 2013-01-08 22:01        768000        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 02:00 . 2013-01-09 01:48        17812992        ----a-w-        c:\windows\system32\mshtml.dll
2013-02-13 02:00 . 2013-01-09 01:22        10925568        ----a-w-        c:\windows\system32\ieframe.dll
2013-02-12 20:15 . 2013-01-05 05:53        5553512        ----a-w-        c:\windows\system32\ntoskrnl.exe
2013-02-12 20:15 . 2013-01-05 05:00        3967848        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe
2013-02-12 20:15 . 2013-01-05 05:00        3913064        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe
2013-02-12 20:15 . 2013-01-04 03:26        3153408        ----a-w-        c:\windows\system32\win32k.sys
2013-02-12 20:15 . 2013-01-04 05:46        215040        ----a-w-        c:\windows\system32\winsrv.dll
2013-02-12 20:15 . 2013-01-04 04:51        5120        ----a-w-        c:\windows\SysWow64\wow32.dll
2013-02-12 20:15 . 2013-01-04 02:47        25600        ----a-w-        c:\windows\SysWow64\setup16.exe
2013-02-12 20:15 . 2013-01-04 02:47        7680        ----a-w-        c:\windows\SysWow64\instnm.exe
2013-02-12 20:15 . 2013-01-04 02:47        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll
2013-02-12 20:15 . 2013-01-04 02:47        2048        ----a-w-        c:\windows\SysWow64\user.exe
2013-02-12 20:15 . 2013-01-03 06:00        1913192        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2013-02-12 20:15 . 2013-01-03 06:00        288088        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-11 08:29 . 2013-02-11 08:29        --------        d-----w-        c:\users\Sixpack\AppData\Roaming\Iminent
2013-02-07 15:36 . 2013-02-07 15:36        --------        d-----w-        c:\users\Christoph\AppData\Roaming\Iminent
2013-01-31 11:20 . 2013-02-05 17:16        --------        d-----w-        c:\users\KATHAR~1\AppData\Local\Spotify
2013-01-31 11:19 . 2013-02-23 20:23        --------        d-----w-        c:\users\KATHAR~1\AppData\Roaming\Spotify
2013-01-30 19:18 . 2013-02-24 20:03        --------        d-----w-        c:\users\Christoph\AppData\Roaming\Spotify
2013-01-30 19:18 . 2013-02-24 14:53        --------        d-----w-        c:\users\Christoph\AppData\Local\Spotify
2013-01-30 12:25 . 2013-02-25 12:57        --------        d-----w-        c:\users\Alexander\AppData\Local\Spotify
2013-01-30 12:24 . 2013-02-25 17:21        --------        d-----w-        c:\users\Alexander\AppData\Roaming\Spotify
2013-01-28 19:40 . 2013-01-28 19:40        27760        ----a-w-        c:\windows\system32\drivers\ggsemc.sys
2013-01-28 19:40 . 2013-01-28 19:40        1721576        ----a-w-        c:\windows\system32\WdfCoInstaller01009.dll
2013-01-28 19:40 . 2013-01-28 19:40        14448        ----a-w-        c:\windows\system32\drivers\ggflt.sys
2013-01-28 19:38 . 2013-01-28 19:38        --------        d-----w-        c:\program files (x86)\Sony Ericsson
2013-01-28 18:11 . 2013-01-28 18:11        --------        d-----w-        c:\program files (x86)\Common Files\Skype
2013-01-28 18:11 . 2013-01-28 18:11        --------        d-----r-        c:\program files (x86)\Skype
2013-01-27 17:51 . 2013-01-27 17:51        --------        d-----w-        C:\OpenOffice.org
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-24 09:53 . 2012-07-06 16:51        861088        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll
2013-02-24 09:53 . 2010-11-18 20:13        782240        ----a-w-        c:\windows\SysWow64\deployJava1.dll
2013-02-23 15:31 . 2012-03-28 21:34        691568        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-23 15:31 . 2011-05-28 17:25        71024        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-13 02:06 . 2010-04-21 17:46        70004024        ----a-w-        c:\windows\system32\MRT.exe
2013-01-20 09:17 . 2013-01-20 09:17        86528        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2013-01-20 09:17 . 2013-01-20 09:17        76800        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe
2013-01-20 09:17 . 2013-01-20 09:17        74752        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-01-20 09:17 . 2013-01-20 09:17        63488        ----a-w-        c:\windows\SysWow64\tdc.ocx
2013-01-20 09:17 . 2013-01-20 09:17        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll
2013-01-20 09:17 . 2013-01-20 09:17        161792        ----a-w-        c:\windows\SysWow64\msls31.dll
2013-01-20 09:17 . 2013-01-20 09:17        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll
2013-01-20 09:17 . 2013-01-20 09:17        367104        ----a-w-        c:\windows\SysWow64\html.iec
2013-01-20 09:17 . 2013-01-20 09:17        89088        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
2013-01-20 09:17 . 2013-01-20 09:17        74752        ----a-w-        c:\windows\SysWow64\iesetup.dll
2013-01-20 09:17 . 2013-01-20 09:17        35840        ----a-w-        c:\windows\SysWow64\imgutil.dll
2013-01-20 09:17 . 2013-01-20 09:17        23552        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2013-01-20 09:17 . 2013-01-20 09:17        222208        ----a-w-        c:\windows\system32\msls31.dll
2013-01-20 09:17 . 2013-01-20 09:17        152064        ----a-w-        c:\windows\SysWow64\wextract.exe
2013-01-20 09:17 . 2013-01-20 09:17        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe
2013-01-20 09:17 . 2013-01-20 09:17        11776        ----a-w-        c:\windows\SysWow64\mshta.exe
2013-01-20 09:17 . 2013-01-20 09:17        101888        ----a-w-        c:\windows\SysWow64\admparse.dll
2013-01-20 09:17 . 2013-01-20 09:17        91648        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2013-01-20 09:17 . 2013-01-20 09:17        89088        ----a-w-        c:\windows\system32\ie4uinit.exe
2013-01-20 09:17 . 2013-01-20 09:17        85504        ----a-w-        c:\windows\system32\iesetup.dll
2013-01-20 09:17 . 2013-01-20 09:17        82432        ----a-w-        c:\windows\system32\icardie.dll
2013-01-20 09:17 . 2013-01-20 09:17        76800        ----a-w-        c:\windows\system32\tdc.ocx
2013-01-20 09:17 . 2013-01-20 09:17        65024        ----a-w-        c:\windows\system32\pngfilt.dll
2013-01-20 09:17 . 2013-01-20 09:17        55296        ----a-w-        c:\windows\system32\msfeedsbs.dll
2013-01-20 09:17 . 2013-01-20 09:17        534528        ----a-w-        c:\windows\system32\ieapfltr.dll
2013-01-20 09:17 . 2013-01-20 09:17        49664        ----a-w-        c:\windows\system32\imgutil.dll
2013-01-20 09:17 . 2013-01-20 09:17        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2013-01-20 09:17 . 2013-01-20 09:17        452608        ----a-w-        c:\windows\system32\dxtmsft.dll
2013-01-20 09:17 . 2013-01-20 09:17        448512        ----a-w-        c:\windows\system32\html.iec
2013-01-20 09:17 . 2013-01-20 09:17        403248        ----a-w-        c:\windows\system32\iedkcs32.dll
2013-01-20 09:17 . 2013-01-20 09:17        39936        ----a-w-        c:\windows\system32\iernonce.dll
2013-01-20 09:17 . 2013-01-20 09:17        3695416        ----a-w-        c:\windows\system32\ieapfltr.dat
2013-01-20 09:17 . 2013-01-20 09:17        30720        ----a-w-        c:\windows\system32\licmgr10.dll
2013-01-20 09:17 . 2013-01-20 09:17        282112        ----a-w-        c:\windows\system32\dxtrans.dll
2013-01-20 09:17 . 2013-01-20 09:17        267776        ----a-w-        c:\windows\system32\ieaksie.dll
2013-01-20 09:17 . 2013-01-20 09:17        249344        ----a-w-        c:\windows\system32\webcheck.dll
2013-01-20 09:17 . 2013-01-20 09:17        197120        ----a-w-        c:\windows\system32\msrating.dll
2013-01-20 09:17 . 2013-01-20 09:17        163840        ----a-w-        c:\windows\system32\ieakui.dll
2013-01-20 09:17 . 2013-01-20 09:17        160256        ----a-w-        c:\windows\system32\ieakeng.dll
2013-01-20 09:17 . 2013-01-20 09:17        149504        ----a-w-        c:\windows\system32\occache.dll
2013-01-20 09:17 . 2013-01-20 09:17        145920        ----a-w-        c:\windows\system32\iepeers.dll
2013-01-20 09:17 . 2013-01-20 09:17        135168        ----a-w-        c:\windows\system32\IEAdvpack.dll
2013-01-20 09:17 . 2013-01-20 09:17        12288        ----a-w-        c:\windows\system32\mshta.exe
2013-01-20 09:17 . 2013-01-20 09:17        114176        ----a-w-        c:\windows\system32\admparse.dll
2013-01-20 09:17 . 2013-01-20 09:17        111616        ----a-w-        c:\windows\system32\iesysprep.dll
2013-01-20 09:17 . 2013-01-20 09:17        10752        ----a-w-        c:\windows\system32\msfeedssync.exe
2013-01-20 09:17 . 2013-01-20 09:17        165888        ----a-w-        c:\windows\system32\iexpress.exe
2013-01-20 09:17 . 2013-01-20 09:17        160256        ----a-w-        c:\windows\system32\wextract.exe
2013-01-20 09:17 . 2013-01-20 09:17        103936        ----a-w-        c:\windows\system32\inseng.dll
2013-01-04 04:43 . 2013-02-12 20:15        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2012-12-29 10:34 . 2013-01-20 09:08        7565240        ----a-w-        c:\windows\system32\nvopencl.dll
2012-12-29 10:34 . 2013-01-20 09:08        6263784        ----a-w-        c:\windows\SysWow64\nvopencl.dll
2012-12-29 10:34 . 2013-01-20 09:08        2720696        ----a-w-        c:\windows\SysWow64\nvcuvid.dll
2012-12-29 10:34 . 2013-01-20 09:08        26931128        ----a-w-        c:\windows\system32\nvoglv64.dll
2012-12-29 10:34 . 2013-01-20 09:08        20450232        ----a-w-        c:\windows\SysWow64\nvoglv32.dll
2012-12-29 10:34 . 2013-01-20 09:08        18054312        ----a-w-        c:\windows\system32\nvd3dumx.dll
2012-12-29 10:34 . 2013-01-20 09:08        12641120        ----a-w-        c:\windows\SysWow64\nvwgf2um.dll
2012-12-29 10:34 . 2013-01-20 09:08        10997176        ----a-w-        c:\windows\system32\drivers\nvlddmkm.sys
2012-12-29 10:34 . 2013-01-20 09:08        9389888        ----a-w-        c:\windows\system32\nvcuda.dll
2012-12-29 10:34 . 2013-01-20 09:08        7931896        ----a-w-        c:\windows\SysWow64\nvcuda.dll
2012-12-29 10:34 . 2013-01-20 09:08        2904504        ----a-w-        c:\windows\system32\nvcuvid.dll
2012-12-29 10:34 . 2013-01-20 09:08        1985976        ----a-w-        c:\windows\SysWow64\nvcuvenc.dll
2012-12-29 10:34 . 2013-01-20 09:08        25256376        ----a-w-        c:\windows\system32\nvcompiler.dll
2012-12-29 10:34 . 2013-01-20 09:08        2344888        ----a-w-        c:\windows\system32\nvcuvenc.dll
2012-12-29 10:34 . 2013-01-20 09:08        17560504        ----a-w-        c:\windows\SysWow64\nvcompiler.dll
2012-12-29 10:34 . 2012-10-10 20:23        1504696        ----a-w-        c:\windows\system32\nvdispgenco64.dll
2012-12-29 10:34 . 2012-03-16 13:13        2504248        ----a-w-        c:\windows\SysWow64\nvapi.dll
2012-12-29 10:34 . 2011-08-14 20:00        1813432        ----a-w-        c:\windows\system32\nvdispco64.dll
2012-12-29 10:34 . 2011-08-14 20:00        15129064        ----a-w-        c:\windows\SysWow64\nvd3dum.dll
2012-12-29 10:34 . 2009-11-16 03:15        15052368        ----a-w-        c:\windows\system32\nvwgf2umx.dll
2012-12-29 10:34 . 2009-11-16 03:15        2824656        ----a-w-        c:\windows\system32\nvapi64.dll
2012-12-29 08:40 . 2010-04-03 16:42        6382008        ----a-w-        c:\windows\system32\nvcpl.dll
2012-12-29 08:40 . 2010-04-03 16:42        3455416        ----a-w-        c:\windows\system32\nvsvc64.dll
2012-12-29 08:40 . 2010-04-03 16:42        884152        ----a-w-        c:\windows\system32\nvvsvc.exe
2012-12-29 08:40 . 2010-04-03 16:42        118712        ----a-w-        c:\windows\system32\nvmctray.dll
2012-12-29 08:40 . 2009-09-19 04:09        63928        ----a-w-        c:\windows\system32\nvshext.dll
2012-12-29 08:40 . 2009-09-19 04:09        2558392        ----a-w-        c:\windows\system32\nvsvcr.dll
2012-12-16 17:11 . 2012-12-22 02:00        46080        ----a-w-        c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-22 02:00        367616        ----a-w-        c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-22 02:00        295424        ----a-w-        c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-22 02:00        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll
2012-12-12 12:57 . 2012-12-12 12:57        293344        ----a-w-        c:\users\Public\iTunesOutlookAddIn.dll
2012-12-12 12:57 . 2012-12-12 12:57        405472        ----a-w-        c:\users\Public\iTunesAdmin.dll
2012-12-12 12:57 . 2012-12-12 12:57        152544        ----a-w-        c:\users\Public\iTunesHelper.exe
2012-12-12 12:57 . 2012-12-12 12:57        148960        ----a-w-        c:\users\Public\iTunesHelper.dll
2012-12-12 12:57 . 2012-12-12 12:57        9789408        ----a-w-        c:\users\Public\iTunes.exe
2012-12-12 12:57 . 2012-12-12 12:57        782840        ----a-w-        c:\users\Public\gnsdk_sdkmanager.dll
2012-12-12 12:57 . 2012-12-12 12:57        3015160        ----a-w-        c:\users\Public\gnsdk_dsp.dll
2012-12-12 12:57 . 2012-12-12 12:57        269304        ----a-w-        c:\users\Public\gnsdk_submit.dll
2012-12-12 12:57 . 2012-12-12 12:57        22747616        ----a-w-        c:\users\Public\iTunes.dll
2012-12-12 12:57 . 2012-12-12 12:57        226296        ----a-w-        c:\users\Public\gnsdk_musicid.dll
2012-12-07 13:20 . 2013-01-09 22:09        441856        ----a-w-        c:\windows\system32\Wpc.dll
2012-12-07 13:15 . 2013-01-09 22:09        2746368        ----a-w-        c:\windows\system32\gameux.dll
2012-12-07 12:26 . 2013-01-09 22:09        308736        ----a-w-        c:\windows\SysWow64\Wpc.dll
2012-12-07 12:20 . 2013-01-09 22:09        2576384        ----a-w-        c:\windows\SysWow64\gameux.dll
2006-05-03 10:06        163328        --sha-w-        c:\windows\SysWOW64\flvDX.dll
2007-02-21 11:47        31232        --sha-w-        c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30        216064        --sha-w-        c:\windows\SysWOW64\nbDX.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}]
2011-12-02 17:44        2735200        ----a-w-        c:\program files (x86)\ZoneAlarm-Sicherheit\tbZon1.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}"= "c:\program files (x86)\ZoneAlarm-Sicherheit\tbZon1.dll" [2011-12-02 2735200]
.
[HKEY_CLASSES_ROOT\clsid\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-09-10 13:41        120104        ----a-w-        c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify"="c:\users\Alexander\AppData\Roaming\Spotify\Spotify.exe" [2013-01-30 7880664]
"Spotify Web Helper"="c:\users\Alexander\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-01-30 1199576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-08-12 261888]
"snpstd3"="c:\windows\vsnpstd3.exe" [2007-05-11 835584]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [2009-04-25 360448]
"AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-08-08 348664]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
c:\users\Theresa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\users\Alexander\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [N/A]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\guard32.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys [2009-01-29 6144]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2013-01-28 14448]
R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys [2012-06-11 22016]
R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys [2012-01-25 9728]
R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys [2012-06-08 27136]
R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys [2011-11-08 11776]
R3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 115240]
R3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 19496]
R3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 158760]
R3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 137256]
R3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 34344]
R3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 136744]
R3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 151592]
R3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\DRIVERS\s0017bus.sys [2008-10-21 113704]
R3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0017mdfl.sys [2008-10-21 19496]
R3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0017mdm.sys [2008-10-21 152616]
R3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0017mgmt.sys [2008-10-21 133160]
R3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\system32\DRIVERS\s0017nd5.sys [2008-10-21 34856]
R3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0017obex.sys [2008-10-21 128552]
R3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\DRIVERS\s0017unic.sys [2008-10-21 145960]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]
S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys [2011-12-01 72240]
S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys [2011-12-01 15920]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2011-12-15 27760]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2012-11-07 584056]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2012-11-07 38144]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-02 22576]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-02 20016]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-02 60464]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-08 86224]
S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2009-09-14 166400]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2009-09-14 128512]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-14 398184]
S2 Motorola Device Manager;Motorola Device Manager Service;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2012-10-23 120728]
S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-09-10 305448]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-08-12 62208]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [2012-11-27 479840]
S2 PST Service;PST Service;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [2011-09-02 65657]
S2 StarMoney 8.0 OnlineUpdate;StarMoney 8.0 OnlineUpdate;c:\program files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [2012-12-21 699680]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
nosGetPlusHelper        REG_MULTI_SZ          nosGetPlusHelper
hpdevmgmt        REG_MULTI_SZ          hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2013-02-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-28 15:31]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-20 14:07]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-20 14:07]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1001Core.job
- c:\users\Sixpack\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-07 14:37]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1001UA.job
- c:\users\Sixpack\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-07 14:37]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1005Core.job
- c:\users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-24 20:16]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1005UA.job
- c:\users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-24 20:16]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1006Core.job
- c:\users\Alexander\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-21 05:51]
.
2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1006UA.job
- c:\users\Alexander\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-21 05:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-09-10 13:44        137512        ----a-w-        c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-20 7981088]
"snpstd3"="c:\windows\vsnpstd3.exe" [2007-05-11 835584]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-11-07 9577680]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdcBase.exe" [2007-05-31 660360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\guard64.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{5A4F0A5F-8EA0-44EA-AF9A-AB6E3FBD2D6E}: NameServer = 8.26.56.26,156.154.70.22
FF - ProfilePath - c:\users\Alexander\AppData\Roaming\Mozilla\Firefox\Profiles\bstkotle.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-RfxSrvTray - d:\tobit radio.fx\Client\rfx-tray.exe
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKCU-Run-swg - c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Wow6432Node-HKCU-Run-Sony Ericsson PC Suite - c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
Toolbar-Locked - (no file)
HKLM-Run-ISW - c:\program files\CheckPoint\ZAForceField\ForceField.exe
AddRemove-BrowserCompanion - c:\program files (x86)\BrowserCompanion\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1006\Software\SecuROM\License information*]
"datasecu"=hex:56,a0,9b,a9,c0,97,60,72,be,b2,97,6d,7e,89,30,36,76,4b,49,f8,92,
  91,32,ac,3a,d8,ea,af,56,41,e6,70,73,79,b1,34,c6,94,c9,b3,b7,39,8c,54,00,a2,\
"rkeysecu"=hex:d5,28,96,48,b0,b1,f5,85,2e,d4,f3,8f,40,4f,ac,26
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-02-25  18:57:49
ComboFix-quarantined-files.txt  2013-02-25 17:57
.
Vor Suchlauf: 18 Verzeichnis(se), 210.344.255.488 Bytes frei
Nach Suchlauf: 29 Verzeichnis(se), 220.446.658.560 Bytes frei
.
- - End Of File - - C10B84FD7882F2669C8BF3436CC48D1C

