Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows7 Avira/WinzipMalware melden sich mit TR/BProtevtoe.gen (https://www.trojaner-board.de/151617-windows7-avira-winzipmalware-melden-tr-bprotevtoe-gen.html)

Rotetaube16 28.03.2014 10:46
Windows7 Avira/WinzipMalware melden sich mit TR/BProtevtoe.gen
 
Hallo liebes Team ,habe seit gestern nachmittag mit o.a. Virus ein grosses Problem.Avira meldet sich mit minütlich mit dem Virus. Habe mir Winzip Malware downgeloaded und nach dem 1. Virusscan kam er auf 100. Habe dann avira ausgeschaltet und den Rechner dann im abgesichertem Modus hochgefahren und noch mal mit Winzip gescannt.Dann waren es nur noch 2. Aber nach normalem Neustart bin ich wieder wie am Anfang.Aviera meldet sich minütlich und läßt sich auch nicht mehr ausschalten.
Habe eure Anweisungen durchgelesen,alles runtergeladen,logfiles erstellt und hoffe,ich hab's richtig gemacht und ihr könnt mir weiterhelfen.
Kann man auch den Verursacher feststellen ?
Was kann ich noch tun und kann ich weiter am PC arbeiten?
erstmal malware
Code:
Exportierte Ereignisse:

28.03.2014 09:12 [Echtzeit-Scanner] Malware gefunden
      In der Datei
      'C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\load
      er.dll'
      wurde ein Virus oder unerwünschtes Programm 'TR/BProtector.Gen' [trojan]
      gefunden.
      Ausgeführte Aktion: Zugriff erlauben
dann Defogger


Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 09:17 on 28/03/2014 (Besitzer)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

dann noch mal malware

Code:
Nico Mak Computing
WinZip Malware Protector
 
Datum der Überprüfung Freitag, 28. März 2014
Datenbankversion 1732
Gefundene Elemente insgesamt 2
Überprüfte Objekte: 289092
Abgelaufene Zeit: 00:19:56
Name Gefundene Elemente
Name der Infektion pup.adbundle
Kategorie Potentially Unwanted Application
Bedrohungsstufe High
Durchgeführte Aktion NoActionTaken
Elemente gefunden 1
 Gefundener Bereich FileSystem
Details Dateiname c:\users\besitzer\appdata\local\temp\icreinstall_pdfcreatorsetup.exe
MD5 0
Signatur 7489313295720763378
Md5hash:  3d3be8d9b7cc934c45158a67408ae382
 
 
Name der Infektion pup.optional
Kategorie Potentially Unwanted Application
Bedrohungsstufe High
Durchgeführte Aktion NoActionTaken
Elemente gefunden 1
 Gefundener Bereich FileSystem
Details Dateiname c:\users\besitzer\appdata\local\temp\is357113909\wajam_validate.exe
MD5 0
Signatur 6993739144339551831
Md5hash:  46f5c497f96e733176b010ff0ee56de3
 
 
© 2013 WinZip International LLC. All rights reserved.
dann noch ein 2. Mal

Code:
Nico Mak Computing
WinZip Malware Protector
 
Datum der Überprüfung Freitag, 28. März 2014
Datenbankversion 1732
Gefundene Elemente insgesamt 13
Überprüfte Objekte: 370375
Abgelaufene Zeit: 00:39:14
Name Gefundene Elemente
Name der Infektion adware.lollipop
Kategorie Adware
Bedrohungsstufe High
Durchgeführte Aktion NoActionTaken
Elemente gefunden 1
 Gefundener Bereich FileSystem
Details Dateiname c:\program files (x86)\delta\delta\1.8.24.6\uninstall.exe
MD5 7748294090907875384
Signatur 0
Md5hash:  7d0cacaf87e8a3c7de34dcee498a4f1c
 
 
Name der Infektion malware.agent
Kategorie Generic Malware 
Bedrohungsstufe High
Durchgeführte Aktion NoActionTaken
Elemente gefunden 6
 Gefundener Bereich FileSystem
Details Dateiname c:\games\iwin.com games\jewel quest mysteries the oracle of ur ce\assets\public\screensavers\screensaver1.scr
MD5 0
Signatur 739312635391478566
Md5hash:  0639b15a83b06a6432ef82645f05346e
 
Gefundener Bereich FileSystem
Details Dateiname c:\games\iwin.com games\jewel quest mysteries the oracle of ur ce\assets\public\screensavers\screensaver2.scr
MD5 0
Signatur 739312635391478566
Md5hash:  0639b15a83b06a6432ef82645f05346e
 
Gefundener Bereich FileSystem
Details Dateiname c:\games\iwin.com games\jewel quest mysteries the oracle of ur ce\assets\public\screensavers\screensaver3.scr
MD5 0
Signatur 739312635391478566
Md5hash:  0639b15a83b06a6432ef82645f05346e
 
Gefundener Bereich FileSystem
Details Dateiname c:\games\iwin.com games\jewel quest mysteries the oracle of ur ce\assets\public\screensavers\screensaver4.scr
MD5 0
Signatur 739312635391478566
Md5hash:  0639b15a83b06a6432ef82645f05346e
 
Gefundener Bereich FileSystem
Details Dateiname c:\games\iwin.com games\jewel quest mysteries the oracle of ur ce\assets\public\screensavers\screensaver5.scr
MD5 0
Signatur 739312635391478566
Md5hash:  0639b15a83b06a6432ef82645f05346e
 
Gefundener Bereich FileSystem
Details Dateiname c:\program files (x86)\jewel quest - der saphirdrache\jewelquest6screensaver.scr
MD5 0
Signatur 739312635391478566
Md5hash:  0639b15a83b06a6432ef82645f05346e
 
 
Name der Infektion pup.optional
Kategorie Potentially Unwanted Application
Bedrohungsstufe High
Durchgeführte Aktion NoActionTaken
Elemente gefunden 3
 Gefundener Bereich FileSystem
Details Dateiname c:\program files\popcap games\mystery pi\popuninstall.exe
MD5 0
Signatur 3599656126640927110
Md5hash:  b53bc816105a8bce0b0faa288ef672de
 
Gefundener Bereich FileSystem
Details Dateiname c:\program files (x86)\delta\delta\1.8.24.6\deltaeng.dll
MD5 0
Signatur 9388227442667220930
Md5hash:  23a0125c2f25f37fe6485fdd62d9877a
 
Gefundener Bereich FileSystem
Details Dateiname c:\program files (x86)\delta\delta\1.8.24.6\deltasrv.exe
MD5 0
Signatur 17071956846505188488
Md5hash:  61ee48261fd29e38253ecfa6ce639327
 
 
Name der Infektion malware.gen
Kategorie Generic Malware 
Bedrohungsstufe High
Durchgeführte Aktion NoActionTaken
Elemente gefunden 3
 Gefundener Bereich FileSystem
Details Dateiname c:\program files (x86)\aegypten box\uninstal.exe
MD5 0
Signatur 1902896773625662358
Md5hash:  f2f6bf7003eb87fafbce34d854bfedcb
 
Gefundener Bereich FileSystem
Details Dateiname c:\program files (x86)\der fluch des aegyptischen artefakts\uninstal.exe
MD5 0
Signatur 1902896773625662358
Md5hash:  94204845a9bfd8069c21a73fbc411811
 
Gefundener Bereich FileSystem
Details Dateiname c:\program files (x86)\popcap games\amazing adventures 2\amazingadventures2.exe
MD5 0
Signatur 2056818707839515693
Md5hash:  6bbffb701ab5ccf687484740305bfe89
 
 
© 2013 WinZip International LLC. All rights reserved.
da wäre noch .... FRST




FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Besitzer (administrator) on CONNYPC on 28-03-2014 09:26:06
Running from C:\Users\Besitzer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intenium) C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Users\Besitzer\Desktop\Gmer-19357.exe
() C:\Users\Besitzer\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [525312 2010-12-17] (IDT, Inc.)
HKLM\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2011-01-27] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1561768 2012-05-04] (Ask)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-12] (Easybits)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [WinZip Malware Protector_startup] - C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [6390136 2013-03-26] (Nico Mak Computing)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-12] (Hewlett-Packard)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [Spiele Post] - C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe [483400 2013-12-06] (Intenium)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [247728 2011-04-22] (TomTom)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [NTRedirect] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: {a496f38a-dfce-11e0-a586-984be1b1002d} - F:\LaunchU3.exe -a
AppInit_DLLs: c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll => C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\loader.dll [1958880 2013-11-18] ()
AppInit_DLLs:  c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
GroupPolicyUsers\S-1-5-21-619880712-574751267-193086799-1006\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=3646AC81125A277A&affID=119357&tt=288013_icon&tsp=4988
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?babsrc=HP_ss_Btisdt7&mntrId=3646AC81125A277A&affID=119357&tt=288013_icon&tsp=4988
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {647809D8-3F44-4F72-A81B-6ED305E9F372} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {647809D8-3F44-4F72-A81B-6ED305E9F372} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=3646AC81125A277A&affID=119357&tt=288013_icon&tsp=4988
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=3646AC81125A277A&affID=119357&tt=288013_icon&tsp=4988
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {647809D8-3F44-4F72-A81B-6ED305E9F372} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - No Name - {82E1477C-B154-48D3-9891-33D83C26BCD3} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-04-13] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default
FF user.js: detected! => C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\user.js
FF NewTab: user_pref("browser.newtab.url", "");
FF Homepage: hxxp://www.arcor.de/ums/ums_ordner.jsp?ordnername=Posteingang
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Lyrics Seeker - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\Extensions\133 [2013-09-12]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-09]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-09]
FF HKCU\...\Firefox\Extensions: [{72273571-743d-427e-a1c1-0538fbc2ddd3}] - C:\Program Files (x86)\LyricsSeeker\133.xpi
FF Extension: Lyrics Seeker - C:\Program Files (x86)\LyricsSeeker\133.xpi [2013-09-12]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-02-28] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
U3 fxldqpog; \??\C:\Users\Besitzer\AppData\Local\Temp\fxldqpog.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-28 09:21 - 2014-03-28 09:25 - 00055350 _____ () C:\Users\Besitzer\Desktop\Addition.txt
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2014-03-28 09:20 - 2014-03-28 09:26 - 00022257 _____ () C:\Users\Besitzer\Desktop\FRST.txt
2014-03-28 09:20 - 2014-03-28 09:26 - 00000000 ____D () C:\FRST
2014-03-28 09:19 - 2014-03-28 09:19 - 02157056 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-03-28 09:18 - 2014-03-28 09:18 - 01145856 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST.exe
2014-03-28 09:16 - 2014-03-28 09:17 - 00000478 _____ () C:\Users\Besitzer\Desktop\defogger_disable.log
2014-03-28 09:16 - 2014-03-28 09:16 - 00000000 _____ () C:\Users\Besitzer\defogger_reenable
2014-03-28 09:15 - 2014-03-28 09:15 - 00050477 _____ () C:\Users\Besitzer\Desktop\Defogger.exe
2014-03-28 08:56 - 2014-03-28 08:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 08:53 - 2014-03-28 09:12 - 00000700 _____ () C:\Users\Besitzer\Desktop\Ereignisse.txt
2014-03-28 08:23 - 2014-03-28 08:23 - 00003063 _____ () C:\Users\Besitzer\Desktop\log.xml
2014-03-28 00:41 - 2014-03-28 00:41 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{117BFF30-99ED-4EE8-A192-ABDB287B41DB}
2014-03-28 00:38 - 2014-03-28 00:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 00:07 - 2014-03-28 00:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 00:00 - 2014-03-28 00:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 22:52 - 2014-03-28 08:58 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-27 22:52 - 2014-03-28 08:23 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-27 22:52 - 2014-03-28 00:38 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-27 22:52 - 2014-03-28 00:38 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-27 22:52 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe
2014-03-27 22:51 - 2014-03-27 22:52 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 13:21 - 2014-03-28 08:56 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-27 13:21 - 2014-03-28 08:56 - 00000000 ____D () C:\Windows\Minidump
2014-03-27 13:21 - 2014-03-27 13:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-21 20:11 - 2014-03-21 20:11 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-14 23:18 - 2014-03-14 23:18 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E6B09C02-1B09-46F9-9916-330D55CD52D6}
2014-03-11 23:40 - 2014-03-11 23:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-11 23:40 - 2014-03-11 23:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien

==================== One Month Modified Files and Folders =======

2014-03-28 09:26 - 2014-03-28 09:20 - 00022257 _____ () C:\Users\Besitzer\Desktop\FRST.txt
2014-03-28 09:26 - 2014-03-28 09:20 - 00000000 ____D () C:\FRST
2014-03-28 09:26 - 2014-02-11 22:26 - 00000304 _____ () C:\Windows\Tasks\Digital Sites.job
2014-03-28 09:26 - 2013-08-29 21:26 - 00000229 _____ () C:\Users\Besitzer\AppData\Roaming\WB.CFG
2014-03-28 09:26 - 2013-08-28 21:26 - 00000298 _____ () C:\Windows\Tasks\DSite.job
2014-03-28 09:25 - 2014-03-28 09:21 - 00055350 _____ () C:\Users\Besitzer\Desktop\Addition.txt
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2014-03-28 09:19 - 2014-03-28 09:19 - 02157056 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-03-28 09:18 - 2014-03-28 09:18 - 01145856 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST.exe
2014-03-28 09:17 - 2014-03-28 09:16 - 00000478 _____ () C:\Users\Besitzer\Desktop\defogger_disable.log
2014-03-28 09:16 - 2014-03-28 09:16 - 00000000 _____ () C:\Users\Besitzer\defogger_reenable
2014-03-28 09:16 - 2011-07-25 11:05 - 00000000 ____D () C:\Users\Besitzer
2014-03-28 09:15 - 2014-03-28 09:15 - 00050477 _____ () C:\Users\Besitzer\Desktop\Defogger.exe
2014-03-28 09:12 - 2014-03-28 08:53 - 00000700 _____ () C:\Users\Besitzer\Desktop\Ereignisse.txt
2014-03-28 09:05 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-28 09:05 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-28 09:02 - 2011-05-01 00:53 - 01602731 _____ () C:\Windows\WindowsUpdate.log
2014-03-28 08:58 - 2014-03-27 22:52 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-28 08:58 - 2011-09-09 21:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-03-28 08:57 - 2012-03-30 19:46 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-03-28 08:56 - 2014-03-28 08:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 08:56 - 2014-03-27 13:21 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-28 08:56 - 2014-03-27 13:21 - 00000000 ____D () C:\Windows\Minidump
2014-03-28 08:56 - 2013-09-12 21:00 - 00000394 _____ () C:\Windows\Tasks\Lyrics Seeker Update.job
2014-03-28 08:56 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-28 08:56 - 2009-07-14 05:51 - 00179060 _____ () C:\Windows\setupact.log
2014-03-28 08:55 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-28 08:23 - 2014-03-28 08:23 - 00003063 _____ () C:\Users\Besitzer\Desktop\log.xml
2014-03-28 08:23 - 2014-03-27 22:52 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-28 00:41 - 2014-03-28 00:41 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{117BFF30-99ED-4EE8-A192-ABDB287B41DB}
2014-03-28 00:38 - 2014-03-28 00:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 00:38 - 2014-03-27 22:52 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-28 00:38 - 2014-03-27 22:52 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-28 00:34 - 2010-11-21 04:47 - 00580408 _____ () C:\Windows\PFRO.log
2014-03-28 00:32 - 2011-09-07 21:03 - 00000000 ____D () C:\Users\Besitzer\Desktop\Wimmelbild
2014-03-28 00:07 - 2014-03-28 00:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 00:00 - 2014-03-28 00:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 22:52 - 2014-03-27 22:51 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 13:21 - 2014-03-27 13:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-26 22:37 - 2011-09-07 10:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\SoftGrid Client
2014-03-26 13:01 - 2013-03-23 23:54 - 00003204 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForBesitzer
2014-03-26 13:01 - 2013-03-23 23:54 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForBesitzer.job
2014-03-24 07:32 - 2011-12-24 20:35 - 00000000 ____D () C:\Users\Lisa\AppData\Local\CrashDumps
2014-03-21 20:11 - 2014-03-21 20:11 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-21 19:01 - 2011-09-09 21:03 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-17 21:44 - 2011-04-14 01:04 - 00658120 _____ () C:\Windows\system32\perfh007.dat
2014-03-17 21:44 - 2011-04-14 01:04 - 00131202 _____ () C:\Windows\system32\perfc007.dat
2014-03-17 21:44 - 2009-07-14 06:13 - 01508746 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-16 23:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-14 23:18 - 2014-03-14 23:18 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E6B09C02-1B09-46F9-9916-330D55CD52D6}
2014-03-12 23:17 - 2012-08-30 19:10 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 23:17 - 2011-09-07 15:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 23:15 - 2011-09-07 18:12 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-03-11 23:40 - 2014-03-11 23:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-11 23:40 - 2014-03-11 23:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien

Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\AskSLib.dll
C:\Users\Besitzer\AppData\Local\Temp\avgnt.exe
C:\Users\Besitzer\AppData\Local\Temp\bfguni.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\tmqjb5q9.dll
C:\Users\Besitzer\AppData\Local\Temp\zcenhbks.dll
C:\Users\Lisa\AppData\Local\Temp\APNStub.exe
C:\Users\Lisa\AppData\Local\Temp\AskSLib.dll
C:\Users\Lisa\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-17 13:53

==================== End Of Log ============================
--- --- ---


Ich hätte da noch die Addition

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Besitzer at 2014-03-28 09:26:56
Running from C:\Users\Besitzer\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