markusg 25.02.2013 19:46
Hi,
malwarebytes:
Downloade Dir bitte Malwarebytes
  • Installiere
    das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche
    nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet
    ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste
    das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.

frappuccino 26.02.2013 06:52
Hallo,
Sollte alles geklappt haben :)
Und dann einmal das Logfile:
Code:
Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.02.25.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Alexander :: SIXPACK-PC [Administrator]

25.02.2013 19:53:17
mbam-log-2013-02-25 (19-53-17).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 1262586
Laufzeit: 4 Stunde(n), 20 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 7
C:\Users\Christoph\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Theresa\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Theresa\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 50
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\fix2.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\fix3.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\fix4.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\fix5.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\fixJQ1_83.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\icon.png (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar183.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\lock.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\witapi.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\witmain.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\wittoolbar.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\witwidgetapi.js (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\24779e9d2de93d13d7e07b527a1684d4 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\24779e9d2de93d13d7e07b527a1684d4_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\2a86ac4f3322238b4f27d14a09839275 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\2a86ac4f3322238b4f27d14a09839275_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\3b6b74d5a92c729ce36a9d055d3db8e9 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\3b6b74d5a92c729ce36a9d055d3db8e9_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\6ff6ea009817b27df633b37777d528cd (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\6ff6ea009817b27df633b37777d528cd_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\72891ec935a3d247f2da6562ef29a005 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\72891ec935a3d247f2da6562ef29a005_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\8a8dc36effa0a0300d6fb1a383936a49 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\8a8dc36effa0a0300d6fb1a383936a49_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\a38dbdd1af07f4236d43e8fd995f57a6 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\a38dbdd1af07f4236d43e8fd995f57a6_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\a4cc6ab573e4a5fee2a418e22d3c14dc (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\a4cc6ab573e4a5fee2a418e22d3c14dc_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\a7e0abb80dabcdbb6dbaec920aa126a0 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\a7e0abb80dabcdbb6dbaec920aa126a0_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\bf73732e1f0b76bac435293ba3880579 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\bf73732e1f0b76bac435293ba3880579_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\d89bfd841403290d610bcf662008b443 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\d89bfd841403290d610bcf662008b443_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271 (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sixpack\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f_expire (PUP.Blabbers) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