100 Prozent Wimmelbild (HKLM-x32\...\{149F9A5E-889D-474B-BA15-AFA0E614E5EA}_is1) (Version:  - cerasus.media GmbH)
1001 Nacht - Die Abenteuer von Sindbad (HKLM-x32\...\1001 Nacht - Die Abenteuer von Sindbad) (Version:  - )
20.000 Meilen unter dem Meer (HKLM-x32\...\{6692A6CC-6EDA-40C3-8F57-1E8ECD5AE2E0}) (Version: 1.00.0000 - Purplehills)
3 Days - Amulet Secret (HKLM-x32\...\3 Days - Amulet Secret_is1) (Version:  - Realore Studios)
3*3 Match (HKCU\...\3*3 Match) (Version:  - )
5600 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
5600_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
5600Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
Abenteuer Hawaii - Pearl Harbor (HKLM-x32\...\Abenteuer Hawaii - Pearl Harbor) (Version:  - )
Abenteuer Hawaii 2 - Die Verborgene Insel (HKLM-x32\...\Abenteuer Hawaii 2 - Die Verborgene Insel) (Version:  - )
Abenteuer von Luxor (HKLM-x32\...\Abenteuer von Luxor) (Version: 1.1.0.0 - MumboJumbo)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.2.152.32 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.1) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.1 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
Aegypten Box (HKLM-x32\...\Aegypten Box) (Version:  - )
Affair Bureau (HKLM-x32\...\Affair Bureau) (Version: 1.0.0.0 - INTENIUM GmbH)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
Agatha Christie Death on the Nile (HKLM-x32\...\{4C33389D-0F65-40A3-B76C-897502500C4B}) (Version: 1.0.0 - JoWood)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Akademie der Magie 2 (HKLM-x32\...\Akademie der Magie 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Alabama Smith (HKLM-x32\...\Alabama Smith) (Version:  - )
Alabama Smith 2 (HKLM-x32\...\Alabama Smith 2) (Version:  - )
Aladins Wunderlampe (HKLM-x32\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM-x32\...\Alamandi) (Version: 1.0.0.0 - INTENIUM GmbH)
Amazing Adventures Around the World (HKLM-x32\...\Amazing Adventures Around the World) (Version:  - PopCap Games)
AMD Fuel (Version: 2011.0228.1151.21177 - Ihr Firmenname) Hidden
Ancient Mysteries (HKLM-x32\...\Ancient Mysteries_is1) (Version:  - astragon Software GmbH)
Ancient Quest of Saqqarah (HKLM-x32\...\Ancient Quest of Saqqarah/DE-German_is1) (Version:  - City Interactive)
Animal Agents (HKLM-x32\...\{7B5A952B-3150-4037-BE90-D94DFB717713}_is1) (Version:  - cerasus.media GmbH)
Ankh_hog (HKLM-x32\...\Ankh_hog) (Version:  - )
Annies Millions (HKLM-x32\...\Annies Millions) (Version: 1.0.0.0 - INTENIUM GmbH)
Antique Road Trip U.S.A. (HKLM-x32\...\Antique Road Trip U.S.A.) (Version: 1.0.0.0 - INTENIUM GmbH)
Ashley Jones – Reise Ins Alte Ägypten (HKLM-x32\...\Ashley Jones – Reise Ins Alte Ägypten) (Version:  - )
Ask Toolbar (HKLM-x32\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.2.0 - Ask.com) <==== ATTENTION
Ask Toolbar Updater (HKCU\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.1.23037 - Ask.com) <==== ATTENTION
ATI Catalyst Install Manager (HKLM\...\{7FBA6627-88F8-0AE0-9326-FB8488DD26E0}) (Version: 3.0.812.0 - ATI Technologies, Inc.)
AtlantisQuest (HKLM-x32\...\{1D619FC4-4F88-406C-9E78-B948BFC998FA}) (Version: 1.00.0000 - Ihr Firmenname)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Aztec Adventures (HKLM-x32\...\Aztec Adventures/DE-German_is1) (Version:  - City Interactive)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bejeweled Twist (HKLM-x32\...\Bejeweled Twist) (Version:  - )
Big City Mystery (HKLM-x32\...\{9918955A-AA7E-4C18-AB5D-B949A1314347}_is1) (Version:  - cerasus.media GmbH)
Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.2.0.6 - )
Big Rig Europe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
BitGuard (HKLM-x32\...\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}) (Version:  - MediaTechSoft Inc.) <==== ATTENTION
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Build-a-lot 3 (HKLM-x32\...\Build-a-lot 3) (Version:  - )
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0228.1151.21177 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0228.1151.21177 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0228.1151.21177 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help English (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help French (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help German (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
ccc-core-static (x32 Version: 2011.0228.1151.21177 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2011.0228.1151.21177 - ATI) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Christmasville (HKLM-x32\...\{D178746E-0919-424E-88A7-81A0E46FF03E}) (Version: 1.00.0000 - Purplehills)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
City Style (HKLM-x32\...\City Style) (Version:  - )
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Cradle of Egypt (HKLM-x32\...\{2C02C8E3-CF3B-44BE-98C8-12A16EAF2713}_is1) (Version:  - cerasus.media GmbH)
Cradle of Rome 2 (HKLM-x32\...\{E60E8119-F64A-436B-8449-4FF87FC97350}_is1) (Version:  - cerasus.media GmbH)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Curse of the Pharaoh: Die Tr&auml;nen der Sachmet (HKLM-x32\...\BFG-Curse of the Pharaoh - Die Traenen der Sachmet) (Version:  - )
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.3922 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.1.3922 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Tales: Der Goldkafer von Edgar Allan Poe (HKLM-x32\...\BFG-Dark Tales - Der Goldkafer von Edgar Allan Poe) (Version:  - )
Das Geheimnis des Pharaos (HKLM-x32\...\Das Geheimnis des Pharaos) (Version:  - )
Das geheimnisvolle Tagebuch (HKLM-x32\...\Das geheimnisvolle Tagebuch) (Version:  - )
Das rätselhafte Kristall-Portal (HKLM-x32\...\Das rätselhafte Kristall-Portal) (Version:  - )
Das Schicksal der Marie Antoinette (HKLM-x32\...\Das Schicksal der Marie Antoinette) (Version:  - )
Das Vermächtnis: Die Legende des Heiligen Schatzes (HKLM-x32\...\Chronicles of Mystery 3/DE-German_is1) (Version:  - City Interactive)
Definition update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{28857979-5507-4C10-A922-FF709A19D38C}) (Version:  - Microsoft)
Delta Chrome Toolbar (HKLM-x32\...\Delta Chrome Toolbar) (Version:  - Visual Tools) <==== ATTENTION
Delta toolbar  (HKLM-x32\...\delta) (Version: 1.8.24.6 - Delta) <==== ATTENTION
Der Fluch des Aegyptischen Artefakts (HKLM-x32\...\Der Fluch des Aegyptischen Artefakts) (Version:  - )
Der Graf von Monte Christo (HKLM-x32\...\Der Graf von Monte Christo) (Version: 1.0.0.0 - INTENIUM GmbH)
Der Stein der Weisen (HKLM-x32\...\Der Stein der Weisen) (Version:  - )
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)
DEUTSCHLAND SPIELT Spiele Post (HKLM-x32\...\DEUTSCHLAND SPIELT Spiele Post) (Version: 1.0.2.4 - INTENIUM GmbH)
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
Die 4 Elemente (HKLM-x32\...\Die 4 Elemente) (Version:  - )
Die Abenteuer-Reise (HKLM-x32\...\Die Abenteuer-Reise) (Version: 1.0.0.0 - INTENIUM GmbH)
Die Jade-Münze (HKLM-x32\...\Die Jade-Münze) (Version: 1.0.0.0 - INTENIUM GmbH)
Die Kunst des Mordens: Der Marionettenspieler (HKLM-x32\...\Art of Murder 2/DE-German_is1) (Version:  - City Interactive)
Die Legende von Pocahontas (HKLM-x32\...\{3BFA752E-2E76-4964-BDA3-94B486A18223}_is1) (Version:  - cerasus.media GmbH)
Die Sage von Kolossus (HKLM-x32\...\Die Sage von Kolossus) (Version:  - )
Die Schatzsucher: Visionen des Goldes ™ (HKLM-x32\...\BFG-Die Schatzsucher - Visionen des Goldes) (Version:  - )
Die Schlange der Isis ™ (HKLM-x32\...\BFG-Die Schlange der Isis) (Version:  - )
Die Wiege Olympias 2 (HKLM-x32\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
DriverTuner 3.1.0.1 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.1 - LionSea SoftWare)
Eldorado (HKLM-x32\...\{6540D6AD-4218-444D-84EC-E6C85F35EE31}) (Version: 1.00.0000 - Purplehills)
Emily Archer und der Fluch des Tutanchamun (HKLM-x32\...\{D09BA721-DF68-4149-883C-F2AE7A808962}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Escape from Lost Island (HKLM-x32\...\Escape from Lost Island) (Version: 1.0.0.0 - INTENIUM GmbH)
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Fallen Shadows - Schatten der Kindheit (HKLM-x32\...\{AE2893E9-145A-41AC-85C6-ED046B13572E}) (Version: 1.0.0 - Happy Muffin Top)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Fiona Finch (HKLM-x32\...\Fiona Finch) (Version: 1.0.0.0 - INTENIUM GmbH)
Fishdom (x32 Version: 2.2.0.95 - WildTangent) Hidden
Frankenstein (HKLM-x32\...\{610B773E-3183-43D5-B01D-862EFF276B81}) (Version: 1.00.0000 - Ihr Firmenname)
freundin - Big City Mystery (HKLM-x32\...\{1F9A14A2-BC64-40D2-9241-4470345298C7}_is1) (Version:  - cerasus.media GmbH)
freundin - Goldenes Prag (HKLM-x32\...\{9E8AA698-979E-4694-A2C3-10591194328A}_is1) (Version:  - cerasus.media GmbH)
freundin - Romance of Rome (HKLM-x32\...\{5E70B619-B3D0-4B50-B57E-5CEBE0201248}_is1) (Version:  - cerasus.media GmbH)
freundin - The Lost Inca Prophecy (HKLM-x32\...\{BE0DFE33-C23B-4111-A63D-ED0994DF3B2C}_is1) (Version:  - cerasus.media GmbH)
Garten-Glück (HKLM-x32\...\Garten-Glück) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheime Fälle: Die gestohlene Venus (HKLM-x32\...\Geheime Fälle: Die gestohlene Venus) (Version:  - )
Geheime Fälle: Die gestohlene Venus 2 (HKLM-x32\...\Geheime Fälle: Die gestohlene Venus 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheime Fälle: Vermisst in Rom (HKLM-x32\...\Geheime Fälle: Vermisst in Rom) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM-x32\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Green Moon (HKLM-x32\...\Green Moon_is1) (Version:  - )
Haunting Mysteries (HKLM-x32\...\{9613E073-00BB-4244-AC06-BAC3DAF7B197}) (Version: 1.00.0000 - PurpleHills)
Heroes of Hellas 2 (HKLM-x32\...\{6E67E70D-606A-4EB0-8094-EFF064431435}) (Version: 1.00.0000 - Purplehills)
Herr des Wetters (HKLM-x32\...\Herr des Wetters) (Version: 1.0.0.0 - INTENIUM GmbH)
Hidden Expedition: Amazon ™ (HKLM-x32\...\BFG-Hidden Expedition Amazon) (Version:  - )
Hidden Magic (HKLM-x32\...\Hidden Magic) (Version: 1.0.0.0 - INTENIUM GmbH)
Hidden Object Crosswords (HKLM-x32\...\Hidden Object Crosswords) (Version: 1.0.0.0 - INTENIUM GmbH)
Hide And Secret 3 (HKLM-x32\...\Hide And Secret 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Holly - Ein Weihnachtsmärchen (HKLM-x32\...\{8F08E12A-363F-4F69-8BC8-0E0EA502A6ED}) (Version: 1.00.0000 - Purplehills)
Holly im Wunderland (HKLM-x32\...\Holly im Wunderland) (Version:  - )
HP Auto (Version: 1.0.12494.3472 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Connection Manager (HKLM-x32\...\{795AADBF-58C2-42D0-B779-E730702A247E}) (Version: 4.0.45.1 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Documentation (HKLM-x32\...\{6C453C9C-38AE-494D-BF89-7AA0DE87F3E5}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP On Screen Display (HKLM-x32\...\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}) (Version: 1.1.2 - Hewlett-Packard Company)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{EB58480C-0721-483C-B354-9D35A147999F}) (Version: 2.3.6 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Software Framework (HKLM-x32\...\{CE4551E8-8D09-4126-A39B-B7DF82C5EB83}) (Version: 4.0.110.1 - Hewlett-Packard Company)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{E92D47A1-D27D-430A-8368-0BAFD956507D}) (Version: 5.2.9.2 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6319.0 - IDT)
Insaniquarium Deluxe (HKLM-x32\...\Insaniquarium Deluxe) (Version:  - )
Insel der Feen - Fairy Island (HKLM-x32\...\Insel der Feen - Fairy Island) (Version: 1.0.0.0 - INTENIUM GmbH)
Jane Lucky (HKLM-x32\...\Jane Lucky) (Version: 1.0.0.0 - INTENIUM GmbH)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle)
Java(TM) 6 Update 24 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216024FF}) (Version: 6.0.240 - Oracle)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Jewel Mystery: Die Villa (HKLM-x32\...\Jewel Mystery: Die Villa) (Version: 1.0.0.0 - INTENIUM GmbH)
Jewel Quest Mysteries 2: Trail of the Midnight Heart (nur deinstallation) (HKLM-x32\...\Jewel Quest Mysteries 2: Trail of the Midnight Heart) (Version:  - )
Jewel Quest Mysteries Curse Of The Emerald Tear (nur deinstallation) (HKLM-x32\...\Jewel Quest Mysteries Curse Of The Emerald Tear) (Version:  - )
Jewel Quest Mysteries: The Oracle of Ur CE (HKLM-x32\...\Jewel Quest Mysteries: The Oracle of Ur CE) (Version: 3.32.0.0 - iWin.com)
Jewel Quest Mysteries: The Seventh Gate (HKLM-x32\...\BFG-Jewel Quest Mysteries - The Seventh Gate) (Version:  - )
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest: Der Saphirdrache (HKLM-x32\...\BFG-Jewel Quest - Der Saphirdrache) (Version:  - )
Jewels of Atlantis (HKLM-x32\...\Jewels of Atlantis/DE-German_is1) (Version:  - City Interactive)
Jules Vernes: Das Abenteuer Jangada (HKLM-x32\...\Jules Vernes: Das Abenteuer Jangada) (Version: 1.0.0.0 - INTENIUM GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kochprofi (HKLM-x32\...\Kochprofi) (Version: 1.0.0.0 - INTENIUM GmbH)
Kuros (HKLM-x32\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Laura Jones 2 (HKLM-x32\...\Laura Jones 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Legends of the Wild West: Golden Hill (HKLM-x32\...\Legends of the Wild West/DE-German_is1) (Version:  - City Interactive)
Lost Realms: Der Fluch von Babylon (HKLM-x32\...\BFG-Lost Realms - Der Fluch von Babylon) (Version:  - )
Lost Secrets - Bermuda Dreieck (HKLM-x32\...\Lost Secrets - Bermuda Dreieck) (Version: 1.0 - Astragon)
Lyrics Seeker (HKLM-x32\...\{dea87efb-043e-4206-8b34-616fb4677a57}) (Version:  - Lyris Seeker Addon) <==== ATTENTION
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS)
Magic Encyclopedia (HKLM-x32\...\Magic Encyclopedia) (Version:  - )
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mahjong Escape – Ancient China (HKLM-x32\...\Mahjong Escape – Ancient China) (Version:  - )
Mahjongg Artifacts 2 (HKLM-x32\...\Mahjongg Artifacts 2) (Version:  - )
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Master Wu (HKLM-x32\...\Master Wu) (Version:  - )
Maya - Fight for Jewels (HKLM-x32\...\Maya - Fight for Jewels_is1) (Version:  - Contendo Media GmbH)
Meine kleine Farm 2 (HKLM-x32\...\Meine kleine Farm 2) (Version:  - )
Meine kleine Farm 3 (HKLM-x32\...\Meine kleine Farm 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Meine kleine Farm 3: Ice Age (HKLM-x32\...\Meine kleine Farm 3: Ice Age) (Version: 1.0.0.0 - INTENIUM GmbH)
Meine kleine Farm 3: Russisches Roulette (HKLM-x32\...\Meine kleine Farm 3: Russisches Roulette) (Version: 1.0.0.0 - INTENIUM GmbH)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )
Mysterious City: Cairo (nur deinstallation) (HKLM-x32\...\Mysterious City: Cairo) (Version:  - )
Mystery Case Files&reg;: Dire Grove™ (HKLM-x32\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: 13th Skull (HKLM-x32\...\BFG-Mystery Case Files - 13th Skull) (Version:  - )
Mystery Case Files: Huntsville ™ (HKLM-x32\...\BFG-Mystery Case Files - Huntsville) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM-x32\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: Prime Suspects ™ (HKLM-x32\...\BFG-Mystery Case Files - Prime Suspects) (Version:  - )
Mystery of Montezuma (HKLM-x32\...\Mystery of Montezuma/DE-German_is1) (Version:  - City Interactive)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mystery P.I. - The Lottery Ticket 1.0.0.5 (HKLM-x32\...\Mystery P.I. - The Lottery Ticket 1.0.0.5) (Version:  - )
Mystery P.I. – The Vegas Heist (HKLM-x32\...\Mystery P.I. – The Vegas Heist) (Version:  - )
Mystery Tales - Insel der Träume (HKLM-x32\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Tales - Insel der Träume (HKLM-x32\...\{F6856F9B-881C-4BAF-8602-1E2DBA0EA8A7}_is1) (Version:  - cerasus.media GmbH)
Mysteryville 2 (HKLM-x32\...\{7730D510-6DE2-4CD4-8F58-0B04680AEFE6}) (Version: 1.00.0000 - Mysteryville 2)
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Natalie Brooks (HKLM-x32\...\Natalie Brooks) (Version:  - )
Natalie Brooks 2 (HKLM-x32\...\Natalie Brooks 2) (Version:  - )
Natalie Brooks 3 (HKLM-x32\...\Natalie Brooks 3) (Version: 1.0.0.0 - INTENIUM GmbH)
National Geographic: Herod's Lost Tomb (HKLM-x32\...\National Geographic - Herod's Lost Tomb/DE-German_is1) (Version:  - City Interactive)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM-x32\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Nightmares from the Deep (HKLM-x32\...\Nightmares from the Deep_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Odyssee ins Ungewisse (HKLM-x32\...\Odyssee ins Ungewisse) (Version: 1.0.0.0 - INTENIUM GmbH)
Open It! (HKLM-x32\...\OpenIt Open It!) (Version: 1.1.1 - OpenIt)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PirateVille (HKLM-x32\...\PirateVille) (Version:  - )
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Profiler (HKLM-x32\...\{164B5A9F-D9BD-4EC3-880E-61A4E6935EEB}) (Version: 1.00.0000 - Purplehills)
Real Crimes - Jack The Ripper (HKLM-x32\...\Real Crimes - Jack The Ripper) (Version: 1.00 - phenomedia publishing gmbh)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.34.1130.2010 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.10.0416 - REALTEK Semiconductor Corp.)
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
Redemption Cemetery: Der Fluch des Raben (HKLM-x32\...\BFG-Redemption Cemetery - Der Fluch des Raben) (Version:  - )
Ritter Arthur (HKLM-x32\...\Ritter Arthur) (Version:  - )
Robinson Crusoe (HKLM-x32\...\{7DF5A0FE-EEC4-439A-A3B5-DF91958DD5A7}_is1) (Version:  - cerasus.media GmbH)
Romance of Rome (HKLM-x32\...\{02CF7793-9F94-45E9-BB0F-E0E5FAB463E6}_is1) (Version:  - cerasus.media GmbH)
Samantha Swift and the Fountains of Fate (HKLM-x32\...\Samantha Swift and the Fountains of Fate) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Golden Touch (HKLM-x32\...\Samantha Swift and the Golden Touch) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Hidden Roses of Athena (HKLM-x32\...\Samantha Swift and the Hidden Roses of Athena) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Mystery from Atlantis (HKLM-x32\...\Samantha Swift and the Mystery from Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Schatz der Azteken (HKLM-x32\...\Schatz der Azteken) (Version:  - )
Secrets of Vatican (HKLM-x32\...\{66B76A83-4B3A-4218-82A4-862E26B745CA}) (Version: 1.00.0000 - Purplehills)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Snark Busters - Willkommen im Club (HKLM-x32\...\Snark Busters - Willkommen im Club) (Version:  - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Sony Ericsson Update Engine (HKLM-x32\...\Update Engine) (Version: 2.13.10.201308300830 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spannende Abenteuer Die verschollene Grabkammer (HKLM-x32\...\Spannende Abenteuer Die verschollene Grabkammer) (Version:  - )
Sprill && Ritchie (HKLM-x32\...\Sprill && Ritchie) (Version:  - )
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
StoneLoops of Jurassica (HKLM-x32\...\StoneLoops of Jurassica/DE-German_is1) (Version:  - City Interactive)
Strike Ball 3 (HKLM-x32\...\Strike Ball 3) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.4.4 - Synaptics Incorporated)
Tatort Museum (HKLM-x32\...\Tatort Museum) (Version: 1.0.0.0 - INTENIUM GmbH)
Tatort Museum 2 (HKLM-x32\...\Tatort Museum 2) (Version: 1.0.0.0 - INTENIUM GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer)
The Magicians Handbook 2 (HKLM-x32\...\{85225E9A-0292-4CF4-93AC-05C2559D4A6D}) (Version: 1.00.0000 - Purplehills)
The Mystery of Meane Manor (HKLM-x32\...\The Mystery of Meane Manor) (Version: 1.1.0.0 - MumboJumbo)
Time Machine (HKLM-x32\...\{9F9D845C-A5F0-423B-9820-240771C7645D}) (Version: 1.00.0000 - Purplehills)
TomTom HOME 2.8.2.2264 (HKLM-x32\...\TomTom HOME) (Version: 2.8.2.2264 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Treasure Island (HKLM-x32\...\{68EB8188-55D4-4BFA-9F37-F8167B095B17}) (Version: 1.00.0000 - Purplehills)
Treasure Masters, Inc. (HKLM-x32\...\Treasure Masters, Inc.) (Version:  - )
Treasures Of Mystery Island (HKLM-x32\...\Treasures Of Mystery Island) (Version:  - )
Tropical Lost Island (HKLM-x32\...\Tropical Lost Island/DE-German_is1) (Version:  - City Interactive)
Um die Welt in 80 Tagen - Wimmelbild (HKLM-x32\...\{4DE19B10-BF0A-40E4-85D7-C5CE09D83D92}) (Version: 1.00.0000 - Purplehills)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Unsolved Mystery Club - Amelia Earhart (HKLM-x32\...\Unsolved Mystery Club - Amelia Earhart) (Version:  - )
Update for Microsoft Office 2010 (KB2202188) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{86B7A074-265D-420C-9E1E-7A920EF0ECA7}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{556146F7-74AE-4E0A-B64F-5B8B93469F61}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B5516874-E926-4BFD-B412-D0E70112F244}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D6CE7280-6EE3-419A-8F47-DB111C040B1B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2523113) (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{C0FF04BF-A05E-408B-81CA-B7FACDA508A3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2523113) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{C0FF04BF-A05E-408B-81CA-B7FACDA508A3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2493983) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{309EEC22-83CE-4109-B019-BA9392FAA322}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector (KB2583935) (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{EDED840F-DD92-47ED-A2E4-63F6AC745B92}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector (KB2583935) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EDF9874C-9E37-4110-9FC3-094247E114DF}) (Version:  - Microsoft)
Update for Zip Opener (HKCU\...\DSite) (Version:  - ) <==== ATTENTION
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
Walsingham‘s Manor - Verlies der Seelen (HKLM-x32\...\Walsingham‘s Manor - Verlies der Seelen_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinZip Malware Protector (HKLM-x32\...\WinZip Malware Protector_is1) (Version: 2.1.1000.10740 - WinZip International LLC)
WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
World of Wimmelbild 2 (HKLM-x32\...\World of Wimmelbild 2) (Version:  - )
Youda Legend (HKLM-x32\...\Youda Legend) (Version:  - )
Youda Legend Der goldene Paradiesvogel (HKLM-x32\...\Youda Legend Der goldene Paradiesvogel) (Version:  - )
Zip Opener Packages (HKCU\...\Zip Opener Packages) (Version:  - ) <==== ATTENTION
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Restore Points  =========================