markusg 26.02.2013 16:02
Hi,

lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

frappuccino 26.02.2013 21:06
So sollte alle Programme erwischt haben :)
Also dann hier die Datei:
Code:
7-Zip 9.20                28.11.2011        --> notwendig       
ABBYY FineReader 9.0 Sprint        ABBYY        24.03.2011                9.01.513.58212  --> unbekannt
Acer Backup Manager        NewTech Infosystems        16.10.2009        226MB        2.0.2.19  --> unbekannt
Acer eRecovery Management        Acer Incorporated        16.10.2009                4.05.3005 --> unbekannt
Acer GameZone Console        Oberon Media, Inc.        16.10.2009                5.1.0.2  --> notwendig
Acer Registration        Acer Incorporated        10.10.2006                1.02.3006  --> unbekannt
Acer ScreenSaver        Acer Incorporated        10.10.2006                1.2.0812 --> unbekannt
Acer Updater        Acer Incorporated        16.10.2009                1.01.3017 --> unbekannt
Acrobat.com        Adobe Systems Incorporated        16.10.2009        1,60MB        1.6.65 -->notwendig
Adobe AIR        Adobe Systems Incorporated        28.03.2012                3.1.0.4880 --> notwendig
Adobe Community Help        Adobe Systems Incorporated.        28.03.2012                3.4.980 --> unnötig
Adobe Creative Suite 2                10.01.2013                --> notwendig
Adobe Download Assistant        Adobe Systems Incorporated        27.03.2012                1.0.6 --> unnötig
Adobe Download Manager        NOS Microsystems Ltd.        17.09.2010                1.6.2.90 -->unnötig
Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        09.02.2013        6,00MB        11.5.502.149 -->notwendig
Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        23.02.2013        6,00MB        11.6.602.168 -->notwendig
Adobe Media Player        Adobe Systems Incorporated        17.08.2010                1.8 --> unbekannt
Adobe Reader X (10.1.5) - Deutsch        Adobe Systems Incorporated        09.01.2013        122MB        10.1.5 -->notwendig
Adobe Shockwave Player 11.6        Adobe Systems, Inc.        21.11.2012                11.6.8.638 -->notwendig
Adobe Story        Adobe Systems Incorporated        28.03.2012                1.0.571 --> unnötig
Adobe SVG Viewer 3.0        Adobe Systems, Inc.        10.01.2013                3.0 --> unbekannt
Alice Greenfingers        Oberon Media        10.10.2006        -->notwendig       
Amazonia        Oberon Media        10.10.2006                -->notwendig
Apple Application Support        Apple Inc.        08.01.2013        64,9MB        2.3.2 -->unbekannt
Apple Mobile Device Support        Apple Inc.        08.01.2013        25,1MB        6.0.1.3 -->unbekannt
Apple Software Update        Apple Inc.        18.08.2011        2,38MB        2.1.3.127 -->notwendig
Avanquest update        Avanquest Software        31.08.2011                1.29 -->unbekannt
Avira Free Antivirus        Avira        15.11.2012        108MB        12.1.9.1236 -->notwendig
Bandicam        Bandisoft.com        06.01.2013        19,5MB        1.8.5.303 -->unnötig
Bandisoft MPEG-1 Decoder        Bandisoft.com        06.01.2013        -->unnötig       
bcTester 4.8 (de)        QS QualitySoft GmbH        07.07.2010        18,1MB        1.0.0 -->unnötig
Bonjour        Apple Inc.        12.10.2011        1,46MB        3.0.0.10 -->unbekannt
BrowserCompanion                20.08.2012 -->unnötig               
CCleaner        Piriform        25.02.2013                3.28 -->notwendig
Chicken Invaders 2        Oberon Media        10.10.2006        -->notwendig       
COMODO Internet Security        COMODO Security Solutions Inc.        14.07.2011        135MB        5.5.64714.1382 -->notwendig
COMODO Internet Security        COMODO Security Solutions Inc.        14.07.2011                5.5.64714.1382 -->notwendig
Compatibility Pack für 2007 Office System        Microsoft Corporation        09.01.2013        218MB        12.0.6612.1000 -->unbekannt
ContentSAFER for Wizmax                10.10.2006 -->unbekannt               
Dairy Dash        Oberon Media        10.10.2006 -->notwendig               
Debugging Tools for Windows (x64)        Microsoft Corporation        26.01.2011        35,9MB        6.11.1.404 -->unnötig
Dream Day First Home        Oberon Media        10.10.2006        -->notwendig       
DxO Optics Pro 5.3.5        DXO Labs        09.12.2011        157MB        5.3.5 -->unnötig
DynaGeo 3.5d        Roland Mechling        16.02.2011        -->notwendig
eBay Worldwide        OEM        20.04.2010        100KB        2.1.0901 -->unnötig
ElsterFormular        Landesfinanzdirektion Thüringen        07.01.2013        286MB        13.4.1.10296 -->notwendig
EmoDio        SAMSUNG        21.04.2010        7,57MB        1.0 -->notwendig
EPSON Scan        Seiko Epson Corporation        24.03.2011 -->notwendig               
EPSON SX420W Series Handbuch                24.03.2011 -->unnötig               
EPSON SX420W Series Netzwerk-Handbuch                24.03.2011 -->unnötig               
EPSON SX420W Series Printer Uninstall        SEIKO EPSON Corporation        24.03.2011 -->notwendig               
EpsonNet Setup 3.2        SEIKO EPSON CORPORATION        24.03.2011                3.2a -->notwendig
eSobi v2        esobi Inc.        16.10.2009        20,4MB        2.0.4.000274 -->unbekannt
Farm Frenzy 2        Oberon Media        10.10.2006 -->notwendig               
First Class Flurry        Oberon Media        10.10.2006 -->notwendig               
flatster        flatster GmbH        11.12.2010                1.5 -->notwendig
flatster Recorder        flatster GmbH        07.01.2012        7,86MB        2.0 -->notwendig
GIMP 2.6.11        The GIMP Team        29.02.2012        107MB        2.6.11 -->notwendig
Google Chrome        Google Inc.        25.08.2010                25.0.1364.97 -->notwendig
Google Earth        Google        20.11.2011        92,7MB        6.1.0.5001 -->unnötig
Granny In Paradise        Oberon Media        10.10.2006 -->notwendig               
Heroes of Hellas        Oberon Media        10.10.2006 -->notwendig               
Hotkey Utility        Acer Incorporated        10.10.2006                1.00.3004 -->unbekannt
HP Imaging Device Functions 13.0        HP        05.11.2010                13.0 -->unnötig
HP Photosmart Essential 3.5        HP        05.11.2010                3.5 -->unnötig
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B        HP        05.11.2010        13.0 -->unnötig
HP Smart Web Printing 4.51        HP        05.11.2010                4.51 -->unnötig
HP Solution Center 13.0        HP        05.11.2010                13.0 -->unnötig
HP Update        Hewlett-Packard        05.11.2010        3,72MB        4.000.011.006 -->unnötig
iClone 3DXchange v2.0        Reallusion        22.05.2010                2.0.1614.1 -->notwendig
iClone v4.2 Standard        Reallusion Inc.        02.07.2010                4.2.1718.1 -->notwendig
Identity Card        Acer Incorporated        10.10.2006                1.00.3002 -->unbekannt
iTunes        Apple Inc.        08.01.2013        191MB        11.0.1.12 -->notwendig
Java 7 Update 15        Oracle        24.02.2013        129MB        7.0.150 -->notwendig
Java(TM) 6 Update 26 (64-bit)        Oracle        06.07.2011        91,6MB        6.0.260 -->unbekannt
Java(TM) SE Development Kit 6 Update 26 (64-bit)        Oracle        06.07.2011        147MB        1.6.0.260 -->unnötig
JavaFX 2.1.1        Oracle Corporation        06.07.2012        20,8MB        2.1.1 -->unbekannt
Lazarus 1.0                10.09.2012        745MB        1.0 -->notwendig
Lidl-Fotos                15.06.2010                -->unnötig
Malwarebytes Anti-Malware Version 1.70.0.1100        Malwarebytes Corporation        23.02.2013        18,4MB        1.70.0.1100 -->notwendig
Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        26.06.2010        38,8MB        4.0.30319 -->notwendig
Microsoft Office File Validation Add-In        Microsoft Corporation        15.09.2011        7,95MB        14.0.5130.5003 -->unbekannt
Microsoft Office Language Pack 2007 - German/Deutsch        Microsoft Corporation        16.03.2012                12.0.6612.1000 -->notwendig
Microsoft Office Live Add-in 1.5        Microsoft Corporation        13.05.2012        508KB        2.0.4024.1 -->unbekannt
Microsoft Office PowerPoint Viewer 2007 (German)        Microsoft Corporation        09.01.2013        47,0MB        12.0.6612.1000 -->notwendig
Microsoft Office Professional Edition 2003        Microsoft Corporation        13.02.2013        1,47GB        11.0.8173.0 -->notwendig
Microsoft Office Suite Activation Assistant        Microsoft Corporation        16.10.2009        8,36MB        2.9 -->unbekannt
Microsoft Silverlight        Microsoft Corporation        24.05.2012        100MB        5.1.10411.0 -->notwendig
Microsoft SQL Server 2005 Compact Edition [ENU]        Microsoft Corporation        10.10.2006        1,72MB        3.1.0000 -->unbekannt
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        25.01.2012        250KB        8.0.50727.4053 -->unbekannt
Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        16.06.2011        300KB        8.0.59193 -->unbekannt
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148        Microsoft Corporation        23.04.2010        212KB        9.0.30729.4148 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570        Microsoft Corporation        24.04.2011        790KB        9.0.30729.5570 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        24.04.2011        598KB        9.0.30729.5570 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022        Microsoft Corporation        21.04.2010        2,52MB        9.0.21022 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729        Microsoft Corporation        26.08.2012        242KB        9.0.30729 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148        Microsoft Corporation        02.07.2010        782KB        9.0.30729.4148 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161        Microsoft Corporation        16.06.2011        788KB        9.0.30729.6161 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218        Microsoft Corporation        18.02.2011        232KB        9.0.21022.218 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729        Microsoft Corporation        26.08.2012        230KB        9.0.30729 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        15.09.2010        240KB        9.0.30729 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        02.07.2010        590KB        9.0.30729.4148 -->unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        16.06.2011        600KB        9.0.30729.6161 -->unbekannt
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219        Microsoft Corporation        05.03.2012        13,8MB        10.0.40219 -->unbekannt
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219        Microsoft Corporation        11.02.2012        12,2MB        10.0.40219 -->unbekannt
Microsoft Windows SDK for Windows 7 (7.1)        Microsoft Corporation        26.01.2011                7.1.7600.0.30514 -->unbekannt
Microsoft Works        Microsoft Corporation        11.10.2012        1,34GB        9.7.0621 -->unbekannt
Minecraft Gift Codes        Minecraftcode        13.09.2012                Final -->unnötig
MobileMe Control Panel        Apple Inc.        04.10.2011        11,3MB        3.1.6.0 -->unbekannt
Motorola Device Manager        Motorola Mobility        29.11.2012                2.3.4 -->notwendig
Mozilla Firefox 19.0 (x86 de)        Mozilla        21.02.2013        45,2MB        19.0 -->notwendig
Mozilla Maintenance Service        Mozilla        21.02.2013        330KB        19.0 -->notwendig
MSU Screen Capture Lossless Codec v1.2 (Remove Only)                24.11.2011        -->unbekannt       
MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        21.04.2010        1,27MB        4.20.9870.0 -->unbekannt
MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        21.04.2010        1,33MB        4.20.9876.0 -->unbekannt
MSXML 4.0 SP3 Parser        Microsoft Corporation        17.09.2011        1,47MB        4.30.2100.0 -->unbekannt
MSXML 4.0 SP3 Parser (KB2721691)        Microsoft Corporation        12.07.2012        1,53MB        4.30.2114.0 -->unbekannt
MSXML 4.0 SP3 Parser (KB2758694)        Microsoft Corporation        09.01.2013        1,54MB        4.30.2117.0 -->unbekannt
MSXML 4.0 SP3 Parser (KB973685)        Microsoft Corporation        18.09.2011        1,53MB        4.30.2107.0 -->unbekannt
MyWinLocker        Egis Technology Inc.        16.10.2009        47,9MB        3.1.76.0 -->unnötig
Need for Speed(TM) Hot Pursuit        Electronic Arts        25.12.2010        7,73GB        1.0.0.0 -->notwendig
Need for Speed™ The Run        Electronic Arts        10.05.2012                1.0.0.0 -->notwendig
Nero 9 Essentials        Nero AG        16.10.2009 -->notwendig               
Nero Backup Drivers        Nero AG        03.03.2012        94,0KB        1.0.11100.8.0 -->notwendig
NVIDIA Display Control Panel        NVIDIA Corporation        23.07.2010                6.14.11.9745 -->notwendig
NVIDIA Drivers        NVIDIA Corporation        19.01.2013        68,9MB        1.3 -->notwendig
NVIDIA ForceWare Network Access Manager                10.10.2006        -->notwendig       
NVIDIA Grafiktreiber 310.90        NVIDIA Corporation        20.01.2013                310.90 -->notwendig
NVIDIA HD-Audiotreiber 1.3.18.0        NVIDIA Corporation        20.01.2013                1.3.18.0 -->notwendig
NVIDIA PhysX-Systemsoftware 9.12.1031        NVIDIA Corporation        20.01.2013                9.12.1031 -->notwendig
NVIDIA Update 1.11.3        NVIDIA Corporation        20.01.2013                1.11.3 -->notwendig
OCR Software by I.R.I.S. 13.0        HP        05.11.2010                13.0 -->ubnbekannt
OpenOffice.org 3.2        OpenOffice.org        18.02.2011        364MB        3.2.9502 -->notwendig
Origin        Electronic Arts, Inc.        10.05.2012                8.5.2.23 -->notwendig
Paint.NET v3.5.10        dotPDN LLC        18.12.2011        10,6MB        3.60.0 -->notwendig
Pando Media Booster        Pando Networks Inc.        09.08.2012        5,46MB        2.6.0.8 -->unbekannt
PDF24 Creator 4.9.0        PDF24.org        14.11.2012        33,9MB -->notwendig       
Perfect Effects 3 Free        onOne Software        26.08.2012                3.0.2 -->unbekannt
Phase 5 HTML-Editor        Systemberatung Schommer        06.07.2011        3,72MB        5.6.2.3 -->unnötig
phase-6 2.1.2.3a        phase-6        29.08.2011                2.1.2.3a -->notwendig
phase6_17        phase6        14.01.2011        13,4MB        1.70.0000 -->notwendig
Photo Dose                18.06.2010 -->unbekannt               
PhotoScape                31.05.2011 -->notwendig               
Pixum Fotobuch                24.03.2012 -->unnötig               
PlayMemories Home        Sony Corporation        22.12.2012                7.0.00.11271 -->notwendig
QuickTime        Apple Inc.        08.01.2013        73,1MB        7.73.80.64 -->notwendig
Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        16.10.2009                6.0.1.5898 -->notwendig
Recuva        Piriform        13.02.2012                1.42 -->unbekannt
Runes of Magic        Frogster America Inc.        24.09.2011                4.0.0.2360 -->notwendig
Shop for HP Supplies        HP        05.11.2010                13.0 -->unnötig
Skype™ 6.1        Skype Technologies S.A.        28.01.2013        21,1MB        6.1.129 -->notwendig
Sony Ericsson Update Engine        Sony Ericsson Communications AB        28.01.2013                2.13.1.38 -->notwendig
Sony Image Data Suite        Sony Corporation        25.12.2011                3.2.00.19080 -->notwendig
Sony PC Companion 2.10.136        Sony        29.01.2013        18,3MB        2.10.136 -->notwendig
Sony RAW Driver        Sony Corporation        21.08.2012                2.0.00.08130 -->notwendig
Spotify        Spotify AB        30.01.2013                0.8.5.1333.g822e0de8 -->notwendig
StarMoney 8.0 S-Edition        Star Finanz GmbH        25.03.2011                8.0 -->notwendig
sv.net        ITSG GmbH        07.01.2013                13.0 -->notwendig
Texte, Themen und Strukturen interaktiv - Klausurentraining        Cornelsen Verlag        02.06.2012                23584 -->notwendig
TI Connect 1.6        Texas Instruments Incorporated        15.01.2013        27,3MB        1.6 -->notwendig
Welcome Center        Acer Incorporated        10.10.2006                1.00.3008 -->unbekannt
WHQL_PC Camera-168        Sonix        03.07.2010                5.18.1209.107 -->unbekannt
Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB  (06/11/2009 1.0.0.0)        Texas Instruments Inc.        15.01.2013                06/11/2009 1.0.0.0 -->notwendig
Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB  (09/02/2009 1.0.0.1)        Texas Instruments Inc.        15.01.2013                09/02/2009 1.0.0.1 -->notwendig
Windows Live Anmelde-Assistent        Microsoft Corporation        10.10.2006        1,93MB        5.000.818.5 -->notwendig
Windows Live Essentials        Microsoft Corporation        10.10.2006                14.0.8089.0726 -->notwendig
Windows Live Sync        Microsoft Corporation        10.10.2006        2,79MB        14.0.8089.726 -->notwendig
Windows Live-Uploadtool        Microsoft Corporation        10.10.2006        224KB        14.0.8014.1029 -->notwendig
Windows Mobile-Gerätecenter                09.08.2011 -->notwendig               
WinRAR 4.20 (32-Bit)        win.rar GmbH        20.08.2012                4.20.0 -->notwendig
WinZip 15.0        WinZip Computing, S.L.        18.09.2011        36,4MB        15.0.9411 -->unnötig
YouMove        S.A.D.        26.01.2011        18,6MB        1.1.0000 -->notwendig
ZoneAlarm-Sicherheit Toolbar                27.09.2010 -->unnötig

markusg 26.02.2013 21:44
deinstaliere:
ABBYY
Adobe Community
Adobe Download : beide
Adobe Media

Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
Sicherheit (erweitert)
Erweiterte Sicherheit anhaken
und alle Dateien auswählen.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok



deinstaliere:
Adobe Story
Adobe SVG
Bandicam
Bandisoft
bcTester
BrowserCompanion
COMODO : würd ich drauf verzichten, die Meldungen und vernünftigen Konfigurationen des Programms sind, ohne dir zu nahe treten zu wollen, für die meisten Nutzer eher undurchsichtig, wenns dir da allein um die Firewall geht, hat Windows bereits alles
ContentSAFER
Debugging
DxO
eBay
eSobi
Google Earth
HP : alle
Java(TM) : alle
Lidl
Minecraft
MSU
MyWinLocker
Perfect Effects
Photo Dose
Pixum
Recuva
Shop
WinZip
ZoneAlarm

Öffne CCleaner, analysieren, starten, PC neustarten.
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

frappuccino 27.02.2013 07:04
Habe mich vorerst für Comodo entschieden. ''Shop'', ''BrowserCompanion'' und ''ContentSAFER'' konnte ich nicht deinstallieren. Hier ist der Log von AdwCleaner:
Code:
# AdwCleaner v2.113 - Datei am 27/02/2013 um 06:47:15 erstellt
# Aktualisiert am 23/02/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Alexander - SIXPACK-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Alexander\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\searchplugins\11-suche.xml
Datei Gelöscht : C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\searchplugins\Conduit.xml
Datei Gelöscht : C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\searchplugins\Plusnetwork.xml
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Alexander\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Alexander\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Christoph\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Christoph\AppData\Roaming\Iminent
Ordner Gelöscht : C:\Users\Katharina?\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Sixpack\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Sixpack\AppData\Roaming\BrowserCompanion
Ordner Gelöscht : C:\Users\Sixpack\AppData\Roaming\Iminent
Ordner Gelöscht : C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\Conduit
Ordner Gelöscht : C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\ConduitCommon
Ordner Gelöscht : C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\CT2613550
Ordner Gelöscht : C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\extensions\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}
Ordner Gelöscht : C:\Users\Theresa\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Theresa\AppData\LocalLow\Conduit

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2613550
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16464

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v19.0 (de)

Datei : C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\prefs.js

C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\user.js ... Gelöscht !

Gelöscht : user_pref("CT2613550..clientLogIsEnabled", false);
Gelöscht : user_pref("CT2613550..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Gelöscht : user_pref("CT2613550..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Gelöscht : user_pref("CT2613550.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Gelöscht : user_pref("CT2613550.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Gelöscht : user_pref("CT2613550.AppTrackingLastCheckTime", "Wed Feb 13 2013 13:32:02 GMT+0100");
Gelöscht : user_pref("CT2613550.BrowserCompStateIsOpen_130040893173399876", true);
Gelöscht : user_pref("CT2613550.CTID", "CT2613550");
Gelöscht : user_pref("CT2613550.CommunitiesChangesLastCheckTime", "0");
Gelöscht : user_pref("CT2613550.CurrentServerDate", "26-2-2013");
Gelöscht : user_pref("CT2613550.DialogsAlignMode", "LTR");
Gelöscht : user_pref("CT2613550.DialogsGetterLastCheckTime", "Mon Feb 25 2013 09:27:59 GMT+0100");
Gelöscht : user_pref("CT2613550.DownloadReferralCookieData", "");
Gelöscht : user_pref("CT2613550.EMailNotifierPollDate", "Tue Feb 26 2013 12:51:05 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedLastCount3082739963941193807", 850);
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602533", "Tue Mar 22 2011 20:29:44 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602539", "Tue Mar 22 2011 20:29:44 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602545", "Tue Mar 22 2011 20:29:44 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602551", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602557", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602563", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602569", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602575", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602581", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602587", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602593", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602599", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602605", "Tue Mar 22 2011 20:29:45 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602611", "Tue Mar 22 2011 20:29:46 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602617", "Tue Mar 22 2011 20:29:46 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602623", "Tue Mar 22 2011 20:29:46 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate129254982599602629", "Tue Mar 22 2011 20:29:46 GMT+0100");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255190875796966", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255191286404846", "Thu Jun 30 2011 12:34:53 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255191690696803", "Thu Jun 30 2011 12:34:51 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255191830767423", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255192204641884", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255192330261614", "Thu Jun 30 2011 12:34:51 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255192609293799", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255192844976705", "Thu Jun 30 2011 12:34:51 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255193025486845", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255193127848905", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255193189289837", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255193256322449", "Thu Jun 30 2011 12:34:51 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255193310202497", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255193760634970", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255193813312257", "Thu Jun 30 2011 12:34:53 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255194862513855", "Thu Jun 30 2011 12:34:51 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedPollDate7861255194875474195", "Thu Jun 30 2011 12:34:52 GMT+0200");
Gelöscht : user_pref("CT2613550.FeedTTL129254982599602545", 5);
Gelöscht : user_pref("CT2613550.FeedTTL129254982599602551", 5);
Gelöscht : user_pref("CT2613550.FeedTTL129254982599602575", 2);
Gelöscht : user_pref("CT2613550.FeedTTL129254982599602605", 5);
Gelöscht : user_pref("CT2613550.FeedTTL129254982599602617", 30);
Gelöscht : user_pref("CT2613550.FeedTTL7861255190875796966", 5);
Gelöscht : user_pref("CT2613550.FeedTTL7861255191286404846", 2);
Gelöscht : user_pref("CT2613550.FeedTTL7861255191830767423", 30);
Gelöscht : user_pref("CT2613550.FeedTTL7861255192609293799", 30);
Gelöscht : user_pref("CT2613550.FeedTTL7861255192844976705", 5);
Gelöscht : user_pref("CT2613550.FeedTTL7861255193256322449", 5);
Gelöscht : user_pref("CT2613550.FeedTTL7861255193310202497", 2);
Gelöscht : user_pref("CT2613550.FirstServerDate", "17-9-2010");
Gelöscht : user_pref("CT2613550.FirstTime", true);
Gelöscht : user_pref("CT2613550.FirstTimeFF3", true);
Gelöscht : user_pref("CT2613550.FirstTimeSettingsDone", true);
Gelöscht : user_pref("CT2613550.FixPageNotFoundErrors", true);
Gelöscht : user_pref("CT2613550.GroupingInvalidateCache", false);
Gelöscht : user_pref("CT2613550.GroupingLastCheckTime", "0");
Gelöscht : user_pref("CT2613550.GroupingLastServerUpdateTime", "0");
Gelöscht : user_pref("CT2613550.GroupingServerCheckInterval", 1440);
Gelöscht : user_pref("CT2613550.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Gelöscht : user_pref("CT2613550.HasUserGlobalKeys", true);
Gelöscht : user_pref("CT2613550.HomePageProtectorEnabled", false);
Gelöscht : user_pref("CT2613550.Initialize", true);
Gelöscht : user_pref("CT2613550.InitializeCommonPrefs", true);
Gelöscht : user_pref("CT2613550.InstallationAndCookieDataSentCount", 3);
Gelöscht : user_pref("CT2613550.InstalledDate", "Fri Sep 17 2010 22:32:27 GMT+0200");
Gelöscht : user_pref("CT2613550.InvalidateCache", false);
Gelöscht : user_pref("CT2613550.IsAlertDBUpdated", true);
Gelöscht : user_pref("CT2613550.IsGrouping", false);
Gelöscht : user_pref("CT2613550.IsMulticommunity", false);
Gelöscht : user_pref("CT2613550.IsOpenThankYouPage", true);
Gelöscht : user_pref("CT2613550.IsOpenUninstallPage", true);
Gelöscht : user_pref("CT2613550.LanguagePackLastCheckTime", "Tue Feb 26 2013 09:34:46 GMT+0100");
Gelöscht : user_pref("CT2613550.LanguagePackReloadIntervalMM", 1440);
Gelöscht : user_pref("CT2613550.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Gelöscht : user_pref("CT2613550.LastLogin_2.7.1.3", "Sun May 01 2011 21:51:10 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.10.0.1", "Wed Apr 18 2012 09:25:08 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.12.0.7", "Wed Apr 25 2012 10:57:42 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.12.2.3", "Wed May 30 2012 12:47:26 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.13.0.6", "Mon Jul 16 2012 09:09:25 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.14.1.0", "Wed Aug 22 2012 10:12:01 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.15.1.0", "Sat Nov 10 2012 16:32:13 GMT+0100");
Gelöscht : user_pref("CT2613550.LastLogin_3.16.0.3", "Tue Feb 12 2013 06:03:04 GMT+0100");
Gelöscht : user_pref("CT2613550.LastLogin_3.18.0.7", "Tue Feb 26 2013 09:34:46 GMT+0100");
Gelöscht : user_pref("CT2613550.LastLogin_3.3.3.2", "Sat Jun 25 2011 00:34:29 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.5.0.12", "Tue Aug 16 2011 11:36:50 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.6.0.10", "Tue Sep 27 2011 13:34:15 GMT+0200");
Gelöscht : user_pref("CT2613550.LastLogin_3.7.0.6", "Mon Nov 07 2011 17:18:18 GMT+0100");
Gelöscht : user_pref("CT2613550.LastLogin_3.8.0.8", "Tue Dec 06 2011 09:36:34 GMT+0100");
Gelöscht : user_pref("CT2613550.LastLogin_3.8.1.0", "Mon Jan 16 2012 07:56:34 GMT+0100");
Gelöscht : user_pref("CT2613550.LastLogin_3.9.0.3", "Thu Mar 08 2012 11:09:24 GMT+0100");
Gelöscht : user_pref("CT2613550.LatestVersion", "3.18.0.7");
Gelöscht : user_pref("CT2613550.Locale", "de-de");
Gelöscht : user_pref("CT2613550.LoginCache", 4);
Gelöscht : user_pref("CT2613550.MCDetectTooltipHeight", "83");
Gelöscht : user_pref("CT2613550.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Gelöscht : user_pref("CT2613550.MCDetectTooltipWidth", "295");
Gelöscht : user_pref("CT2613550.MyStuffEnabledAtInstallation", true);
Gelöscht : user_pref("CT2613550.RadioIsPodcast", false);
Gelöscht : user_pref("CT2613550.RadioLastCheckTime", "Tue Feb 26 2013 09:34:46 GMT+0100");
Gelöscht : user_pref("CT2613550.RadioLastUpdateIPServer", "3");
Gelöscht : user_pref("CT2613550.RadioLastUpdateServer", "0");
Gelöscht : user_pref("CT2613550.RadioMediaID", "8497");
Gelöscht : user_pref("CT2613550.RadioMediaType", "Media Player");
Gelöscht : user_pref("CT2613550.RadioMenuSelectedID", "EBRadioMenu_CT2613550_RECENT8497");
Gelöscht : user_pref("CT2613550.RadioShrinked", "expanded");
Gelöscht : user_pref("CT2613550.RadioShrinkedFromSetup", false);
Gelöscht : user_pref("CT2613550.RadioStationName", "Antenne%20Bayern");
Gelöscht : user_pref("CT2613550.RadioStationURL", "hxxp://wms.webradio.antenne.de/");
Gelöscht : user_pref("CT2613550.RadioVolume", "100");
Gelöscht : user_pref("CT2613550.SHRINK_TOOLBAR", 1);
Gelöscht : user_pref("CT2613550.SavedHomepage", "resource:/browserconfig.properties");
Gelöscht : user_pref("CT2613550.SearchBoxWidth", 147);
Gelöscht : user_pref("CT2613550.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Gelöscht : user_pref("CT2613550.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Gelöscht : user_pref("CT2613550.SearchFromAddressBarIsInit", true);
Gelöscht : user_pref("CT2613550.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT261[...]
Gelöscht : user_pref("CT2613550.SearchInNewTabEnabled", true);
Gelöscht : user_pref("CT2613550.SearchInNewTabIntervalMM", 1440);
Gelöscht : user_pref("CT2613550.SearchInNewTabLastCheckTime", "Tue Feb 26 2013 09:34:45 GMT+0100");
Gelöscht : user_pref("CT2613550.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Gelöscht : user_pref("CT2613550.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Gelöscht : user_pref("CT2613550.SearchInNewTabUserEnabled", false);
Gelöscht : user_pref("CT2613550.SearchProtectorEnabled", false);
Gelöscht : user_pref("CT2613550.SearchProtectorToolbarDisabled", false);
Gelöscht : user_pref("CT2613550.ServiceMapLastCheckTime", "Tue Feb 26 2013 09:34:46 GMT+0100");
Gelöscht : user_pref("CT2613550.SettingsCheckIntervalMin", 120);
Gelöscht : user_pref("CT2613550.SettingsLastCheckTime", "Tue Feb 26 2013 11:51:03 GMT+0100");
Gelöscht : user_pref("CT2613550.SettingsLastUpdate", "1361866361");
Gelöscht : user_pref("CT2613550.ThirdPartyComponentsInterval", 504);
Gelöscht : user_pref("CT2613550.ThirdPartyComponentsLastCheck", "Tue Feb 19 2013 10:11:19 GMT+0100");
Gelöscht : user_pref("CT2613550.ThirdPartyComponentsLastUpdate", "1331806000");
Gelöscht : user_pref("CT2613550.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2613550");
Gelöscht : user_pref("CT2613550.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Gelöscht : user_pref("CT2613550.UserID", "UN01803914800489581");
Gelöscht : user_pref("CT2613550.ValidationData_Search", 2);
Gelöscht : user_pref("CT2613550.ValidationData_Toolbar", 2);
Gelöscht : user_pref("CT2613550.WeatherNetwork", "");
Gelöscht : user_pref("CT2613550.WeatherPollDate", "Tue Feb 26 2013 12:51:06 GMT+0100");
Gelöscht : user_pref("CT2613550.WeatherUnit", "C");
Gelöscht : user_pref("CT2613550.alertChannelId", "1006347");
Gelöscht : user_pref("CT2613550.backendstorage.facebook_mode", "32");
Gelöscht : user_pref("CT2613550.backendstorage.facebook_user_locale", "6465");
Gelöscht : user_pref("CT2613550.backendstorage.searchappstate", "33");
Gelöscht : user_pref("CT2613550.backendstorage.searchapptracking", "31");
Gelöscht : user_pref("CT2613550.clientLogIsEnabled", true);
Gelöscht : user_pref("CT2613550.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Gelöscht : user_pref("CT2613550.components.1000082", true);
Gelöscht : user_pref("CT2613550.components.1000234", true);
Gelöscht : user_pref("CT2613550.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Gelöscht : user_pref("CT2613550.globalFirstTimeInfoLastCheckTime", "Fri Feb 22 2013 09:15:06 GMT+0100");
Gelöscht : user_pref("CT2613550.homepageProtectorEnableByLogin", true);
Gelöscht : user_pref("CT2613550.initDone", true);
Gelöscht : user_pref("CT2613550.isAppTrackingManagerOn", false);
Gelöscht : user_pref("CT2613550.myStuffEnabled", true);
Gelöscht : user_pref("CT2613550.myStuffPublihserMinWidth", 400);
Gelöscht : user_pref("CT2613550.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Gelöscht : user_pref("CT2613550.myStuffServiceIntervalMM", 1440);
Gelöscht : user_pref("CT2613550.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Gelöscht : user_pref("CT2613550.oldAppsList", "129171076488700693,129171076488856944,111,129958941963388208,129[...]
Gelöscht : user_pref("CT2613550.revertSettingsEnabled", true);
Gelöscht : user_pref("CT2613550.searchProtectorDialogDelayInSec", 10);
Gelöscht : user_pref("CT2613550.searchProtectorEnableByLogin", true);
Gelöscht : user_pref("CT2613550.testingCtid", "");
Gelöscht : user_pref("CT2613550.toolbarAppMetaDataLastCheckTime", "Tue Feb 26 2013 09:34:46 GMT+0100");
Gelöscht : user_pref("CT2613550.toolbarContextMenuLastCheckTime", "Mon Feb 25 2013 09:38:20 GMT+0100");
Gelöscht : user_pref("CT2613550.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Gelöscht : user_pref("CT2613550.usagesFlag", 2);
Gelöscht : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2613550");
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2613550/CT2613550[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=1006347&fid=1002062", "\"0\[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1006347/1002062/DE", "\"0\"[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2613550", [...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2613550",[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2613550&octid=[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2613550/CT2613550[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/50/261/CT2613550/Images/6340849712463612[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de-de", "\"[...]
Gelöscht : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Sixpack\\AppData\\Roaming\\Mozilla\[...]
Gelöscht : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");
Gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2613550");
Gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2613550");
Gelöscht : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun May 01 2011 23:01:59 GMT+02[...]
Gelöscht : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Gelöscht : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jun 23 2011 08:10:44 GMT+0200");
Gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Gelöscht : user_pref("CommunityToolbar.alert.locale", "en");
Gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Jun 25 2011 00:34:25 GMT+0200");
Gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Gelöscht : user_pref("CommunityToolbar.alert.userId", "{b39fd9f4-d37f-42fe-8d3f-0d6ef0b53720}");
Gelöscht : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Apr 17 2012 09:11:23 GMT+0200");
Gelöscht : user_pref("CommunityToolbar.globalUserId", "67abc85a-1239-4cfb-82ab-d767f6dbe6cc");
Gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Gelöscht : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2613550");
Gelöscht : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Mon Feb 25 2013 09:38:2[...]
Gelöscht : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Gelöscht : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Feb 26 2013 09:34:54 GMT+010[...]
Gelöscht : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Gelöscht : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
Gelöscht : user_pref("CommunityToolbar.notifications.locale", "en");
Gelöscht : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Gelöscht : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Feb 26 2013 09:34:46 GMT+0100");
Gelöscht : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Gelöscht : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Gelöscht : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Gelöscht : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Gelöscht : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Gelöscht : user_pref("CommunityToolbar.notifications.userId", "4d9e3775-1458-49d6-96e0-80e108b9901d");
Gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Gelöscht : user_pref("browser.search.defaultthis.engineName", "ZoneAlarm-Sicherheit Customized Web Search");
Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2613550&Sea[...]
Gelöscht : user_pref("browser.search.order.1", "Ask.com");
Gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "chrome://browser-region/locale/region.propert[...]
Gelöscht : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2613550&q=");

Datei : C:\Users\Katharina?\AppData\Roaming\Mozilla\Firefox\Profiles\64mxucpm.default\prefs.js

Gelöscht : user_pref("browser.search.selectedEngine", "Ask.com");
Gelöscht : user_pref("browser.search.order.1", "Ask.com");
Gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Gelöscht : user_pref("browser.search.defaultenginename", "Ask.com");
Gelöscht : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000027&loca[...]
Gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");

Datei : C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\prefs.js

Gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Gelöscht : user_pref("browser.search.defaultenginename", "Ask.com");
Gelöscht : user_pref("browser.search.order.1", "Ask.com");
Gelöscht : user_pref("browser.search.selectedEngine", "Ask.com");
Gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");
Gelöscht : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000027&loca[...]

Datei : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\prefs.js

Gelöscht : user_pref("browser.search.order.1", "Ask.com");
Gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");

Datei : C:\Users\Alexander\AppData\Roaming\Mozilla\Firefox\Profiles\bstkotle.default\prefs.js

Gelöscht : user_pref("browser.search.order.1", "Ask.com");
Gelöscht : user_pref("browser.search.selectedEngine", "Ask.com");

Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\xs66sib0.default\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v25.0.1364.97

Datei : C:\Users\Sixpack\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

Datei : C:\Users\Katharina?\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

Datei : C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

Datei : C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [38419 octets] - [27/02/2013 06:47:15]

########## EOF - C:\AdwCleaner[S1].txt - [38480 octets] ##########

markusg 27.02.2013 13:32
Hi, wofür brauchst du comodo, schau dir die Logs an, und da siehst du was das Programm alles durchgelassen hast, das ist eine Verschwendung von resourcen.
nicht laufene deinstalationen mit Rewo:
Revo Uninstaller - Download - Filepony
hitmanpro laden:
HitmanPro - Download - Filepony
lizenz, Testlizenz.
Auf scan, nichts löschen, log als xml exportieren und posten, bzw packen und anhängen.

frappuccino 27.02.2013 16:49
NUR ALS FREE VERSION GESCANNT :(
Tun mir leid.