22-11-2012 19:14:01 Geplanter Prüfpunkt
03-12-2012 17:06:59 Geplanter Prüfpunkt
18-12-2012 22:07:31 Geplanter Prüfpunkt
28-12-2012 08:41:52 Geplanter Prüfpunkt
14-01-2013 20:30:48 Geplanter Prüfpunkt
11-02-2013 13:06:09 Installed Java 7 Update 13
27-02-2013 18:59:48 Geplanter Prüfpunkt
07-03-2013 17:22:40 Installed Java 7 Update 17
24-03-2013 22:30:15 Geplanter Prüfpunkt
12-05-2013 19:30:41 Geplanter Prüfpunkt
10-06-2013 22:27:15 Geplanter Prüfpunkt
20-06-2013 20:18:43 Geplanter Prüfpunkt
03-07-2013 20:35:10 Installed Java 7 Update 25
14-07-2013 18:42:27 Windows Update
07-08-2013 20:58:01 Geplanter Prüfpunkt
13-08-2013 21:01:19 Installiert REALTEK PCIE Wireless LAN Driver
25-08-2013 17:45:17 Geplanter Prüfpunkt
07-09-2013 20:20:17 Installiert REALTEK PCIE Wireless LAN Driver
15-09-2013 09:48:53 Sony PC Companion
15-09-2013 09:57:23 Sony PC Companion
15-09-2013 10:00:53 Uninstalled Sony Ericsson Drivers
15-09-2013 10:01:26 Installed Sony Ericsson Drivers
20-09-2013 08:06:18 Installed Samsung Kies
06-10-2013 19:20:11 DirectX wurde installiert
06-10-2013 20:04:46 Haunting Mysteries wurde installiert.
17-11-2013 21:24:56 Geplanter Prüfpunkt
05-12-2013 22:47:11 Geplanter Prüfpunkt
15-12-2013 20:12:02 Geplanter Prüfpunkt
18-12-2013 20:49:58 DirectX wurde installiert
26-12-2013 13:38:26 Installed Java 7 Update 45
19-01-2014 14:00:11 Geplanter Prüfpunkt
22-01-2014 13:41:01 Sony PC Companion
31-01-2014 08:30:26 Installed Java 7 Update 51
07-02-2014 15:19:13 Sony PC Companion
24-02-2014 17:17:11 Sony PC Companion
17-03-2014 13:00:43 Geplanter Prüfpunkt
27-03-2014 23:06:06 WinZip Malware Protector

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0179FA9F-05A8-4799-A238-D16C528A3315} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-03-26] (Nico Mak Computing)
Task: {12C54320-026B-4E61-B504-0E96FC00E05B} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2012-05-04] () <==== ATTENTION
Task: {2028D30E-633D-410D-830D-981298550799} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink)
Task: {262902C5-9376-4E7F-BC8A-D0BC75CB83D9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {33078020-8F6E-4D32-9436-737053F96DCE} - System32\Tasks\HPCeeScheduleForBesitzer => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {37CB5728-2BEC-453C-B7FF-D37DAC817765} - System32\Tasks\Digital Sites => C:\Users\Besitzer\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {5B13AA26-741E-4D6C-A585-23ECF5DB0BA5} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-31] ()
Task: {5B20CC1D-E3D5-47E0-9312-457D594BCC0D} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== ATTENTION
Task: {5ECC2806-A0FD-4E5A-96F5-0B9D3353E436} - System32\Tasks\Lyrics Seeker Update => C:\Program Files (x86)\LyricsSeeker\Lupdate.exe <==== ATTENTION
Task: {6461CFE0-9ABD-441B-AEBA-9D242E5F39B7} - System32\Tasks\WinZip Malware Protector => C:\Program Files (x86)\WinZip Malware Protector\AppManager.exe [2013-03-26] (Nico Mak Computing)
Task: {6722B961-5E5A-4BE6-80DB-D39902A54C6D} - System32\Tasks\EPUpdater => C:\Users\Besitzer\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] () <==== ATTENTION
Task: {7A06B9E5-76A1-4208-BB0A-14DD979239FE} - System32\Tasks\DSite => C:\Users\Besitzer\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {977DB76C-E699-44C3-A351-4C9E0DDD0314} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {99607DA1-AB39-474C-BD4A-AEB4B72E42A5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {EC16804A-65EF-42BB-A6B7-E958C29679F6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-03-12] (Microsoft)
Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Besitzer\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\DSite.job => C:\Users\Besitzer\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\HPCeeScheduleForBesitzer.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Lyrics Seeker Update.job => C:\Program Files (x86)\LyricsSeeker\Lupdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\User_Feed_Synchronization-{0907793A-4E41-4A92-B5ED-210692D155D0}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2013-11-21 23:19 - 2013-11-18 15:32 - 01958880 ____N () C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\loader.dll
2011-02-28 11:01 - 2011-02-28 11:01 - 00079872 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Services.dll
2011-02-28 11:01 - 2011-02-28 11:01 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2010-06-24 01:21 - 2010-06-24 01:21 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2013-04-12 15:10 - 2013-04-12 15:10 - 00111104 _____ () C:\Users\Besitzer\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe
2013-11-05 22:23 - 2013-11-05 22:21 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-03-27 22:52 - 2013-02-28 16:53 - 00886272 _____ () C:\Program Files (x86)\WinZip Malware Protector\System.Data.SQLite.dll
2014-03-27 22:52 - 2013-03-26 12:16 - 01718648 _____ () C:\Program Files (x86)\WinZip Malware Protector\aspsys.dll
2013-12-26 14:35 - 2014-02-15 22:38 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-03-12 23:17 - 2014-03-12 23:17 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
2010-06-24 01:19 - 2010-06-24 01:19 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:09629F6E
AlternateDataStreams: C:\ProgramData\Temp:0AC32449
AlternateDataStreams: C:\ProgramData\Temp:2495D97A
AlternateDataStreams: C:\ProgramData\Temp:2B1EA607
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F
AlternateDataStreams: C:\ProgramData\Temp:3E06C78F
AlternateDataStreams: C:\ProgramData\Temp:4673E9EA
AlternateDataStreams: C:\ProgramData\Temp:4CA05B44
AlternateDataStreams: C:\ProgramData\Temp:639BB5E9
AlternateDataStreams: C:\ProgramData\Temp:6FB48139
AlternateDataStreams: C:\ProgramData\Temp:78E0DF72
AlternateDataStreams: C:\ProgramData\Temp:9BAC4211
AlternateDataStreams: C:\ProgramData\Temp:A02025CE
AlternateDataStreams: C:\ProgramData\Temp:B54E4B5A
AlternateDataStreams: C:\ProgramData\Temp:B88DC997
AlternateDataStreams: C:\ProgramData\Temp:D31BE97C
AlternateDataStreams: C:\ProgramData\Temp:D48500F8
AlternateDataStreams: C:\ProgramData\Temp:F13867C6

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/28/2014 09:00:40 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (03/28/2014 08:59:52 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (03/28/2014 08:59:28 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (03/28/2014 08:57:41 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: sidebar.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7a1c7
Name des fehlerhaften Moduls: mshtml.dll, Version: 0.0.0.0, Zeitstempel: 0x4e5f1784
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000002f0f6b
ID des fehlerhaften Prozesses: 0x101c
Startzeit der fehlerhaften Anwendung: 0xsidebar.exe0
Pfad der fehlerhaften Anwendung: sidebar.exe1
Pfad des fehlerhaften Moduls: sidebar.exe2
Berichtskennung: sidebar.exe3

Error: (03/28/2014 08:57:30 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 08:35:25 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (03/28/2014 08:33:42 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 08:33:35 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: sidebar.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7a1c7
Name des fehlerhaften Moduls: mshtml.dll, Version: 0.0.0.0, Zeitstempel: 0x4e5f1784
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000002f0f6b
ID des fehlerhaften Prozesses: 0x12dc
Startzeit der fehlerhaften Anwendung: 0xsidebar.exe0
Pfad der fehlerhaften Anwendung: sidebar.exe1
Pfad des fehlerhaften Moduls: sidebar.exe2
Berichtskennung: sidebar.exe3

Error: (03/28/2014 07:59:33 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 00:51:12 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC


System errors:
=============
Error: (03/28/2014 08:57:32 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (03/28/2014 08:56:31 AM) (Source: BugCheck) (User: )
Description: 0x000000f4 (0x0000000000000003, 0xfffffa80067eeb30, 0xfffffa80067eee10, 0xfffff80003b8b8b0)C:\Windows\MEMORY.DMP032814-32073-01

Error: (03/28/2014 08:56:29 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎28.‎03.‎2014 um 08:54:05 unerwartet heruntergefahren.

Error: (03/28/2014 08:29:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/28/2014 08:29:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/28/2014 08:29:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/28/2014 08:28:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/28/2014 08:28:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/28/2014 08:28:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (03/28/2014 08:27:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068


Microsoft Office Sessions:
=========================
Error: (03/28/2014 09:00:40 AM) (Source: ATIeRecord)(User: )
Description:

Error: (03/28/2014 08:59:52 AM) (Source: ATIeRecord)(User: )
Description:

Error: (03/28/2014 08:59:28 AM) (Source: ATIeRecord)(User: )
Description:

Error: (03/28/2014 08:57:41 AM) (Source: Application Error)(User: )
Description: sidebar.exe6.1.7601.175144ce7a1c7mshtml.dll0.0.0.04e5f1784c000000500000000002f0f6b101c01cf4a5b5a5806fcC:\Program Files\Windows Sidebar\sidebar.exeC:\Windows\System32\mshtml.dlla2dea750-b64e-11e3-9e2b-984be1b1002d

Error: (03/28/2014 08:57:30 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 08:35:25 AM) (Source: ATIeRecord)(User: )
Description:

Error: (03/28/2014 08:33:42 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 08:33:35 AM) (Source: Application Error)(User: )
Description: sidebar.exe6.1.7601.175144ce7a1c7mshtml.dll0.0.0.04e5f1784c000000500000000002f0f6b12dc01cf4a5801a3cf34C:\Program Files\Windows Sidebar\sidebar.exeC:\Windows\System32\mshtml.dll43e841db-b64b-11e3-995a-984be1b1002d

Error: (03/28/2014 07:59:33 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 00:51:12 AM) (Source: ATIeRecord)(User: )
Description:


==================== Memory info ===========================

Percentage of memory in use: 47%
Total physical RAM: 5882.9 MB
Available physical RAM: 3098.08 MB
Total Pagefile: 11764 MB
Available Pagefile: 8629.68 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:684.19 GB) (Free:343.44 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.16 GB) (Free:1.55 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: B58C26AE)

Partition: GPT Partition Type.

==================== End Of Log ============================


und da ist noch GMER

Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-03-28 10:11:49
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\0000005e WDC_WD75 rev.01.0 698,64GB
Running: Gmer-19357.exe; Driver: C:\Users\Besitzer\AppData\Local\Temp\fxldqpog.sys


---- User code sections - GMER 2.1 ----

.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                        00000000763e1465 2 bytes [3E, 76]
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                        00000000763e14bb 2 bytes [3E, 76]
.text    ...                                                                                                                                                                                                * 2
?        C:\Windows\system32\iertutil.dll [2412] entry point in ".rdata" section                                                                                                                            0000000074e14791
.text    C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3100] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                              00000000763e1465 2 bytes [3E, 76]
.text    C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3100] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                              00000000763e14bb 2 bytes [3E, 76]
.text    ...                                                                                                                                                                                                * 2
.text    C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                      00000000763e1465 2 bytes [3E, 76]
.text    C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                    00000000763e14bb 2 bytes [3E, 76]
.text    ...                                                                                                                                                                                                * 2
.text    C:\Program Files (x86)\Samsung\Kies\Kies.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                        00000000763e1465 2 bytes [3E, 76]
.text    C:\Program Files (x86)\Samsung\Kies\Kies.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                        00000000763e14bb 2 bytes [3E, 76]
.text    ...                                                                                                                                                                                                * 2
.text    C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe[4204] C:\Windows\SysWOW64\ntdll.dll!DbgBreakPoint                                                                        000000007713000c 1 byte [C3]
.text    C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe[4204] C:\Windows\SysWOW64\ntdll.dll!DbgUiRemoteBreakin                                                                    00000000771bf7ea 5 bytes JMP 0000000177178e79
.text    C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe[4456] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                00000000763e1465 2 bytes [3E, 76]
.text    C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe[4456] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                              00000000763e14bb 2 bytes [3E, 76]
.text    ...                                                                                                                                                                                                * 2
.text    C:\Program Files (x86)\Ask.com\Updater\Updater.exe[4504] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                  00000000763e1465 2 bytes [3E, 76]
.text    C:\Program Files (x86)\Ask.com\Updater\Updater.exe[4504] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                  00000000763e14bb 2 bytes [3E, 76]
.text    ...                                                                                                                                                                                                * 2
.text    C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe[4572] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                            00000000763e1465 2 bytes [3E, 76]
.text    C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe[4572] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                            00000000763e14bb 2 bytes [3E, 76]
.text    ...                                                                                                                                                                                                * 2
---- Processes - GMER 2.1 ----

Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\wininit.exe [588](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\services.exe [652](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\lsass.exe [676](2013-11-21 22:19:01)                                                              000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\svchost.exe [808](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\svchost.exe [892](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\atiesrxx.exe [952](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\winlogon.exe [992](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [128](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [456](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\svchost.exe [644](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Program Files\IDT\WDM\STacSV64.exe [612](2013-11-21 22:19:01)                                                      000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\svchost.exe [1284](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\atieclxx.exe [1352](2013-11-21 22:19:01)                                                          000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\svchost.exe [1392](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\System32\spoolsv.exe [1572](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\taskeng.exe [1584](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\svchost.exe [1668](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [1816](2013-11-21 22:19:01)  000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [1996](2013-11-21 22:19:01)                  000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [1420](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [1948](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\svchost.exe [2380](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2540](2013-11-21 22:19:01)                    000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2564](2013-11-21 22:19:01)                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe [2924](2013-11-21 22:19:01)                  000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\taskhost.exe [3220](2013-11-21 22:19:01)                                                          000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\Dwm.exe [3280](2013-11-21 22:19:01)                                                                000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\taskeng.exe [3288](2013-11-21 22:19:01)                                                            000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [3328](2013-11-21 22:19:01)                                                                    000007fefd1a0000
Library  c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll (*** suspicious ***) @ C:\Windows\system32\wbem\wmiprvse.exe [3532](2013-11-21 22:19:01                                                      000007fefd1a0000

---- EOF - GMER 2.1 ----


Puuuhh ,warte dann auf das Resultat:rolleyes:

schrauber 28.03.2014 10:59
hi,


Revo Uninstaller - Download - Filepony
Damit alles deinstallieren was Du in der Additional.txt findest mit dem Zusatz <== ATTENTION

Mit Revo auch Moderat die Reste entfernen lassen.




Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Rotetaube16 28.03.2014 13:48
Hab kein Zugriff auf Avira mehr ,angegebener pfad existiert oderkann nicht gefunden werden,kann es nicht ausschalten! Soll ich es entfernen über Revo uninstaller ??

So habe nun alles getan .....denke ich mir

erstmal mbam
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Update, 28.03.2014 11:53:43, SYSTEM, CONNYPC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1,
Update, 28.03.2014 11:54:14, SYSTEM, CONNYPC, Manual, Malware Database, 2014.3.4.9, 2014.3.28.3,

(end)
dann Adwcleaner
Code:
# AdwCleaner v3.022 - Bericht erstellt am 28/03/2014 um 13:05:12
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Besitzer - CONNYPC
# Gestartet von : C:\Users\Besitzer\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Babylon
[!] Ordner Gelöscht : C:\ProgramData\BitGuard
Ordner Gelöscht : C:\ProgramData\DSearchLink
Ordner Gelöscht : C:\ProgramData\iWin
Ordner Gelöscht : C:\ProgramData\Alawar Stargaze
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\LyriXeeker
Ordner Gelöscht : C:\Program Files (x86)\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\openit
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\DigitalSites
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\iWin
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\Smartbar
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\Extensions\133
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Lisa\AppData\Roaming\Mozilla\Firefox\Profiles\d3wwdsam.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Lisa\AppData\Roaming\Mozilla\Firefox\Profiles\d3wwdsam.default\searchplugins\Askcom.xml
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\searchplugins\Conduit.xml
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\BitGuard
Datei Gelöscht : C:\Windows\Tasks\Digital Sites.job
Datei Gelöscht : C:\Windows\System32\Tasks\Digital Sites
Datei Gelöscht : C:\Windows\Tasks\DSite.job
Datei Gelöscht : C:\Windows\System32\Tasks\DSite

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gelöscht : HKCU\Software\580dadfe26dbf48
Schlüssel Gelöscht : HKLM\SOFTWARE\580dadfe26dbf48
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\Conduit
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\delta LTD
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyrixeeker
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\openit open it!
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16421

[x] Nicht Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\prefs.js ]