Habe Comodo jetzt deinstalliert.
So das hier sagt HitmanPro:
Code:
HitmanPro 3.7.2.189
www.hitmanpro.com

  Computer name . . . . : SIXPACK-PC
  Windows . . . . . . . : 6.1.1.7601.X64/4
  User name . . . . . . : Sixpack-PC\Alexander
  UAC . . . . . . . . . : Enabled
  License . . . . . . . : Free

  Scan date . . . . . . : 2013-02-27 16:18:06
  Scan mode . . . . . . : Normal
  Scan duration . . . . : 26m 41s
  Disk access mode  . . : Direct disk access (SRB)
  Cloud . . . . . . . . : Internet
  Reboot  . . . . . . . : No

  Threats . . . . . . . : 0
  Traces  . . . . . . . : 240

  Objects scanned . . . : 3.494.120
  Files scanned . . . . : 103.281
  Remnants scanned  . . : 1.422.494 files / 1.968.345 keys

Cookies _____________________________________________________________________

  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad-emea.doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.ad-srv.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adc-serv.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adnet.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.dyntracker.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.main-netz.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.mlnadvertising.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.movad.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.zanox.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adbrite.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adlegend.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads-lb.creative-serving.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.clicmanager.fr
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.creative-serving.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.dk-online.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.gamerpublishing.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.groundspeak.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.myswitzerland.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.newgrafix.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.p161.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.pubmatic.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.unister-gmbh.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.us.e-planning.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver.adtechus.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver1.mokono.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver2.interwall.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adviva.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:apmebf.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:at.atwola.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:c1.atdmt.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:collective-media.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:de.sitestat.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:eas.apm.emediate.eu
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:eas4.emediate.eu
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:emjcd.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:fl01.ct2.comclick.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:googleads.g.doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:guj.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:in.getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:invitemedia.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:kqv.112.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:media6degrees.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:mswmwpapolloprod.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:questionmarket.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:revsci.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.cpmstar.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:sonyeurope.112.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:specificclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:stat.dealtime.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:static.getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:superrtl.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:tacoda.at.atwola.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adform.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.effiliation.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.webtrekk.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:wissende.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ww251.smartadserver.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.emjcd.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.etracker.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:xiti.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:yadro.ru
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:yieldmanager.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:zedo.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:2o7.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.adnet.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.adserver01.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.porta.eol.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.zanox.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:adtech.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:advertising.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:adviva.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:apmebf.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:atdmt.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:casalemedia.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:de.sitestat.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:doubleclick.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:fastclick.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:fl01.ct2.comclick.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:mediaplex.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:msnportal.112.2o7.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:revsci.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:server.cpmstar.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:serving-sys.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:statcounter.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:track.adform.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:track.effiliation.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:tradedoubler.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:us.sitestat.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.360yield.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.dyntracker.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.movad.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.zanox.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:adtech.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:apmebf.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:atdmt.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:doubleclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:fastclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:invitemedia.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:kaspersky.122.2o7.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:mediaplex.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:questionmarket.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:revsci.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ru4.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:serving-sys.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:specificclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:stats.deka.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:track.adform.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:track.effiliation.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:tradedoubler.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:www.etracker.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:www.googleadservices.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:xiti.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:yieldmanager.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.123-template.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.360yield.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.ad-srv.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adc-serv.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adition.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.admitad.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adnet.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adserver01.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.dyntracker.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.mittelbayerische.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.movad.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.profiwin.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.zanox.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adbrite.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.creative-serving.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.dk-online.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.jinkads.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.kure.tv
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.leitmotiv.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.medienhaus.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.meredithads.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.monster.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.pubmatic.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.undertone.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.walnuss.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.adtechus.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.anschlusstor.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.bravado.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.ep-solutions.org
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.itsfogo.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adtech.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:advertising.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:advertising.superweb.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adviva.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:agofev.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:apmebf.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:at.atwola.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:atdmt.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:blau.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:bluestreak.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:c.atdmt.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:casalemedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:clicksor.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:cunda.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:de.sitestat.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:deutschepostag.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:doubleclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:eas4.emediate.eu
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:efeducationfirst.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:emjcd.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:fastclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:fl01.ct2.comclick.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:googleads.g.doubleclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:guj.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:in.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:interclick.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:invitemedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:leads.demandbase.com.re.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:libri.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:mediaplex.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:monstercom.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:msnportal.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:questionmarket.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:realmedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:revsci.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:rotator.adjuggler.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ru4.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:serving-sys.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:sevenoneintermedia.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:smartadserver.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:specificclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:spylog.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:stat.aldi.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:stat.dealtime.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:statcounter.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:static.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tele2de.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:texasinstrument.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tourismnz.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.adform.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.effiliation.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.webtrekk.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.zalando.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tradedoubler.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:weborama.fr
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:wissende.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ww251.smartadserver.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.emjcd.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.etracker.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.googleadservices.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:xiti.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:yadro.ru
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:yieldmanager.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:zedo.com

markusg 27.02.2013 16:52
sieht gut aus
bitte neues otl log

frappuccino 27.02.2013 17:05
schon erledigt.. das sieht (finde ich) nicht so gut aus :/

Code:
HitmanPro 3.7.2.189
www.hitmanpro.com

  Computer name . . . . : SIXPACK-PC
  Windows . . . . . . . : 6.1.1.7601.X64/4
  User name . . . . . . : Sixpack-PC\Alexander
  UAC . . . . . . . . . : Enabled
  License . . . . . . . : Trial (30 days left)

  Scan date . . . . . . : 2013-02-27 16:52:15
  Scan mode . . . . . . : Normal
  Scan duration . . . . : 6m 22s
  Disk access mode  . . : Direct disk access (SRB)
  Cloud . . . . . . . . : Internet
  Reboot  . . . . . . . : No

  Threats . . . . . . . : 0
  Traces  . . . . . . . : 253

  Objects scanned . . . : 3.071.028
  Files scanned . . . . : 103.389
  Remnants scanned  . . : 1.422.560 files / 1.545.079 keys

Potential Unwanted Programs _________________________________________________

  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Blabbers      \ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Blabbers\ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}\ (AskBar)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}\ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}\ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Softonic\ (Softonic)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}\ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}\ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1005\Software\Blabbers\ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}\ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}\ (Blabbers)
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1005\Software\Softonic\ (Softonic)

Cookies _____________________________________________________________________

  C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.googleadservices.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad-emea.doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.ad-srv.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adc-serv.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adnet.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.dyntracker.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.main-netz.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.mlnadvertising.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.movad.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.zanox.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adbrite.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adlegend.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads-lb.creative-serving.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.clicmanager.fr
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.creative-serving.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.dk-online.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.gamerpublishing.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.groundspeak.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.myswitzerland.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.newgrafix.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.p161.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.pubmatic.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.unister-gmbh.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.us.e-planning.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver.adtechus.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver1.mokono.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver2.interwall.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adviva.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:apmebf.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:at.atwola.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:c1.atdmt.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:collective-media.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:de.sitestat.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:eas.apm.emediate.eu
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:eas4.emediate.eu
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:emjcd.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:fl01.ct2.comclick.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:googleads.g.doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:guj.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:in.getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:invitemedia.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:kqv.112.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:media6degrees.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:mswmwpapolloprod.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:questionmarket.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:revsci.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.cpmstar.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:sonyeurope.112.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:specificclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:stat.dealtime.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:static.getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:superrtl.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:tacoda.at.atwola.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adform.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.effiliation.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.webtrekk.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:wissende.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ww251.smartadserver.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.emjcd.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.etracker.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:xiti.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:yadro.ru
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:yieldmanager.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:zedo.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:2o7.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.adnet.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.adserver01.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.porta.eol.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.zanox.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:adtech.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:advertising.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:adviva.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:apmebf.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:atdmt.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:casalemedia.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:de.sitestat.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:doubleclick.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:fastclick.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:fl01.ct2.comclick.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:mediaplex.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:msnportal.112.2o7.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:revsci.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:server.cpmstar.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:serving-sys.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:statcounter.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:track.adform.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:track.effiliation.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:tradedoubler.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:us.sitestat.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.360yield.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.dyntracker.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.movad.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.zanox.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:adtech.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:apmebf.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:atdmt.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:doubleclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:fastclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:invitemedia.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:kaspersky.122.2o7.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:mediaplex.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:questionmarket.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:revsci.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ru4.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:serving-sys.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:specificclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:stats.deka.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:track.adform.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:track.effiliation.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:tradedoubler.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:www.etracker.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:www.googleadservices.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:xiti.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:yieldmanager.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.123-template.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.360yield.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.ad-srv.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adc-serv.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adition.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.admitad.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adnet.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adserver01.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.dyntracker.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.mittelbayerische.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.movad.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.profiwin.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.zanox.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adbrite.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.creative-serving.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.dk-online.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.jinkads.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.kure.tv
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.leitmotiv.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.medienhaus.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.meredithads.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.monster.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.pubmatic.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.undertone.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.walnuss.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.adtechus.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.anschlusstor.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.bravado.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.ep-solutions.org
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.itsfogo.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adtech.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:advertising.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:advertising.superweb.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adviva.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:agofev.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:apmebf.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:at.atwola.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:atdmt.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:blau.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:bluestreak.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:c.atdmt.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:casalemedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:clicksor.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:cunda.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:de.sitestat.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:deutschepostag.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:doubleclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:eas4.emediate.eu
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:efeducationfirst.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:emjcd.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:fastclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:fl01.ct2.comclick.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:googleads.g.doubleclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:guj.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:in.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:interclick.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:invitemedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:leads.demandbase.com.re.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:libri.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:mediaplex.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:monstercom.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:msnportal.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:questionmarket.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:realmedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:revsci.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:rotator.adjuggler.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ru4.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:serving-sys.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:sevenoneintermedia.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:smartadserver.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:specificclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:spylog.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:stat.aldi.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:stat.dealtime.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:statcounter.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:static.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tele2de.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:texasinstrument.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tourismnz.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.adform.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.effiliation.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.webtrekk.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.zalando.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tradedoubler.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:weborama.fr
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:wissende.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ww251.smartadserver.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.emjcd.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.etracker.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.googleadservices.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:xiti.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:yadro.ru
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:yieldmanager.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:zedo.com

markusg 27.02.2013 17:24
sehr gut.
alles löschen lassen, neues otl log posten

frappuccino 27.02.2013 17:49
So sollte alles gelöscht haben :)

Code:
HitmanPro 3.7.2.189
www.hitmanpro.com

  Computer name . . . . : SIXPACK-PC
  Windows . . . . . . . : 6.1.1.7601.X64/4
  User name . . . . . . : Sixpack-PC\Alexander
  UAC . . . . . . . . . : Enabled
  License . . . . . . . : Trial (30 days left)

  Scan date . . . . . . : 2013-02-27 17:28:57
  Scan mode . . . . . . : Normal
  Scan duration . . . . : 6m 47s
  Disk access mode  . . : Direct disk access (SRB)
  Cloud . . . . . . . . : Internet
  Reboot  . . . . . . . : Yes

  Threats . . . . . . . : 0
  Traces  . . . . . . . : 253

  Objects scanned . . . : 3.071.114
  Files scanned . . . . : 103.411
  Remnants scanned  . . : 1.422.638 files / 1.545.065 keys

Potential Unwanted Programs _________________________________________________

  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Blabbers      \ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Blabbers\ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}\ (AskBar) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}\ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}\ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1001\Software\Softonic\ (Softonic) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}\ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}\ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1005\Software\Blabbers\ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}\ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}\ (Blabbers) -> Deleted
  HKU\S-1-5-21-2104053648-4281570344-1924351648-1005\Software\Softonic\ (Softonic) -> Deleted

Cookies _____________________________________________________________________

  C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.googleadservices.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad-emea.doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.ad-srv.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adc-serv.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adnet.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.dyntracker.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.main-netz.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.mlnadvertising.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.movad.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.zanox.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adbrite.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adlegend.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads-lb.creative-serving.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.clicmanager.fr
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.creative-serving.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.dk-online.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.gamerpublishing.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.groundspeak.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.myswitzerland.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.newgrafix.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.p161.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.pubmatic.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.unister-gmbh.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.us.e-planning.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver.adtechus.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver1.mokono.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adserver2.interwall.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:adviva.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:apmebf.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:at.atwola.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:c1.atdmt.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:collective-media.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:de.sitestat.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:eas.apm.emediate.eu
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:eas4.emediate.eu
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:emjcd.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:fl01.ct2.comclick.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:googleads.g.doubleclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:guj.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:in.getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:invitemedia.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:kqv.112.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:media6degrees.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:mswmwpapolloprod.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:questionmarket.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:revsci.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.cpmstar.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:sonyeurope.112.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:specificclick.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:stat.dealtime.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:static.getclicky.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:superrtl.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:tacoda.at.atwola.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adform.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.effiliation.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.webtrekk.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:wissende.122.2o7.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:ww251.smartadserver.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.emjcd.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.etracker.de
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:xiti.com
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:yadro.ru
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:yieldmanager.net
  C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Cookies:zedo.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:2o7.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.adnet.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.adserver01.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.porta.eol.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:ad.zanox.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:adtech.de
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:advertising.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:adviva.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:apmebf.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:atdmt.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:casalemedia.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:de.sitestat.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:doubleclick.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:fastclick.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:fl01.ct2.comclick.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:mediaplex.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:msnportal.112.2o7.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:revsci.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:server.cpmstar.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:serving-sys.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:statcounter.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:track.adform.net
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:track.effiliation.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:tradedoubler.com
  C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\pbxwhagq.default\cookies.sqlite:us.sitestat.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.360yield.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.dyntracker.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.movad.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ad.zanox.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:adtech.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:apmebf.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:atdmt.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:doubleclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:fastclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:invitemedia.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:kaspersky.122.2o7.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:mediaplex.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:questionmarket.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:revsci.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:ru4.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:serving-sys.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:specificclick.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:stats.deka.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:track.adform.net
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:track.effiliation.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:tradedoubler.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:www.etracker.de
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:www.googleadservices.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:xiti.com
  C:\Users\Sixpack\AppData\Roaming\Mozilla\Firefox\Profiles\2fow9ay7.default\cookies.sqlite:yieldmanager.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.123-template.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.360yield.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.ad-srv.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adc-serv.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adition.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.admitad.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adnet.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.adserver01.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.dyntracker.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.mittelbayerische.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.movad.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.profiwin.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.yieldmanager.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ad.zanox.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adbrite.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.creative-serving.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.dk-online.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.jinkads.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.kure.tv
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.leitmotiv.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.medienhaus.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.meredithads.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.monster.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.pubmatic.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.undertone.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ads.walnuss.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.adtechus.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.anschlusstor.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.bravado.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.ep-solutions.org
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adserver.itsfogo.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adtech.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:advertising.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:advertising.superweb.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:adviva.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:agofev.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:apmebf.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:at.atwola.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:atdmt.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:blau.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:bluestreak.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:bs.serving-sys.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:c.atdmt.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:casalemedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:clicksor.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:cunda.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:de.sitestat.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:deutschepostag.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:doubleclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:eas.apm.emediate.eu
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:eas4.emediate.eu
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:efeducationfirst.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:emjcd.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:fastclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:fl01.ct2.comclick.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:googleads.g.doubleclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:guj.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:in.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:interclick.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:invitemedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:leads.demandbase.com.re.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:libri.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:mediaplex.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:monstercom.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:msnportal.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:questionmarket.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:realmedia.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:revsci.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:rotator.adjuggler.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ru4.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:serving-sys.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:sevenoneintermedia.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:smartadserver.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:specificclick.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:spylog.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:stat.aldi.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:stat.dealtime.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:statcounter.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:static.getclicky.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:statse.webtrendslive.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tele2de.112.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:texasinstrument.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tourismnz.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.adform.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.effiliation.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.webtrekk.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:track.zalando.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:tradedoubler.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:weborama.fr
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:wissende.122.2o7.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:ww251.smartadserver.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.emjcd.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.etracker.de
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:www.googleadservices.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:xiti.com
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:yadro.ru
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:yieldmanager.net
  C:\Users\Theresa\AppData\Roaming\Mozilla\Firefox\Profiles\4xjtsmmq.default\cookies.sqlite:zedo.com

markusg 27.02.2013 17:55
ok, nu noch otl log bitte.

frappuccino 27.02.2013 20:58
so:
Code:
OTL logfile created on: 27.02.2013 20:31:38 - Run 4
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Alexander\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,49 Gb Available Physical Memory | 62,19% Memory free
8,00 Gb Paging File | 6,43 Gb Available in Paging File | 80,37% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 458,87 Gb Total Space | 214,12 Gb Free Space | 46,66% Space Free | Partition Type: NTFS
Drive D: | 458,87 Gb Total Space | 240,14 Gb Free Space | 52,33% Space Free | Partition Type: NTFS
 
Computer Name: SIXPACK-PC | User Name: Alexander | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.02.23 17:04:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Alexander\Desktop\OTL.exe
PRC - [2013.01.30 13:25:01 | 001,199,576 | ---- | M] (Spotify Ltd) -- C:\Users\Alexander\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2012.12.29 11:34:47 | 001,260,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012.12.21 14:48:08 | 000,699,680 | ---- | M] (Star Finanz - Software Entwicklung und Vertriebs GmbH) -- C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
PRC - [2012.12.18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.12.14 16:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012.11.27 21:12:44 | 000,479,840 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
PRC - [2012.10.23 23:58:52 | 000,120,728 | ---- | M] () -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
PRC - [2012.10.23 23:58:40 | 000,694,168 | ---- | M] () -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
PRC - [2012.08.08 13:06:52 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.08 12:59:12 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.08 12:59:02 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.09.02 16:06:38 | 000,065,657 | ---- | M] (Motorola) -- C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
PRC - [2009.08.28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
PRC - [2009.08.12 23:04:44 | 000,062,208 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
PRC - [2009.08.12 22:58:28 | 000,261,888 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
PRC - [2009.07.04 02:47:12 | 000,240,160 | ---- | M] (Acer) -- C:\Programme\Acer\Acer Updater\UpdaterService.exe
PRC - [2009.04.25 01:21:04 | 000,360,448 | ---- | M] () -- C:\Windows\tsnpstd3.exe
PRC - [2007.05.11 03:18:26 | 000,835,584 | ---- | M] () -- C:\Windows\vsnpstd3.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.10.23 23:58:40 | 000,694,168 | ---- | M] () -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
MOD - [2009.04.25 01:21:04 | 000,360,448 | ---- | M] () -- C:\Windows\tsnpstd3.exe
MOD - [2009.02.03 01:33:56 | 000,460,199 | ---- | M] () -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
MOD - [2007.05.11 03:18:26 | 000,835,584 | ---- | M] () -- C:\Windows\vsnpstd3.exe
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2013.02.27 16:17:24 | 009,511,456 | ---- | M] (SurfRight B.V.) [Auto | Stopped] -- C:\Program Files\HitmanPro\HitmanPro.exe -- (HitmanPro37CrusaderBoot)
SRV - [2013.02.26 22:23:48 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.02.21 17:27:42 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.01.08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.12.29 11:34:47 | 001,260,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.12.21 14:48:08 | 000,699,680 | ---- | M] (Star Finanz - Software Entwicklung und Vertriebs GmbH) [Auto | Running] -- C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe -- (StarMoney 8.0 OnlineUpdate)
SRV - [2012.12.18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.12.14 16:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.12.14 16:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012.11.27 21:12:44 | 000,479,840 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider)
SRV - [2012.10.23 23:58:52 | 000,120,728 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe -- (Motorola Device Manager)
SRV - [2012.05.08 12:59:12 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.08 12:59:02 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.01.18 13:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2011.09.02 16:06:38 | 000,065,657 | ---- | M] (Motorola) [Auto | Running] -- C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe -- (PST Service)
SRV - [2010.03.18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.09.14 06:00:00 | 000,166,400 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Programme\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE -- (EPSON_EB_RPCV4_04)
SRV - [2009.09.14 06:00:00 | 000,128,512 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Programme\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE -- (EPSON_PM_RPCV4_04)
SRV - [2009.08.28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service)
SRV - [2009.08.25 18:38:06 | 000,935,208 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009.08.12 23:04:44 | 000,062,208 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2009.07.04 02:47:12 | 000,240,160 | ---- | M] (Acer) [Auto | Running] -- C:\Programme\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.04.19 16:34:48 | 000,625,184 | ---- | M] () [Auto | Running] -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM)
SRV - [2009.04.19 16:34:48 | 000,207,904 | ---- | M] () [Auto | Running] -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe -- (nSvcIp)
SRV - [2007.05.31 16:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007.05.31 16:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2005.04.06 16:53:02 | 000,163,840 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- c:\Creative Suite CS2\Adobe Creative Suite 2.0\Adobe Version Cue CS2\bin\VersionCueCS2.exe -- (Adobe Version Cue CS2)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013.01.28 20:40:23 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:64bit: - [2013.01.28 20:40:23 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:64bit: - [2012.12.14 16:49:28 | 000,024,176 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012.09.28 10:32:56 | 000,053,760 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.08.21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012.07.03 16:25:16 | 000,189,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012.06.11 11:56:34 | 000,022,016 | ---- | M] (Motorola Mobility Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motccgp.sys -- (motccgp)
DRV:64bit: - [2012.06.08 16:09:12 | 000,027,136 | ---- | M] (Motorola Mobility Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Motousbnet.sys -- (Motousbnet)
DRV:64bit: - [2012.06.08 16:08:54 | 000,008,832 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motswch.sys -- (MotoSwitchService)
DRV:64bit: - [2012.05.08 12:59:16 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2012.05.08 12:59:16 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.01.25 14:57:46 | 000,009,728 | ---- | M] (Motorola Mobility Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motccgpfl.sys -- (motccgpfl)
DRV:64bit: - [2011.12.15 15:00:00 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011.12.01 11:42:44 | 000,072,240 | ---- | M] (Nero AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NBVol.sys -- (NBVol)
DRV:64bit: - [2011.12.01 11:42:44 | 000,015,920 | ---- | M] (Nero AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NBVolUp.sys -- (NBVolUp)
DRV:64bit: - [2011.11.08 13:59:12 | 000,011,776 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motusbdevice.sys -- (motusbdevice)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.08.12 12:07:50 | 000,350,952 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET)
DRV:64bit: - [2009.09.03 16:30:20 | 000,128,512 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tiehdusb.sys -- (TIEHDUSB)
DRV:64bit: - [2009.07.18 07:31:22 | 010,951,552 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\snpstd3.sys -- (SNPSTD3)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009.07.14 01:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:64bit: - [2009.06.10 21:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.08 16:08:00 | 000,020,520 | ---- | M] (GARMIN Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\grmnusb.sys -- (grmnusb)
DRV:64bit: - [2009.05.06 00:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:64bit: - [2009.05.06 00:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:64bit: - [2009.01.29 18:11:38 | 000,006,144 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motfilt.sys -- (BTCFilterService)
DRV:64bit: - [2008.10.21 08:22:44 | 000,145,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017unic.sys -- (s0017unic)
DRV:64bit: - [2008.10.21 08:22:44 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017obex.sys -- (s0017obex)
DRV:64bit: - [2008.10.21 08:22:44 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017nd5.sys -- (s0017nd5)
DRV:64bit: - [2008.10.21 08:22:42 | 000,152,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mdm.sys -- (s0017mdm)
DRV:64bit: - [2008.10.21 08:22:42 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mgmt.sys -- (s0017mgmt)
DRV:64bit: - [2008.10.21 08:22:42 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mdfl.sys -- (s0017mdfl)
DRV:64bit: - [2008.10.21 08:22:40 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017bus.sys -- (s0017bus)
DRV:64bit: - [2008.05.16 10:33:06 | 000,158,760 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdm.sys -- (s0016mdm)
DRV:64bit: - [2008.05.16 10:33:06 | 000,151,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016unic.sys -- (s0016unic)
DRV:64bit: - [2008.05.16 10:33:06 | 000,137,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mgmt.sys -- (s0016mgmt)
DRV:64bit: - [2008.05.16 10:33:06 | 000,136,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016obex.sys -- (s0016obex)
DRV:64bit: - [2008.05.16 10:33:06 | 000,034,344 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016nd5.sys -- (s0016nd5)
DRV:64bit: - [2008.05.16 10:33:04 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV:64bit: - [2008.05.16 10:32:56 | 000,115,240 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016bus.sys -- (s0016bus)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009.07.03 23:15:12 | 010,526,464 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\snpstd3.sys -- (SNPSTD3)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE376
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={153279DC-5E00-43C1-9A41-D6E0ED29CC7D}&mid=511717b0608e47d0ae00d16f6bffa2e0-920170adcb8b4381ca247b189c82798c1361ccc6&lang=de&ds=pd011&pr=sa&d=2012-11-14 20:16:25&v=13.2.0.5&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE376
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\SearchScopes\{7A2C0AC1-6C53-4A02-B395-3DE888DC6E81}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1A17D6CB-8C59-41EC-A605-5A5E3219466A&apn_sauid=C991DAD6-5924-4B63-8E4B-BD83820EC59A&
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={153279DC-5E00-43C1-9A41-D6E0ED29CC7D}&mid=511717b0608e47d0ae00d16f6bffa2e0-920170adcb8b4381ca247b189c82798c1361ccc6&lang=de&ds=pd011&pr=sa&d=2012-11-14 20:16:25&v=13.2.0.5&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE376
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1015\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-501\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-501\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x1301&r=17360410ln07974380t15bh4k1tl30
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-501\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Google"
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0
FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.9.2
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.51
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_171.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Users\Public\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Alexander\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Alexander\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\gacela2@nurago.com: [INSTALLDIR]
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\PROGRAM FILES\CHECKPOINT\ZAFORCEFIELD\TRUSTCHECKER
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.02.21 17:27:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.02.26 22:27:31 | 000,000,000 | ---D | M]
 
[2010.04.22 14:10:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alexander\AppData\Roaming\mozilla\Extensions
[2013.02.21 17:27:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2013.02.21 17:27:42 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.10.03 22:50:42 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.08.29 07:22:58 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.10.03 22:50:42 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.10.03 22:50:42 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.10.03 22:50:42 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.10.03 22:50:42 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: hxxp://www.google.de/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Alexander\AppData\Local\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Alexander\AppData\Local\Google\Chrome\Application\25.0.1364.97\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Alexander\AppData\Local\Google\Chrome\Application\25.0.1364.97\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: getPlusPlus for Adobe 16290 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np_gp.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Users\Public\Mozilla Plugins\npitunes.dll
CHR - Extension: Angry Birds = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: hxxp://www.google.de/ig = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\bclmmfaclgaalcpdfaoocjkiblcfnakh\2012.5.20.35743_0\
CHR - Extension: Turn Off the Lights = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.1.0.30_0\
CHR - Extension: YouTube = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: TrafficLight = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfnpidifppmenkapgihekkeednfoenal\0.2.4_0\
CHR - Extension: AdBlock = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.61_0\
CHR - Extension: Yulia Brodskaya = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlgdloilieclkegafohackmhffbmdpko\2_0\
CHR - Extension: Capture Webpage Screenshot - FireShot = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg\0.98.29_0\
CHR - Extension: Doodle God 2 = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkchmmhaombnfciggcckaknfekaneapj\2.2.2_0\
CHR - Extension: Click to activate/deactivate ProxTube = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkdbaehcjcomcnnjhlmnfddpgoafpcko\1.0.6_0\
CHR - Extension: Ghostery = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\4.1.0_0\
CHR - Extension: Plants vs Zombies = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina\1.0.5_0\
CHR - Extension: Bitdefender QuickScan = C:\Users\Alexander\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.118_0\
 