Zeile gelöscht : user_pref("CT3201318.1000082.isPlayDisplay", "true");
Zeile gelöscht : user_pref("CT3201318.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
Zeile gelöscht : user_pref("CT3201318.1000234.TWC_TMP_city", "HAMBURG");
Zeile gelöscht : user_pref("CT3201318.1000234.TWC_TMP_country", "DE");
Zeile gelöscht : user_pref("CT3201318.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.FirstTime", "true");
Zeile gelöscht : user_pref("CT3201318.FirstTimeFF3", "true");
Zeile gelöscht : user_pref("CT3201318.LoginRevertSettingsEnabled", true);
Zeile gelöscht : user_pref("CT3201318.PG_ENABLE", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.RevertSettingsEnabled", true);
Zeile gelöscht : user_pref("CT3201318.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Zeile gelöscht : user_pref("CT3201318.SF_STATUS.enc", "RU5BQkxFRA==");
Zeile gelöscht : user_pref("CT3201318.SF_USER_ID.enc", "Y2lkXzExNTIwMTMxOTMxMjk3OTg3NTQ2");
Zeile gelöscht : user_pref("CT3201318.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3201318&SearchSource=2&q=");
Zeile gelöscht : user_pref("CT3201318.UserID", "UN96743018885466597");
Zeile gelöscht : user_pref("CT3201318.addressBarTakeOverEnabledInHidden", "true");
Zeile gelöscht : user_pref("CT3201318.browser.search.defaultthis.engineName", true);
Zeile gelöscht : user_pref("CT3201318.embeddedsData", "[{\"appId\":\"129768733323172459\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Zeile gelöscht : user_pref("CT3201318.enableAlerts", "always");
Zeile gelöscht : user_pref("CT3201318.enableFix404ByUser", "FALSE");
Zeile gelöscht : user_pref("CT3201318.event_data", "%5B%5D");
Zeile gelöscht : user_pref("CT3201318.fired_events", "");
Zeile gelöscht : user_pref("CT3201318.firstTimeDialogOpened", "true");
Zeile gelöscht : user_pref("CT3201318.fixPageNotFoundErrorByUser", "TRUE");
Zeile gelöscht : user_pref("CT3201318.fixPageNotFoundErrorInHidden", "true");
Zeile gelöscht : user_pref("CT3201318.fixUrls", true);
Zeile gelöscht : user_pref("CT3201318.isCheckedStartAsHidden", true);
Zeile gelöscht : user_pref("CT3201318.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.isFirstTimeToolbarLoading", "false");
Zeile gelöscht : user_pref("CT3201318.isNewTabEnabled", false);
Zeile gelöscht : user_pref("CT3201318.isPerformedSmartBarTransition", "true");
Zeile gelöscht : user_pref("CT3201318.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.key_date", "5");
Zeile gelöscht : user_pref("CT3201318.keyword", false);
Zeile gelöscht : user_pref("CT3201318.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3201318&octid=CT3201318&SearchSource=15&CUI=UN96743018885466597&SSPV=EB_SSPV\"}");
Zeile gelöscht : user_pref("CT3201318.lastVersion", "10.15.2.523");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appStateReportTime.enc", "MTM2ODI5MzQ2MTUxNA==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_CouponBuddy.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_Easytobook.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_PriceGong.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_WindowShopper.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnNEaWFsb2ciOnsiZGlzcGxheU5h[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_appsDefaultEnabled.enc", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGFyZ2V0ZWQiLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiIxM2RhYWE2YS02NzYwLTQ0NDAtOTJhMy1hYmEwNzliNzI4ZjAiLCJ[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_eventsCache.enc", "eyJjM2UyZWE4MS1hZDI3LTRmZjMtODBmNC1lMmM1NzIyNDNlZjIiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXcifSwidW5pcXVlS[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_first_time.enc", "MQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_gadgetOpen.enc", "MA==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_lastLoginTime.enc", "MTM2ODI5MzQ1NzQ1Ng==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50LVJpY2h0bGluaWUifSwiZ2FkZ2V0RGVzY3JpcHRpb25QcmltYXJ5Ijp7IlRleHQiOiJWYWx1ZSBBcHBzIGJlcmVpY2hlcnQgSWhy[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiMjQ5XzAiLCJpc1Rlc3QiOnRydWUsImlzV2VsY29tZUV4cGVyaWVuY2VFbmFibGVkQnlEZWZhdWx0I[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_userId.enc", "YjhlNzNmNDEtZmExMi00MjZhLTgwNDUtMjY2NzI0NTI4YWVk");
Zeile gelöscht : user_pref("CT3201318.migrateAppsAndComponents", true);
Zeile gelöscht : user_pref("CT3201318.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fflvrunner.ourtoolbar.com%2FUninstallInstructions%2F\",\"EB_MAIN_FRAME_TITLE\":\"%0A%09How%20to%20Uninstall%0A\",\"EB[...]
Zeile gelöscht : user_pref("CT3201318.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.personalApps", "{\"dataType\":\"object\",\"data\":\"[\\\"BROWSER_COMPONENT\\\"]\"}");
Zeile gelöscht : user_pref("CT3201318.price-gong.isManagedApp", "true");
Zeile gelöscht : user_pref("CT3201318.search.searchAppId", "129768733323172459");
Zeile gelöscht : user_pref("CT3201318.search.searchCount", "0");
Zeile gelöscht : user_pref("CT3201318.searchInNewTabEnabled", "false");
Zeile gelöscht : user_pref("CT3201318.searchInNewTabEnabledByUser", "false");
Zeile gelöscht : user_pref("CT3201318.searchInNewTabEnabledInHidden", "true");
Zeile gelöscht : user_pref("CT3201318.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.sendUsageEnabled", "false");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3201318\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://FLVRunner.OurToolbar.com//xpi\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"FLV Runner\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1368293452948");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_appTracking_lastUpdate", "1349620404900");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_appsMetadata_lastUpdate", "1368293452515");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1368293452680");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_location_lastUpdate", "1368287060489");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.10.20.14_lastUpdate", "1345581571615");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.10.27.6_lastUpdate", "1353435432008");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358457612197");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359323287257");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360777977385");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.14.65.43_lastUpdate", "1364407137817");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.15.0.562_lastUpdate", "1366437967261");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368293452320");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_menu_769c590835a76d075fe33b9a87a87786_lastUpdate", "1368293453553");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_menu_d32f45618f5a02bd965c56155a643855_lastUpdate", "1368293453077");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_optimizer_lastUpdate", "1349620406566");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1368293452618");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_searchAPI_lastUpdate", "1368293452523");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_serviceMap_lastUpdate", "1368287059972");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_toolbarContextMenu_lastUpdate", "1368293452731");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_toolbarSettings_lastUpdate", "1368287062015");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_translation_lastUpdate", "1368287061807");
Zeile gelöscht : user_pref("CT3201318.settingsINI", true);
Zeile gelöscht : user_pref("CT3201318.showToolbarPermission", "false");
Zeile gelöscht : user_pref("CT3201318.smartbar.CTID", "CT3201318");
Zeile gelöscht : user_pref("CT3201318.smartbar.Uninstall", "0");
Zeile gelöscht : user_pref("CT3201318.smartbar.homepage", true);
Zeile gelöscht : user_pref("CT3201318.smartbar.isHidden", false);
Zeile gelöscht : user_pref("CT3201318.smartbar.toolbarName", "FLV Runner ");
Zeile gelöscht : user_pref("CT3201318.startPage", "userChanged");
Zeile gelöscht : user_pref("CT3201318.toolbarBornServerTime", "5-8-2012");
Zeile gelöscht : user_pref("CT3201318.toolbarCurrentServerTime", "11-5-2013");
Zeile gelöscht : user_pref("CT3201318.toolbarLoginClientTime", "Mon Apr 01 2013 19:06:58 GMT+0200");
Zeile gelöscht : user_pref("CT3201318.upgradeFromClearSBVersion", true);
Zeile gelöscht : user_pref("CT3201318_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1368286936832,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelöscht : user_pref("Smartbar.ConduitHomepagesList", "");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchEngineList", "");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchUrlList", "");
Zeile gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "");
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "3646fac9000000000000ac81125a277a");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15945");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.622:27:16");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tt=288013_icon&tsp=4988");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Zeile gelöscht : user_pref("smartbar.machineId", "R64IL8NALTCQQW6/NME1OVTIB/IGHWH2ECFEAN2EJ2VXJUKJEZDK0V6V++XLFBCVYJTX74AL+GSUJTF1XGDSWW");

[ Datei : C:\Users\Lisa\AppData\Roaming\Mozilla\Firefox\Profiles\d3wwdsam.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=0B4792A2-3CA4-4582-B499-7557DE49B54C&apn_ptnrs=&apn_sauid=B25985F5-5B47-4650-847A-FD5432A794D0&ap[...]

*************************

AdwCleaner[R0].txt - [25125 octets] - [28/03/2014 13:02:18]
AdwCleaner[S0].txt - [23951 octets] - [28/03/2014 13:05:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24012 octets] ##########
musst ich noch ein 2.Mal machen
Code:
# AdwCleaner v3.022 - Bericht erstellt am 28/03/2014 um 13:12:27
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Besitzer - CONNYPC
# Gestartet von : C:\Users\Besitzer\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16421

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\prefs.js ]


[ Datei : C:\Users\Lisa\AppData\Roaming\Mozilla\Firefox\Profiles\d3wwdsam.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [25125 octets] - [28/03/2014 13:02:18]
AdwCleaner[R1].txt - [1224 octets] - [28/03/2014 13:10:26]
AdwCleaner[S0].txt - [24173 octets] - [28/03/2014 13:05:12]
AdwCleaner[S1].txt - [1048 octets] - [28/03/2014 13:12:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1108 octets] ##########
dann JRT

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Home Premium x64
Ran by Besitzer on 28.03.2014 at 13:19:09,65
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-619880712-574751267-193086799-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{647809D8-3F44-4F72-A81B-6ED305E9F372}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{647809D8-3F44-4F72-A81B-6ED305E9F372}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\big fish"
Successfully deleted: [Folder] "C:\ProgramData\big fish games"
Successfully deleted: [Folder] "C:\Users\Besitzer\AppData\Roaming\big fish games"
Successfully deleted: [Folder] "C:\Users\Besitzer\appdata\local\big fish"
Successfully deleted: [Folder] "C:\bigfishcache"
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{0A347265-20E9-402B-A2B9-B0D0A5214354}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{0A859682-EAD1-4AF1-977F-F3FB8088ED90}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{0CD414EA-5A27-4048-8EB6-91E334C6ABC5}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{0FCA8F39-2696-40CB-9F08-5ADE1F4CAA73}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{117BFF30-99ED-4EE8-A192-ABDB287B41DB}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{189D95E6-271E-4420-9F6F-AE238680FAB2}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{1F0D4559-BF71-499C-98D2-C163893CF492}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{2315BE41-43BA-4ABE-85CC-09C5C19A1315}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{252034A5-9A33-48D2-A4B1-59F719840D81}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{2DBE4BB6-8973-42F0-9EE4-92A45F0053D6}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{2F0F8CB9-53E6-442E-BE84-818039DF9A48}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3020BAAE-91D0-4FB1-A34B-68D6EB0C3D92}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{365F7E17-EEC9-4248-8DA1-0B741F844E37}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{39E5AC1B-BC50-4DB8-89AF-CC967509F7D3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3A770467-C39C-4C17-8414-1BA1728B003B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3C134F6D-B3B8-410B-9874-32F58A9E3D7B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3DD210BB-8C85-451F-9EA4-7B033A308AF6}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3E96D129-8882-4C4A-8132-0955610D1D6D}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{4C7225C5-2FDC-4B1E-9457-A21ED71CCAA3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{4F6BB57C-484C-4542-8C69-AC26C8A66921}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{51040CE6-81CA-4D1F-9695-39BD63995DBC}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{514ACB0E-6FEA-4CBD-96E8-34DFC3B1015B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{52F92B82-902D-493E-82FA-DC160413CDDD}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{5B02A775-7377-4C75-BC23-EC630BAAA223}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{5D6BD3FF-3194-4E24-A374-F963CD8D3B51}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{600D2BF2-5739-4444-B72B-7ECC52B36325}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{605E3553-B6FF-4ED4-ADF3-1BF601FFA432}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{61745BD8-5E40-482A-A70F-60D26ECA6AD4}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{62866BF4-A40F-46F8-9A0E-3AB0A6ACC744}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{6335AD71-5205-498C-ABB0-1F803184EFE0}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{6677A6C7-A16F-4169-891D-0BCF5A28946F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{6755DD1B-B2E3-4799-8E50-73D9C675038F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7357D46D-AA8E-46F8-ABEA-3F5E3368F344}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{74088BF4-4CBA-4132-B920-320FEF38FB4F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{74B7C679-581F-4B8D-8E2D-DF1BDF2D4D59}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{76898B6A-9D30-4F4E-8E69-561644A0843B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7AAEFA6E-BAAF-4F4E-83B8-DBD779622968}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7B69222F-C663-4E0E-95F5-7EA116AB6B7B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7B7BB5AD-B276-41B7-B377-774A6A78BC04}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7E4D45B7-6941-4E69-9F2B-F282707F870E}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{86571AEE-D721-4898-BC41-E02FF42997F8}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{86DE42C2-15F4-4CC0-900D-AF1BB6ECC6A9}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{887ED6B2-1447-45D1-8A0D-5B063A45EE76}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{89B7CA46-B744-4D1C-A6E7-2B22B0C5DC47}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{91A65640-F1A2-4812-A59B-6C4226E40620}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{92B2AF8B-CB71-4F83-AF6B-81FE883FEF68}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{96A59F0D-1DBC-40AC-984C-CD41EE9A551C}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{96FE2A92-5A49-4956-8F88-852959CAEEE2}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{A4DEDEEE-92EA-46AA-A4F0-F1D2840C0927}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{A6F2B3F2-4574-47C9-A098-7E6EF809D977}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{A91AB844-24D3-443D-AB7E-E004530145B0}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{AE9E9A5F-B0B3-4B7F-B6B7-2926CC58A164}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{AEC038D1-BAC3-45F1-B78B-C02A418402C3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{B0012355-54AE-4380-8955-6C13A64B0ED2}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{B3855772-61E9-42AA-8B84-3B0E452F09B3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{B3FB29FE-DFA5-474A-B22E-067E02188A71}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{B40ED8FF-7376-448C-B672-FA4D709A97B6}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{BD2D308C-8BCF-4FD6-8DA8-AAD3EC42FFB9}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{C2FDF706-3F85-4CFF-B463-55F8396F6BCE}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{CCC7AC1F-7F2C-435A-ACD8-4B7D46203DE4}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{CF45CA51-68E2-4CED-AE7F-DBF6D762D89F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{D4DA2241-395D-4ED9-B86D-20FD1338A874}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{DB3D7E2F-ED00-48BA-8D8F-FE50D85F0C37}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{DE546201-5D50-4E08-855F-9B9421472B11}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{E00B87C1-FF7B-404A-8DE5-671126D547C9}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{E2F72F32-3E11-4F5D-B4CE-E4797F31967F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{E6B09C02-1B09-46F9-9916-330D55CD52D6}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{ECD187F6-A6ED-40BA-9104-97A076410EA3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{F21969C8-4112-4775-80B6-43755BE3774D}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{FB605E5E-5FF4-41C1-81E9-44A12DBA44D7}



~~~ FireFox

Emptied folder: C:\Users\Besitzer\AppData\Roaming\mozilla\firefox\profiles\za6muobr.default\minidumps [274 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.03.2014 at 13:32:24,75
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
und zum Schluss noch
FRST

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Besitzer (administrator) on CONNYPC on 28-03-2014 13:35:55
Running from C:\Users\Besitzer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intenium) C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [525312 2010-12-17] (IDT, Inc.)
HKLM\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2011-01-27] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-12] (Easybits)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [WinZip Malware Protector_startup] - C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [6390136 2013-03-26] (Nico Mak Computing)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-12] (Hewlett-Packard)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [Spiele Post] - C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe [483400 2013-12-06] (Intenium)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [247728 2011-04-22] (TomTom)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: {a496f38a-dfce-11e0-a586-984be1b1002d} - F:\LaunchU3.exe -a
GroupPolicyUsers\S-1-5-21-619880712-574751267-193086799-1006\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {647809D8-3F44-4F72-A81B-6ED305E9F372} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-04-13] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default
FF Homepage: hxxp://www.arcor.de/ums/ums_ordner.jsp?ordnername=Posteingang
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-09]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-09]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-02-28] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-28 13:32 - 2014-03-28 13:34 - 00009204 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-03-28 13:19 - 2014-03-28 13:19 - 00000000 ____D () C:\Windows\ERUNT
2014-03-28 13:18 - 2014-03-28 13:18 - 01038974 _____ (Thisisu) C:\Users\Besitzer\Desktop\JRT.exe
2014-03-28 13:15 - 2014-03-28 13:15 - 00001188 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S1].txt
2014-03-28 13:08 - 2014-03-28 13:08 - 00024173 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S0].txt
2014-03-28 13:02 - 2014-03-28 13:12 - 00000000 ____D () C:\AdwCleaner
2014-03-28 13:01 - 2014-03-28 13:01 - 01950720 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-03-28 13:00 - 2014-03-28 13:00 - 00000259 _____ () C:\Users\Besitzer\Desktop\mbam.txt
2014-03-28 11:53 - 2014-03-28 12:57 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-28 11:52 - 2014-03-28 11:52 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-03-28 11:52 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-28 11:52 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-28 11:52 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-28 11:50 - 2014-03-28 11:52 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Besitzer\Desktop\mbam-setup-2.0.0.1000.exe
2014-03-28 11:18 - 2014-03-28 11:18 - 00001260 _____ () C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2014-03-28 11:18 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-28 11:05 - 2014-03-28 11:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Desktop\revosetup95.exe
2014-03-28 10:11 - 2014-03-28 10:11 - 00012547 _____ () C:\Users\Besitzer\Desktop\Gmer.txt
2014-03-28 09:39 - 2014-03-28 09:39 - 00009212 _____ () C:\Users\Besitzer\Desktop\log 2.xml
2014-03-28 09:21 - 2014-03-28 09:28 - 00055480 _____ () C:\Users\Besitzer\Desktop\Addition.txt
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2014-03-28 09:20 - 2014-03-28 13:35 - 00017962 _____ () C:\Users\Besitzer\Desktop\FRST.txt
2014-03-28 09:20 - 2014-03-28 13:35 - 00000000 ____D () C:\FRST
2014-03-28 09:19 - 2014-03-28 09:19 - 02157056 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-03-28 09:16 - 2014-03-28 09:17 - 00000478 _____ () C:\Users\Besitzer\Desktop\defogger_disable.log
2014-03-28 09:16 - 2014-03-28 09:16 - 00000000 _____ () C:\Users\Besitzer\defogger_reenable
2014-03-28 09:15 - 2014-03-28 09:15 - 00050477 _____ () C:\Users\Besitzer\Desktop\Defogger.exe
2014-03-28 08:56 - 2014-03-28 08:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 08:53 - 2014-03-28 09:12 - 00000700 _____ () C:\Users\Besitzer\Desktop\Ereignisse.txt
2014-03-28 08:23 - 2014-03-28 08:23 - 00003063 _____ () C:\Users\Besitzer\Desktop\log.xml
2014-03-28 00:38 - 2014-03-28 00:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 00:07 - 2014-03-28 00:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 00:00 - 2014-03-28 00:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 22:52 - 2014-03-28 13:15 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-27 22:52 - 2014-03-28 09:38 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-27 22:52 - 2014-03-28 00:38 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-27 22:52 - 2014-03-28 00:38 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-27 22:52 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe
2014-03-27 22:51 - 2014-03-27 22:52 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 13:21 - 2014-03-28 08:56 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-27 13:21 - 2014-03-28 08:56 - 00000000 ____D () C:\Windows\Minidump
2014-03-27 13:21 - 2014-03-27 13:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-21 20:11 - 2014-03-21 20:11 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-11 23:40 - 2014-03-11 23:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-11 23:40 - 2014-03-11 23:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien

==================== One Month Modified Files and Folders =======

2014-03-28 13:36 - 2014-03-28 09:20 - 00017962 _____ () C:\Users\Besitzer\Desktop\FRST.txt
2014-03-28 13:35 - 2014-03-28 09:20 - 00000000 ____D () C:\FRST
2014-03-28 13:34 - 2014-03-28 13:32 - 00009204 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-03-28 13:21 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-28 13:21 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-28 13:19 - 2014-03-28 13:19 - 00000000 ____D () C:\Windows\ERUNT
2014-03-28 13:18 - 2014-03-28 13:18 - 01038974 _____ (Thisisu) C:\Users\Besitzer\Desktop\JRT.exe
2014-03-28 13:15 - 2014-03-28 13:15 - 00001188 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S1].txt
2014-03-28 13:15 - 2014-03-27 22:52 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-28 13:14 - 2012-03-30 19:46 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-03-28 13:14 - 2011-09-09 21:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-03-28 13:13 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-28 13:13 - 2009-07-14 05:51 - 00179172 _____ () C:\Windows\setupact.log
2014-03-28 13:12 - 2014-03-28 13:02 - 00000000 ____D () C:\AdwCleaner
2014-03-28 13:12 - 2011-05-01 00:53 - 01651465 _____ () C:\Windows\WindowsUpdate.log
2014-03-28 13:08 - 2014-03-28 13:08 - 00024173 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S0].txt
2014-03-28 13:06 - 2010-11-21 04:47 - 00587100 _____ () C:\Windows\PFRO.log
2014-03-28 13:01 - 2014-03-28 13:01 - 01950720 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-03-28 13:00 - 2014-03-28 13:00 - 00000259 _____ () C:\Users\Besitzer\Desktop\mbam.txt