O1 HOSTS File: ([2013.02.25 18:55:22 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2:64bit: - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
O2:64bit: - BHO: (GfK Internet-Monitor) - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\GfK Internet-Monitor\x64\Gacela2.dll File not found
O2:64bit: - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (ZoneAlarm Toolbar Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll File not found
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll File not found
O3 - HKLM\..\Toolbar: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3:64bit: - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3:64bit: - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3:64bit: - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O4:64bit: - HKLM..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden" File not found
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Programme\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [snpstd3] C:\Windows\vsnpstd3.exe ()
O4:64bit: - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdcBase.exe (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (NewTech Infosystems, Inc.)
O4 - HKLM..\Run: [snpstd3] C:\Windows\vsnpstd3.exe ()
O4 - HKLM..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe ()
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003..\Run: [RfxSrvTray] "D:\Tobit Radio.fx\Client\rfx-tray.exe" File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003..\Run: [ROC_JAN2013_TB] "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe"  /PROMPT /CMPID=JAN2013_TB File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003..\Run: [Spotify] C:\Users\Katharina♥\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003..\Run: [Spotify Web Helper] C:\Users\Katharina♥\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak..\Run: [RfxSrvTray] "D:\Tobit Radio.fx\Client\rfx-tray.exe" File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak..\Run: [Sony Ericsson PC Suite] "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006..\Run: [Spotify] C:\Users\Alexander\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006..\Run: [Spotify Web Helper] C:\Users\Alexander\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1015..\Run: [ROC_JAN2013_TB] "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe"  /PROMPT /CMPID=JAN2013_TB File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1015..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1015..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1015..\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe ()
O4 - Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Users\Katharina♥\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk =  File not found
O4 - Startup: C:\Users\Theresa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowLegacyWebView = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowUnhashedWebView = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1015\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2104053648-4281570344-1924351648-501\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O9:64bit: - Extra 'Tools' menuitem : Über GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\GfK Internet-Monitor\x64\Gacela2.dll File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5A4F0A5F-8EA0-44EA-AF9A-AB6E3FBD2D6E}: NameServer = 8.26.56.26,156.154.70.22
O18:64bit: - Protocol\Handler\dssrequest - No CLSID value found
O18:64bit: - Protocol\Handler\ipp - No CLSID value found
O18:64bit: - Protocol\Handler\ipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\sacore - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\dssrequest - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\sacore - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - AppInit_DLLs: (C:\Windows\System32\guard64.dll) -  File not found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (bootdelete)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.02.27 18:25:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Ask
[2013.02.27 17:36:38 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2013.02.27 16:18:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
[2013.02.27 16:18:05 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro
[2013.02.27 16:17:11 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2013.02.27 16:06:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group
[2013.02.27 16:06:37 | 000,000,000 | ---D | C] -- C:\Users\Alexander\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2013.02.27 16:06:00 | 002,617,648 | ---- | C] (VS Revo Group Ltd.) -- C:\Users\Alexander\Desktop\revosetup194.exe
[2013.02.27 16:05:54 | 009,511,456 | ---- | C] (SurfRight B.V.) -- C:\Users\Alexander\Desktop\HitmanPro_x64.exe
[2013.02.27 10:10:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\MSSoap
[2013.02.26 21:56:27 | 000,000,000 | ---D | C] -- C:\Users\Alexander\AppData\Roaming\BANDISOFT
[2013.02.26 21:50:40 | 000,000,000 | -HSD | C] -- C:\ProgramData\System Restore
[2013.02.26 20:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2013.02.26 20:29:20 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2013.02.26 20:27:20 | 004,190,272 | ---- | C] (Piriform Ltd) -- C:\Users\Alexander\Desktop\ccsetup328.exe
[2013.02.25 19:14:45 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013.02.25 18:30:47 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013.02.25 18:30:47 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013.02.25 18:30:47 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013.02.25 18:16:19 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013.02.25 18:15:21 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013.02.25 18:12:46 | 005,034,894 | R--- | C] (Swearware) -- C:\Users\Alexander\Desktop\ComboFix.exe
[2013.02.24 22:03:27 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Alexander\Desktop\tdsskiller.exe
[2013.02.24 14:24:12 | 000,000,000 | ---D | C] -- C:\Users\Alexander\Desktop\2013-02-24 Eng. I
[2013.02.23 17:09:06 | 000,000,000 | ---D | C] -- C:\Users\Alexander\Desktop\TRojanerboard
[2013.02.23 17:04:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Alexander\Desktop\OTL.exe
[2013.02.23 16:18:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.02.23 16:18:38 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013.02.23 16:18:21 | 000,000,000 | ---D | C] -- C:\Users\Alexander\AppData\Local\Programs
[2013.02.21 17:27:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.02.18 16:07:59 | 000,000,000 | ---D | C] -- C:\Users\Alexander\Desktop\Willms
[2013.02.15 16:55:36 | 000,000,000 | ---D | C] -- C:\Users\Alexander\Desktop\2013-02-15 Kaufbeleg
[2013.01.30 13:25:02 | 000,000,000 | ---D | C] -- C:\Users\Alexander\AppData\Local\Spotify
[2013.01.30 13:24:31 | 000,000,000 | ---D | C] -- C:\Users\Alexander\AppData\Roaming\Spotify
[2013.01.28 20:40:23 | 000,027,760 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\ggsemc.sys
[2013.01.28 20:40:23 | 000,014,448 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\ggflt.sys
[2013.01.28 20:38:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Ericsson
[2009.10.17 03:04:41 | 000,036,136 | ---- | C] (Oberon Media) -- C:\ProgramData\FullRemove.exe
[2 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.02.27 20:14:00 | 000,001,136 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1005UA.job
[2013.02.27 20:11:00 | 000,001,136 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1006UA.job
[2013.02.27 20:04:02 | 000,001,128 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1001UA.job
[2013.02.27 19:58:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.02.27 19:57:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.02.27 18:18:46 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.02.27 17:36:38 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2013.02.27 17:36:38 | 000,003,672 | ---- | M] () -- C:\Windows\SysNative\.crusader
[2013.02.27 17:36:38 | 000,000,352 | ---- | M] () -- C:\Windows\SysNative\bootdelete.lst
[2013.02.27 16:22:17 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.02.27 16:22:17 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.02.27 16:18:05 | 000,001,913 | ---- | M] () -- C:\Users\Public\Desktop\HitmanPro.lnk
[2013.02.27 16:17:24 | 009,511,456 | ---- | M] (SurfRight B.V.) -- C:\Users\Alexander\Desktop\HitmanPro_x64.exe
[2013.02.27 16:14:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.02.27 16:14:38 | 3220,082,688 | -HS- | M] () -- C:\hiberfil.sys
[2013.02.27 16:06:37 | 000,001,272 | ---- | M] () -- C:\Users\Alexander\Desktop\Revo Uninstaller.lnk
[2013.02.27 16:06:03 | 002,617,648 | ---- | M] (VS Revo Group Ltd.) -- C:\Users\Alexander\Desktop\revosetup194.exe
[2013.02.27 09:04:00 | 000,001,076 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1001Core.job
[2013.02.27 03:14:00 | 000,001,084 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1005Core.job
[2013.02.27 02:11:00 | 000,001,084 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2104053648-4281570344-1924351648-1006Core.job
[2013.02.26 22:40:17 | 005,094,904 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.02.26 22:27:32 | 000,002,023 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2013.02.26 22:26:01 | 000,594,019 | ---- | M] () -- C:\Users\Alexander\Desktop\adwcleaner.exe
[2013.02.26 20:29:21 | 000,000,826 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.02.26 20:27:21 | 004,190,272 | ---- | M] (Piriform Ltd) -- C:\Users\Alexander\Desktop\ccsetup328.exe
[2013.02.26 15:11:31 | 000,003,446 | ---- | M] () -- C:\Users\Alexander\.recently-used.xbel
[2013.02.25 21:58:54 | 020,666,462 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.02.25 21:58:54 | 006,561,914 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.02.25 21:58:54 | 005,789,830 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.02.25 21:58:53 | 006,439,526 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.02.25 21:58:53 | 000,005,206 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.02.25 18:55:22 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013.02.25 18:12:47 | 005,034,894 | R--- | M] (Swearware) -- C:\Users\Alexander\Desktop\ComboFix.exe
[2013.02.25 14:26:51 | 000,002,100 | ---- | M] () -- C:\Users\Alexander\Desktop\Avira Free Antivirus Profil Suche nach Rootkits und aktiver Malware.LNK
[2013.02.24 22:03:27 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Alexander\Desktop\tdsskiller.exe
[2013.02.23 17:11:03 | 000,000,000 | ---- | M] () -- C:\Users\Alexander\defogger_reenable
[2013.02.23 17:07:38 | 000,376,832 | ---- | M] () -- C:\Users\Alexander\Desktop\gmer_2.1.19081.exe
[2013.02.23 17:04:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Alexander\Desktop\OTL.exe
[2013.02.23 17:04:51 | 000,050,477 | ---- | M] () -- C:\Users\Alexander\Desktop\Defogger.exe
[2013.02.23 16:28:18 | 000,001,336 | RHS- | M] () -- C:\Users\Alexander\ntuser.pol
[2013.02.23 16:18:43 | 000,001,117 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.02.23 16:08:40 | 000,000,866 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2013.02.22 12:25:23 | 000,002,394 | ---- | M] () -- C:\Users\Alexander\Desktop\Google Chrome.lnk
[2013.02.15 17:10:02 | 000,004,676 | ---- | M] () -- C:\Users\Alexander\Desktop\bigger_ajax-loader-blue.gif
[2013.01.30 13:25:02 | 000,001,817 | ---- | M] () -- C:\Users\Alexander\Desktop\Spotify.lnk
[2013.01.29 10:31:38 | 000,002,030 | ---- | M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
[2013.01.28 20:48:45 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggsemc_01009.Wdf
[2013.01.28 20:48:45 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggflt_01009.Wdf
[2013.01.28 20:40:23 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\ggsemc.sys
[2013.01.28 20:40:23 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\ggflt.sys
[2 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.02.27 17:36:38 | 000,003,672 | ---- | C] () -- C:\Windows\SysNative\.crusader
[2013.02.27 17:36:38 | 000,000,352 | ---- | C] () -- C:\Windows\SysNative\bootdelete.lst
[2013.02.27 16:18:05 | 000,001,913 | ---- | C] () -- C:\Users\Public\Desktop\HitmanPro.lnk
[2013.02.27 16:06:37 | 000,001,272 | ---- | C] () -- C:\Users\Alexander\Desktop\Revo Uninstaller.lnk
[2013.02.26 22:27:32 | 000,002,023 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2013.02.26 22:27:31 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2013.02.26 22:26:00 | 000,594,019 | ---- | C] () -- C:\Users\Alexander\Desktop\adwcleaner.exe
[2013.02.26 22:23:49 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.02.26 20:29:21 | 000,000,826 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.02.26 15:11:31 | 000,003,446 | ---- | C] () -- C:\Users\Alexander\.recently-used.xbel
[2013.02.25 18:30:47 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013.02.25 18:30:47 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013.02.25 18:30:47 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013.02.25 18:30:47 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013.02.25 18:30:47 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013.02.25 14:26:51 | 000,002,100 | ---- | C] () -- C:\Users\Alexander\Desktop\Avira Free Antivirus Profil Suche nach Rootkits und aktiver Malware.LNK
[2013.02.23 17:11:03 | 000,000,000 | ---- | C] () -- C:\Users\Alexander\defogger_reenable
[2013.02.23 17:07:37 | 000,376,832 | ---- | C] () -- C:\Users\Alexander\Desktop\gmer_2.1.19081.exe
[2013.02.23 17:04:50 | 000,050,477 | ---- | C] () -- C:\Users\Alexander\Desktop\Defogger.exe
[2013.02.23 16:18:43 | 000,001,117 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.02.15 17:10:01 | 000,004,676 | ---- | C] () -- C:\Users\Alexander\Desktop\bigger_ajax-loader-blue.gif
[2013.02.07 16:35:24 | 000,000,866 | ---- | C] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2013.01.30 13:25:02 | 000,001,817 | ---- | C] () -- C:\Users\Alexander\Desktop\Spotify.lnk
[2013.01.28 20:48:45 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggsemc_01009.Wdf
[2013.01.28 20:48:45 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggflt_01009.Wdf
[2013.01.10 08:56:09 | 000,016,384 | ---- | C] () -- C:\Windows\SysWow64\FileOps.exe
[2012.11.29 08:38:32 | 000,000,120 | ---- | C] () -- C:\Windows\wininit.ini
[2011.07.06 15:30:04 | 000,000,000 | ---- | C] () -- C:\Users\Alexander\dir
[2011.04.28 17:56:43 | 000,000,000 | ---- | C] () -- C:\Users\Alexander\AppData\Local\{52A3C36C-D425-44F7-8B06-DE83B85EB4EF}
[2011.03.26 08:51:07 | 000,027,648 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll
[2010.09.19 20:24:25 | 000,020,816 | ---- | C] () -- C:\Users\Alexander\AppData\Roaming\UserTile.png
[2010.07.02 14:57:35 | 000,072,192 | ---- | C] () -- C:\Users\Alexander\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.06.24 14:15:26 | 000,000,419 | ---- | C] () -- C:\Users\Alexander\AppData\Roaming\mdbu.bin
[2010.04.20 20:34:42 | 000,001,336 | RHS- | C] () -- C:\Users\Alexander\ntuser.pol
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2013.01.27 17:59:41 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\.minecraft
[2011.03.01 20:29:47 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\Acreon
[2013.02.26 21:56:27 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\BANDISOFT
[2011.04.25 19:02:14 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\Canneverbe Limited
[2010.08.18 14:25:06 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010.09.27 09:01:56 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\CheckPoint
[2012.03.27 22:11:27 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011.12.09 21:02:00 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\DxO Labs
[2011.12.09 21:02:19 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\DxO_Labs
[2013.01.13 17:38:29 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\elsterformular
[2011.04.02 07:59:25 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\EPSON
[2011.12.16 22:10:15 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\FireShot
[2010.06.11 14:48:06 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\GameConsole
[2010.05.24 06:44:49 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\GARMIN
[2013.02.26 15:11:31 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\gtk-2.0
[2011.07.07 05:35:01 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\hdbADS
[2012.03.03 19:10:58 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\ImgBurn
[2012.02.21 19:59:36 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\MAGIX
[2012.09.21 19:02:34 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\Motorola
[2012.11.28 17:38:34 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\Motorola Mobility
[2011.07.07 12:44:08 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\MrJobs
[2012.08.26 11:45:59 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\onOne Software
[2010.07.02 11:41:39 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\OpenOffice.org
[2012.05.10 18:33:37 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\Origin
[2012.03.29 17:33:00 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\PACE Anti-Piracy
[2010.09.19 20:24:25 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\PeerNetworking
[2011.08.29 15:20:01 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\Phase6
[2011.06.01 14:14:03 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\PhotoScape
[2013.02.27 17:33:37 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\QuickScan
[2013.02.27 20:41:19 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\Spotify
[2012.03.29 17:36:18 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010.06.22 05:41:12 | 000,000,000 | ---D | M] -- C:\Users\Alexander\AppData\Roaming\Tobit
[2013.02.23 20:23:47 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\.minecraft
[2010.07.11 15:50:57 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\CheckPoint
[2011.06.27 14:59:01 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\DynaGeo
[2011.04.13 06:55:24 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\EPSON
[2012.09.22 15:57:48 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\FileZilla
[2010.11.03 11:18:29 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\GameConsole
[2011.12.17 10:51:05 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\MAGIX
[2012.11.28 19:31:51 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\Motorola Mobility
[2010.05.25 13:28:55 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\OpenOffice.org
[2012.05.10 19:44:56 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\Origin
[2011.09.07 17:19:07 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\PhotoScape
[2010.12.21 17:41:50 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\PlayFirst
[2013.02.27 19:53:47 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\Spotify
[2010.05.02 13:23:43 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\The Games Company
[2010.06.22 16:10:53 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\Tobit
[2012.08.20 17:59:07 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\.minecraft
[2013.01.06 11:10:08 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\BANDISOFT
[2012.09.10 15:22:59 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\Blender Foundation
[2010.09.27 09:01:53 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\CheckPoint
[2011.12.09 21:04:07 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\DxO Labs
[2011.12.09 21:04:14 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\DxO_Labs
[2011.03.13 10:06:10 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\DynaGeo
[2012.11.07 14:38:20 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\elsterformular
[2010.04.20 15:16:52 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\GameConsole
[2010.05.07 11:53:41 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\GARMIN
[2012.03.28 19:55:55 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\Geometric
[2012.12.25 20:31:40 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\gtk-2.0
[2012.07.09 21:54:52 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\MAGIX
[2012.11.28 17:28:26 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\Motorola
[2012.11.28 23:24:50 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\Motorola Mobility
[2010.04.21 21:02:35 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\OpenOffice.org
[2012.05.10 18:33:27 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\Origin
[2011.12.09 21:03:00 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\PACE Anti-Piracy
[2011.08.29 13:22:29 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\Phase6
[2011.05.31 16:11:26 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\PhotoScape
[2010.05.17 10:43:25 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\Template
[2010.08.21 10:16:57 | 000,000,000 | ---D | M] -- C:\Users\Sixpack\AppData\Roaming\Tobit
[2010.07.11 11:59:37 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\CheckPoint
[2011.02.16 21:36:13 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\DynaGeo
[2010.05.03 20:12:37 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\GameConsole
[2010.06.06 18:08:28 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\GARMIN
[2012.12.24 12:29:43 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\gtk-2.0
[2010.09.15 16:34:03 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\MAGIX
[2012.11.30 18:50:47 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\Motorola Mobility
[2010.05.01 11:19:17 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\OpenOffice.org
[2012.10.14 09:19:17 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\PhotoScape
[2010.09.06 15:58:06 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010.06.01 18:17:06 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\Template
[2010.12.01 17:24:48 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\The Games Company
[2010.06.22 11:49:53 | 000,000,000 | ---D | M] -- C:\Users\Theresa\AppData\Roaming\Tobit
 
========== Purity Check ==========
 
 
 
========== Files - Unicode (All) ==========
[2013.02.26 18:30:05 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Spotify) -- C:\Users\Katharina♥\AppData\Roaming\Spotify
[2012.11.28 18:43:26 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Motorola Mobility) -- C:\Users\Katharina♥\AppData\Roaming\Motorola Mobility
[2012.09.30 17:00:24 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\gtk-2.0) -- C:\Users\Katharina♥\AppData\Roaming\gtk-2.0
[2012.09.16 17:57:36 | 000,000,000 | --SD | M](C:\Users\Katharina?\AppData\Roaming\Microsoft) -- C:\Users\Katharina♥\AppData\Roaming\Microsoft
[2012.09.16 17:57:36 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Adobe) -- C:\Users\Katharina♥\AppData\Roaming\Adobe
[2012.08.28 11:27:22 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\WinRAR) -- C:\Users\Katharina♥\AppData\Roaming\WinRAR
[2012.04.19 16:06:58 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Sony Corporation) -- C:\Users\Katharina♥\AppData\Roaming\Sony Corporation
[2012.02.09 16:01:31 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Avira) -- C:\Users\Katharina♥\AppData\Roaming\Avira
[2011.11.06 19:01:19 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\MAGIX) -- C:\Users\Katharina♥\AppData\Roaming\MAGIX
[2010.09.11 10:10:04 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Google) -- C:\Users\Katharina♥\AppData\Roaming\Google
[2010.07.10 17:18:53 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Apple Computer) -- C:\Users\Katharina♥\AppData\Roaming\Apple Computer
[2010.07.10 17:18:46 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\CheckPoint) -- C:\Users\Katharina♥\AppData\Roaming\CheckPoint
[2010.06.28 09:31:15 | 000,230,372 | ---- | M] ()(C:\Users\Alexander\Documents\I?schland.jpg) -- C:\Users\Alexander\Documents\I♥schland.jpg
[2010.06.28 09:31:08 | 000,230,372 | ---- | C] ()(C:\Users\Alexander\Documents\I?schland.jpg) -- C:\Users\Alexander\Documents\I♥schland.jpg
[2010.06.28 09:30:53 | 000,777,627 | ---- | M] ()(C:\Users\Alexander\Documents\I?schland.pdn) -- C:\Users\Alexander\Documents\I♥schland.pdn
[2010.06.28 09:30:49 | 000,777,627 | ---- | C] ()(C:\Users\Alexander\Documents\I?schland.pdn) -- C:\Users\Alexander\Documents\I♥schland.pdn
[2010.05.26 15:49:22 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Nero) -- C:\Users\Katharina♥\AppData\Roaming\Nero
[2010.05.01 10:22:15 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\The Games Company) -- C:\Users\Katharina♥\AppData\Roaming\The Games Company
[2010.04.24 07:40:57 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Mozilla) -- C:\Users\Katharina♥\AppData\Roaming\Mozilla
[2010.04.23 21:29:47 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Macromedia) -- C:\Users\Katharina♥\AppData\Roaming\Macromedia
[2009.07.14 08:44:38 | 000,000,000 | ---D | M](C:\Users\Katharina?\AppData\Roaming\Media Center Programs) -- C:\Users\Katharina♥\AppData\Roaming\Media Center Programs
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 983 bytes -> C:\ProgramData\Microsoft:Z4kmlWWsCNcCDsSGiceQwis7VZ
@Alternate Data Stream - 958 bytes -> C:\ProgramData\Microsoft:4nD4cvskjPp98UodGOwbhX7
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:4D066AD2
@Alternate Data Stream - 146 bytes -> C:\ProgramData\TEMP:AB689DEA
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:5D7E5A8F
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:93DE1838
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:0B9176C0
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:E3C56885
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:E1F04E8D
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:ABE89FFE
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:444C53BA

< End of report >

markusg 27.02.2013 21:15
Hi,


otl fix

Fixen mit OTL

  • Starte bitte die OTL.exe.
  • Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:
:OTL
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={153279DC-5E00-43C1-9A41-D6E0ED29CC7D}mid=511717b0608e47d0ae00d16f6bffa2e0-920170adcb8b4381ca247b189c82798c1361ccc6lang=deds=pd011pr=sad=2012-11-14
20:16:25v=13.2.0.5sap=dspq={searchTerms}
IE - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={153279DC-5E00-43C1-9A41-D6E0ED29CC7D}mid=511717b0608e47d0ae00d16f6bffa2e0-920170adcb8b4381ca247b189c82798c1361ccc6lang=deds=pd011pr=sad=2012-11-14
20:16:25v=13.2.0.5sap=dspq={searchTerms}
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\PROGRAM FILES\CHECKPOINT\ZAFORCEFIELD\TRUSTCHECKER
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
O2:64bit: - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
O2:64bit: - BHO: (GfK Internet-Monitor) - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\GfK Internet-Monitor\x64\Gacela2.dll File not
found
O2:64bit: - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (ZoneAlarm Toolbar Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
File not found
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll File not found
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll File not found
O3 - HKLM\..\Toolbar: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3:64bit: - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program
Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program
Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value
found.
O3:64bit: - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}
- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program
Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3:64bit: - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program
Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O3 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1006\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program
Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll File not found
O4:64bit: - HKLM..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden" File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003..\Run: [RfxSrvTray] "D:\Tobit Radio.fx\Client\rfx-tray.exe" File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003..\Run: [ROC_JAN2013_TB] "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe"  /PROMPT
/CMPID=JAN2013_TB File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1003..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" File
not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak..\Run: [RfxSrvTray] "D:\Tobit Radio.fx\Client\rfx-tray.exe" File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak..\Run: [Sony Ericsson PC Suite] "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe"
/systray /nologon File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1004.bak..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
File not found
O4 - HKU\S-1-5-21-2104053648-4281570344-1924351648-1015..\Run: [ROC_JAN2013_TB] "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe"  /PROMPT
/CMPID=JAN2013_TB File not found
O4 - Startup: C:\Users\Katharina♥\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk =  File not found
O8:64bit: - Extra context menu item: Export to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Nach Microsoft Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Export to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O9:64bit: - Extra 'Tools' menuitem : Über GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\GfK Internet-Monitor\x64\Gacela2.dll
File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O20:64bit: - AppInit_DLLs: (C:\Windows\System32\guard64.dll) -  File not found
:files
:Commands
[emptytemp]
  • Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
  • Schließe bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread


bitte teste, ob es im Firefox, internet explorer, und sonstigen
evtl. instalierte Browser, irgendwelche ungewollten toolbars, umleitungen oder sonstigen Probleme gibt.
Teste wie pc und programme allgemein laufen.

frappuccino 27.02.2013 21:54
hi,
bis jetzt läuft alles rund :)
Hier die Textdatei:
Code:
All processes killed
========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
Registry key HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
File C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll not found.
File C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27B4851A-3207-45A2-B947-BE8AFE6163AB}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4BEEA052-726D-4A6E-B65D-A6BD07C263F3}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4BEEA052-726D-4A6E-B65D-A6BD07C263F3}\ deleted successfully.
File C:\Program Files (x86)\GfK Internet-Monitor\x64\Gacela2.dll File not not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27B4851A-3207-45A2-B947-BE8AFE6163AB}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}\ deleted successfully.
File C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ deleted successfully.
File C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
64bit-Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ deleted successfully.
File C:\Program not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found.
File C:\Program not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
64bit-Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\ not found.
File B0B0-4EC6-88A9-BCA1A32AB107} not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found.
File C:\Program not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
64bit-Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found.
File C:\Program not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found.
File C:\Program not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ISW deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Microsoft\Windows\CurrentVersion\Run\\RfxSrvTray deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Microsoft\Windows\CurrentVersion\Run\\ROC_JAN2013_TB deleted successfully.
File "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe"  /PROMPT not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1003\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
File "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" File not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Windows\CurrentVersion\Run\\RfxSrvTray deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Windows\CurrentVersion\Run\\Sony Ericsson PC Suite deleted successfully.
File "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1004.bak\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
File "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" not found.
Registry value HKEY_USERS\S-1-5-21-2104053648-4281570344-1924351648-1015\Software\Microsoft\Windows\CurrentVersion\Run\\ROC_JAN2013_TB deleted successfully.
File "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe"  /PROMPT not found.
C:\Users\Katharina♥\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk moved successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Export to Microsoft Excel\ not found.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Nach Microsoft Excel exportieren\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Export to Microsoft Excel\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Nach Microsoft Excel exportieren\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{4BEEA052-726D-4A6E-B65D-A6BD07C263F3}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4BEEA052-726D-4A6E-B65D-A6BD07C263F3}\ not found.
File C:\Program Files (x86)\GfK Internet-Monitor\x64\Gacela2.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2670000A-7350-4f3c-8081-5663EE0C6C49}\ not found.
64bit-Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\Windows\System32\guard64.dll scheduled to be deleted on reboot.
========== FILES ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Alexander
->Temp folder emptied: 57011948 bytes
->Temporary Internet Files folder emptied: 2575102 bytes
->Java cache emptied: 1962431 bytes
->FireFox cache emptied: 41759224 bytes
->Google Chrome cache emptied: 53472054 bytes
->Apple Safari cache emptied: 13793280 bytes
->Flash cache emptied: 57507 bytes
 
User: All Users
 
User: AppData
->Temp folder emptied: 0 bytes
 
User: Christoph
->Temp folder emptied: 370940 bytes
->Temporary Internet Files folder emptied: 143621544 bytes
->Java cache emptied: 1 bytes
->FireFox cache emptied: 46302026 bytes
->Google Chrome cache emptied: 466969808 bytes
->Flash cache emptied: 24070 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56475 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Gast
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 33040998 bytes
->Flash cache emptied: 57033 bytes
 
User: Katharina♥
->Temp folder emptied: 190013 bytes
->Temporary Internet Files folder emptied: 1290173895 bytes
->Java cache emptied: 585870 bytes
->FireFox cache emptied: 35860895 bytes
->Google Chrome cache emptied: 421435848 bytes
->Apple Safari cache emptied: 29696 bytes
->Flash cache emptied: 2890930 bytes
 
User: Public
->Temp folder emptied: 0 bytes
 
User: Sixpack
->Temp folder emptied: 2110824 bytes
->Temporary Internet Files folder emptied: 486547822 bytes
->Java cache emptied: 1416477601 bytes
->FireFox cache emptied: 244132549 bytes
->Google Chrome cache emptied: 399741923 bytes
->Flash cache emptied: 82103 bytes
 
User: Theresa
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 114148881 bytes
->Java cache emptied: 8303080 bytes
->FireFox cache emptied: 440372959 bytes
->Flash cache emptied: 2821472 bytes
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56502 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5979 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 15508420 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 753 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 11840882 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 666 bytes
RecycleBin emptied: 7311 bytes
 
Total Files Cleaned = 5.488,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 02272013_211703

markusg 28.02.2013 18:16
Noch mal Probleme aufgetreten? falls nein:
öffne otl, bereinigen, PC startet neu, Remover werden gelöscht.
Lösche übrig gebliebene Logs, setups, Remover, Papierkorb leeren
PC absichern:
als antimalware programm würde ich emsisoft empfehlen.
diese haben für mich den besten schutz kostet aber etwas.
Computeractive Software Store - Emsisoft Anti-Malware 7 [1-PC] - 63% off RRP
testversion:
Meine Antivirus-Empfehlung: Emsisoft Anti-Malware
insbesondere wenn du onlinebanking, einkäufe, sonstige zahlungsabwicklungen oder ähnlich wichtiges, wie zb berufliches machst, also sensible daten zu schützen sind, solltest du in sicherheitssoftware investieren.
vor dem aktivieren der lizenz die 30 tage testzeitraum ausnutzen.

kostenlos, aber eben nicht ganz so gut währe avast zu empfehlen.
http://www.trojaner-board.de/110895-...antivirus.html

sag mir welches du nutzt, dann gebe ich konfigurationshinweise.
bitte dein bisheriges av deinstalieren
die folgende anleitung ist umfangreich, dass ist mir klar, sie sollte aber umgesetzt werden, da nur dann dein pc sicher ist. stelle so viele fragen wie nötig, ich arbeite gern alles mit dir durch!

http://www.trojaner-board.de/96344-a...-rechners.html
Starte bitte mit der Passage, Windows Vista und Windows 7
Bitte beginne damit, Windows Updates zu instalieren.
Am besten geht dies, wenn du über Start, Suchen gehst, und dort Windows Updates eingibst.
Prüfe unter "Einstellungen ändern" dass folgendes ausgewählt ist:
- Updates automatisch Instalieren,
- Täglich
- Uhrzeit wählen
- Bitte den gesammten rest anhaken, außer:
- detailierte benachichtungen anzeigen, wenn neue Microsoft software verfügbar ist.
Klicke jetzt die Schaltfläche "OK"
Klicke jetzt "nach Updates suchen".
Bitte instaliere zunächst wichtige Updates.
Es wird nötig sein, den PC zwischendurch neu zu starten. falls dies der Fall ist, musst du erneut über Start, Suchen, Windows Update aufrufen, auf Updates suchen klicken und die nächsten instalieren.
Mache das selbe bitte mit den optionalen Updates.
Bitte übernimm den rest so, wie es im Abschnitt windows 7 / Vista zu lesen ist.
aus dem Abschnitt xp, bitte den punkt "datenausführungsverhinderung, dep" übernehmen.
als browser rate ich dir zu chrome:
Installation von Google Chrome für mehrere Nutzerkonten - Google Chrome-Hilfe
anleitung lesen bitte
falls du nen andern nutzen willst, sags mir dann muss ich teile der nun folgenden anleitung anpassen.


Sandboxie
Die devinition einer Sandbox ist hier nachzulesen:
Sandbox
Kurz gesagt, man kann Programme fast 100 %ig isuliert vom System ausführen.

Der Vorteil liegt klar auf der Hand, wenn über den Browser Schadcode eingeschläust wird, kann dieser nicht nach außen dringen.
Download Link:
Sandboxie - Download - Filepony

anleitung:
http://www.trojaner-board.de/71542-a...sandboxie.html
ausführliche anleitung als pdf, auch abarbeiten:
Sandbox Einstellungen |

bitte folgende zusatz konfiguration machen:
sandboxie control öffnen, menü sandbox anklicken, defauldbox wählen.
dort klicke auf sandbox einstellungen.
beschrenkungen, bei programm start und internet zugriff schreibe:
chrome.exe
dann gehe auf anwendungen, webbrowser, chrome.
dort aktiviere alles außer gesammten profil ordner freigeben.
Wie du evtl. schon gesehen hast, kannst du einige Funktionen nicht nutzen.
Dies ist nur in der Vollversion nötig, zu deren Kauf ich dir rate.
Du kannst zb unter "Erzwungene Programmstarts" festlegen, dass alle Browser in der Sandbox starten.
Ansonsten musst du immer auf "Sandboxed webbrowser" klicken bzw Rechtsklick, in Sandboxie starten.
Eine lebenslange Lizenz kostet 30 €, und ist auf allen deinen PC's nutzbar.

Weiter mit:
Maßnahmen für ALLE Windows-Versionen
alles komplett durcharbeiten
anmerkung zu file hippo.
in den settings zusätzlich auswählen:
hide beta updates.
Run updateChecker when Windows starts

Backup Programm:
in meiner Anleitung ist bereits ein Backup Programm verlinkt, als Alternative bietet sich auch das Windows eigene Backup Programm an:
http://www.trojaner-board.de/82962-w...en-backup.html
Dies ist aber leider nur für Windows 7 Nutzer vernünftig nutzbar.
Alle Anderen sollten sich aber auf jeden fall auch ein Backup Programm instalieren, denn dies kann unter Umständen sehr wichtig sein, zum Beispiel, wenn die Festplatte einmal kaputt ist.

Zum Schluss, die allgemeinen sicherheitstipps beachten, wenn es dich betrifft, den Tipp zum Onlinebanking beachten und alle Passwörter ändern
bitte auch lesen, wie mache ich programme für alle sichtbar:
Programme für alle Konten nutzbar machen - PCtipp.ch - Praxis & Hilfe
surfe jetzt also nur noch im standard nutzer konto und dort in der sandbox.
wenn du die kostenlose version nutzt, dann mit klick auf sandboxed web browser, wenn du die bezahlversion hast, kannst du erzwungene programm starts festlegen, dann wird sandboxie immer gestartet wenn du nen browser aufrufst.
wenn du mit der maus über den browser fährst sollte der eingerahmt sein, dann bist du im sandboxed web browser

passwort sicherheit:
jeder dienst benötigt ein eigenes, mindestens 12-stelliges passwort
bei der passwort verwaltung und erstellung hilft roboform
Passwort Manager, Formular Ausfueller, Passwort Management | RoboForm Passwort Manager
anleitung:
RoboForm-Bedienungsanleitung: Passwort-Manager, Verwalten von Passwörtern und persönlichen Daten

frappuccino 28.02.2013 20:16
Also :
Updates sind installiert, allen Windows Einstellungen erledigt, bereinigt ist das system jetzt auch.
Der Großteil von uns verwendet chrome, dennoch sträubt sich jemand extrem dagegen. Deswegen wir wohl weiterhin Firefox da sein .... Antivierenprogramm ist jetzt Bitdefender Internet Security 2013. Da ich keine externe platte zur Hand habe habe wird das vorerst nichts mit backups :( Ist diese Sandbox notwendig ? Und irgendwie vertraut ich diesen Hippo updater und dem passwortmanager nicht, letzteres ist auch noch nicht installiert.

markusg 28.02.2013 21:09
sie ist nötig, und update checker auch.
dann musst du für den firefox noch in sandboxie freigaben machen
firefox.exe
plugin-container.exe
und unter anwendung, webbrowser, firefox, alles außer gesammten profilordner.
bitdefender hätt ich mir persönlich nicht gehohlt, bremst häufig das system, aber must du wissen :-)

frappuccino 01.03.2013 17:03
So Sandboxie ist jetzt installiert.
Gibt es eine Möglichkeit Ihnen ein Dankeschön zukommen zu lassen??

LG

Alexander

markusg 01.03.2013 17:09
hi du kannst zb spenden.
läuft denn alles oder gibts noch irgendwelche unklarheiten?

frappuccino 02.03.2013 12:22
Hi,
Soweit ist alles klar. :)
Vielen Dank für die Hilfe :))

LG

Alexander

markusg 03.03.2013 20:15
Kein Prob, bei Fragen, melden


Alle Zeitangaben in WEZ +1. Es ist jetzt 02:11 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131