2014-03-28 12:57 - 2014-03-28 11:53 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-28 11:52 - 2014-03-28 11:52 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-03-28 11:52 - 2014-03-28 11:50 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Besitzer\Desktop\mbam-setup-2.0.0.1000.exe
2014-03-28 11:18 - 2014-03-28 11:18 - 00001260 _____ () C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2014-03-28 11:18 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-28 11:05 - 2014-03-28 11:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Desktop\revosetup95.exe
2014-03-28 10:11 - 2014-03-28 10:11 - 00012547 _____ () C:\Users\Besitzer\Desktop\Gmer.txt
2014-03-28 09:46 - 2013-08-29 21:26 - 00000213 _____ () C:\Users\Besitzer\AppData\Roaming\WB.CFG
2014-03-28 09:39 - 2014-03-28 09:39 - 00009212 _____ () C:\Users\Besitzer\Desktop\log 2.xml
2014-03-28 09:38 - 2014-03-27 22:52 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-28 09:28 - 2014-03-28 09:21 - 00055480 _____ () C:\Users\Besitzer\Desktop\Addition.txt
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2014-03-28 09:19 - 2014-03-28 09:19 - 02157056 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-03-28 09:17 - 2014-03-28 09:16 - 00000478 _____ () C:\Users\Besitzer\Desktop\defogger_disable.log
2014-03-28 09:16 - 2014-03-28 09:16 - 00000000 _____ () C:\Users\Besitzer\defogger_reenable
2014-03-28 09:16 - 2011-07-25 11:05 - 00000000 ____D () C:\Users\Besitzer
2014-03-28 09:15 - 2014-03-28 09:15 - 00050477 _____ () C:\Users\Besitzer\Desktop\Defogger.exe
2014-03-28 09:12 - 2014-03-28 08:53 - 00000700 _____ () C:\Users\Besitzer\Desktop\Ereignisse.txt
2014-03-28 08:56 - 2014-03-28 08:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 08:56 - 2014-03-27 13:21 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-28 08:56 - 2014-03-27 13:21 - 00000000 ____D () C:\Windows\Minidump
2014-03-28 08:55 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-28 08:23 - 2014-03-28 08:23 - 00003063 _____ () C:\Users\Besitzer\Desktop\log.xml
2014-03-28 00:38 - 2014-03-28 00:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 00:38 - 2014-03-27 22:52 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-28 00:38 - 2014-03-27 22:52 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-28 00:32 - 2011-09-07 21:03 - 00000000 ____D () C:\Users\Besitzer\Desktop\Wimmelbild
2014-03-28 00:07 - 2014-03-28 00:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 00:00 - 2014-03-28 00:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 22:52 - 2014-03-27 22:51 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 13:21 - 2014-03-27 13:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-26 22:37 - 2011-09-07 10:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\SoftGrid Client
2014-03-26 13:01 - 2013-03-23 23:54 - 00003204 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForBesitzer
2014-03-26 13:01 - 2013-03-23 23:54 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForBesitzer.job
2014-03-24 07:32 - 2011-12-24 20:35 - 00000000 ____D () C:\Users\Lisa\AppData\Local\CrashDumps
2014-03-21 20:11 - 2014-03-21 20:11 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-21 19:01 - 2011-09-09 21:03 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-17 21:44 - 2011-04-14 01:04 - 00658120 _____ () C:\Windows\system32\perfh007.dat
2014-03-17 21:44 - 2011-04-14 01:04 - 00131202 _____ () C:\Windows\system32\perfc007.dat
2014-03-17 21:44 - 2009-07-14 06:13 - 01508746 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-16 23:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-12 23:17 - 2012-08-30 19:10 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 23:17 - 2011-09-07 15:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 23:15 - 2011-09-07 18:12 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-03-11 23:40 - 2014-03-11 23:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-11 23:40 - 2014-03-11 23:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien
2014-03-05 09:26 - 2014-03-28 11:52 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-03-28 11:52 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2014-03-28 11:52 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\AskSLib.dll
C:\Users\Besitzer\AppData\Local\Temp\avgnt.exe
C:\Users\Besitzer\AppData\Local\Temp\bfguni.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe
C:\Users\Besitzer\AppData\Local\Temp\tmqjb5q9.dll
C:\Users\Besitzer\AppData\Local\Temp\uninst1.exe
C:\Users\Besitzer\AppData\Local\Temp\zcenhbks.dll
C:\Users\Lisa\AppData\Local\Temp\APNStub.exe
C:\Users\Lisa\AppData\Local\Temp\AskSLib.dll
C:\Users\Lisa\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-17 13:53

==================== End Of Log ============================
--- --- ---

--- --- ---

ein hab ich noch
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Besitzer at 2014-03-28 13:38:10
Running from C:\Users\Besitzer\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

100 Prozent Wimmelbild (HKLM-x32\...\{149F9A5E-889D-474B-BA15-AFA0E614E5EA}_is1) (Version:  - cerasus.media GmbH)
1001 Nacht - Die Abenteuer von Sindbad (HKLM-x32\...\1001 Nacht - Die Abenteuer von Sindbad) (Version:  - )
20.000 Meilen unter dem Meer (HKLM-x32\...\{6692A6CC-6EDA-40C3-8F57-1E8ECD5AE2E0}) (Version: 1.00.0000 - Purplehills)
3 Days - Amulet Secret (HKLM-x32\...\3 Days - Amulet Secret_is1) (Version:  - Realore Studios)
3*3 Match (HKCU\...\3*3 Match) (Version:  - )
5600 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
5600_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
5600Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
Abenteuer Hawaii - Pearl Harbor (HKLM-x32\...\Abenteuer Hawaii - Pearl Harbor) (Version:  - )
Abenteuer Hawaii 2 - Die Verborgene Insel (HKLM-x32\...\Abenteuer Hawaii 2 - Die Verborgene Insel) (Version:  - )
Abenteuer von Luxor (HKLM-x32\...\Abenteuer von Luxor) (Version: 1.1.0.0 - MumboJumbo)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.2.152.32 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.1) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.1 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
Aegypten Box (HKLM-x32\...\Aegypten Box) (Version:  - )
Affair Bureau (HKLM-x32\...\Affair Bureau) (Version: 1.0.0.0 - INTENIUM GmbH)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
Agatha Christie Death on the Nile (HKLM-x32\...\{4C33389D-0F65-40A3-B76C-897502500C4B}) (Version: 1.0.0 - JoWood)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Akademie der Magie 2 (HKLM-x32\...\Akademie der Magie 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Alabama Smith (HKLM-x32\...\Alabama Smith) (Version:  - )
Alabama Smith 2 (HKLM-x32\...\Alabama Smith 2) (Version:  - )
Aladins Wunderlampe (HKLM-x32\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM-x32\...\Alamandi) (Version: 1.0.0.0 - INTENIUM GmbH)
Amazing Adventures Around the World (HKLM-x32\...\Amazing Adventures Around the World) (Version:  - PopCap Games)
AMD Fuel (Version: 2011.0228.1151.21177 - Ihr Firmenname) Hidden
Ancient Mysteries (HKLM-x32\...\Ancient Mysteries_is1) (Version:  - astragon Software GmbH)
Ancient Quest of Saqqarah (HKLM-x32\...\Ancient Quest of Saqqarah/DE-German_is1) (Version:  - City Interactive)
Animal Agents (HKLM-x32\...\{7B5A952B-3150-4037-BE90-D94DFB717713}_is1) (Version:  - cerasus.media GmbH)
Ankh_hog (HKLM-x32\...\Ankh_hog) (Version:  - )
Annies Millions (HKLM-x32\...\Annies Millions) (Version: 1.0.0.0 - INTENIUM GmbH)
Antique Road Trip U.S.A. (HKLM-x32\...\Antique Road Trip U.S.A.) (Version: 1.0.0.0 - INTENIUM GmbH)
Ashley Jones – Reise Ins Alte Ägypten (HKLM-x32\...\Ashley Jones – Reise Ins Alte Ägypten) (Version:  - )
ATI Catalyst Install Manager (HKLM\...\{7FBA6627-88F8-0AE0-9326-FB8488DD26E0}) (Version: 3.0.812.0 - ATI Technologies, Inc.)
AtlantisQuest (HKLM-x32\...\{1D619FC4-4F88-406C-9E78-B948BFC998FA}) (Version: 1.00.0000 - Ihr Firmenname)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Aztec Adventures (HKLM-x32\...\Aztec Adventures/DE-German_is1) (Version:  - City Interactive)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bejeweled Twist (HKLM-x32\...\Bejeweled Twist) (Version:  - )
Big City Mystery (HKLM-x32\...\{9918955A-AA7E-4C18-AB5D-B949A1314347}_is1) (Version:  - cerasus.media GmbH)
Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.2.0.6 - )
Big Rig Europe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Build-a-lot 3 (HKLM-x32\...\Build-a-lot 3) (Version:  - )
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0228.1151.21177 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0228.1151.21177 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0228.1151.21177 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help English (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help French (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help German (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
ccc-core-static (x32 Version: 2011.0228.1151.21177 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2011.0228.1151.21177 - ATI) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Christmasville (HKLM-x32\...\{D178746E-0919-424E-88A7-81A0E46FF03E}) (Version: 1.00.0000 - Purplehills)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
City Style (HKLM-x32\...\City Style) (Version:  - )
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Cradle of Egypt (HKLM-x32\...\{2C02C8E3-CF3B-44BE-98C8-12A16EAF2713}_is1) (Version:  - cerasus.media GmbH)
Cradle of Rome 2 (HKLM-x32\...\{E60E8119-F64A-436B-8449-4FF87FC97350}_is1) (Version:  - cerasus.media GmbH)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Curse of the Pharaoh: Die Tr&auml;nen der Sachmet (HKLM-x32\...\BFG-Curse of the Pharaoh - Die Traenen der Sachmet) (Version:  - )
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.3922 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.1.3922 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Tales: Der Goldkafer von Edgar Allan Poe (HKLM-x32\...\BFG-Dark Tales - Der Goldkafer von Edgar Allan Poe) (Version:  - )
Das Geheimnis des Pharaos (HKLM-x32\...\Das Geheimnis des Pharaos) (Version:  - )
Das geheimnisvolle Tagebuch (HKLM-x32\...\Das geheimnisvolle Tagebuch) (Version:  - )
Das rätselhafte Kristall-Portal (HKLM-x32\...\Das rätselhafte Kristall-Portal) (Version:  - )
Das Schicksal der Marie Antoinette (HKLM-x32\...\Das Schicksal der Marie Antoinette) (Version:  - )
Das Vermächtnis: Die Legende des Heiligen Schatzes (HKLM-x32\...\Chronicles of Mystery 3/DE-German_is1) (Version:  - City Interactive)
Definition update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{28857979-5507-4C10-A922-FF709A19D38C}) (Version:  - Microsoft)
Der Fluch des Aegyptischen Artefakts (HKLM-x32\...\Der Fluch des Aegyptischen Artefakts) (Version:  - )
Der Graf von Monte Christo (HKLM-x32\...\Der Graf von Monte Christo) (Version: 1.0.0.0 - INTENIUM GmbH)
Der Stein der Weisen (HKLM-x32\...\Der Stein der Weisen) (Version:  - )
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)
DEUTSCHLAND SPIELT Spiele Post (HKLM-x32\...\DEUTSCHLAND SPIELT Spiele Post) (Version: 1.0.2.4 - INTENIUM GmbH)
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
Die 4 Elemente (HKLM-x32\...\Die 4 Elemente) (Version:  - )
Die Abenteuer-Reise (HKLM-x32\...\Die Abenteuer-Reise) (Version: 1.0.0.0 - INTENIUM GmbH)
Die Jade-Münze (HKLM-x32\...\Die Jade-Münze) (Version: 1.0.0.0 - INTENIUM GmbH)
Die Kunst des Mordens: Der Marionettenspieler (HKLM-x32\...\Art of Murder 2/DE-German_is1) (Version:  - City Interactive)
Die Legende von Pocahontas (HKLM-x32\...\{3BFA752E-2E76-4964-BDA3-94B486A18223}_is1) (Version:  - cerasus.media GmbH)
Die Sage von Kolossus (HKLM-x32\...\Die Sage von Kolossus) (Version:  - )
Die Schatzsucher: Visionen des Goldes ™ (HKLM-x32\...\BFG-Die Schatzsucher - Visionen des Goldes) (Version:  - )
Die Schlange der Isis ™ (HKLM-x32\...\BFG-Die Schlange der Isis) (Version:  - )
Die Wiege Olympias 2 (HKLM-x32\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
DriverTuner 3.1.0.1 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.1 - LionSea SoftWare)
Eldorado (HKLM-x32\...\{6540D6AD-4218-444D-84EC-E6C85F35EE31}) (Version: 1.00.0000 - Purplehills)
Emily Archer und der Fluch des Tutanchamun (HKLM-x32\...\{D09BA721-DF68-4149-883C-F2AE7A808962}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Escape from Lost Island (HKLM-x32\...\Escape from Lost Island) (Version: 1.0.0.0 - INTENIUM GmbH)
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Fallen Shadows - Schatten der Kindheit (HKLM-x32\...\{AE2893E9-145A-41AC-85C6-ED046B13572E}) (Version: 1.0.0 - Happy Muffin Top)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Fiona Finch (HKLM-x32\...\Fiona Finch) (Version: 1.0.0.0 - INTENIUM GmbH)
Fishdom (x32 Version: 2.2.0.95 - WildTangent) Hidden
Frankenstein (HKLM-x32\...\{610B773E-3183-43D5-B01D-862EFF276B81}) (Version: 1.00.0000 - Ihr Firmenname)
freundin - Big City Mystery (HKLM-x32\...\{1F9A14A2-BC64-40D2-9241-4470345298C7}_is1) (Version:  - cerasus.media GmbH)
freundin - Goldenes Prag (HKLM-x32\...\{9E8AA698-979E-4694-A2C3-10591194328A}_is1) (Version:  - cerasus.media GmbH)
freundin - Romance of Rome (HKLM-x32\...\{5E70B619-B3D0-4B50-B57E-5CEBE0201248}_is1) (Version:  - cerasus.media GmbH)
freundin - The Lost Inca Prophecy (HKLM-x32\...\{BE0DFE33-C23B-4111-A63D-ED0994DF3B2C}_is1) (Version:  - cerasus.media GmbH)
Garten-Glück (HKLM-x32\...\Garten-Glück) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheime Fälle: Die gestohlene Venus (HKLM-x32\...\Geheime Fälle: Die gestohlene Venus) (Version:  - )
Geheime Fälle: Die gestohlene Venus 2 (HKLM-x32\...\Geheime Fälle: Die gestohlene Venus 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheime Fälle: Vermisst in Rom (HKLM-x32\...\Geheime Fälle: Vermisst in Rom) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM-x32\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Green Moon (HKLM-x32\...\Green Moon_is1) (Version:  - )
Haunting Mysteries (HKLM-x32\...\{9613E073-00BB-4244-AC06-BAC3DAF7B197}) (Version: 1.00.0000 - PurpleHills)
Heroes of Hellas 2 (HKLM-x32\...\{6E67E70D-606A-4EB0-8094-EFF064431435}) (Version: 1.00.0000 - Purplehills)
Herr des Wetters (HKLM-x32\...\Herr des Wetters) (Version: 1.0.0.0 - INTENIUM GmbH)
Hidden Expedition: Amazon ™ (HKLM-x32\...\BFG-Hidden Expedition Amazon) (Version:  - )
Hidden Magic (HKLM-x32\...\Hidden Magic) (Version: 1.0.0.0 - INTENIUM GmbH)
Hidden Object Crosswords (HKLM-x32\...\Hidden Object Crosswords) (Version: 1.0.0.0 - INTENIUM GmbH)
Hide And Secret 3 (HKLM-x32\...\Hide And Secret 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Holly - Ein Weihnachtsmärchen (HKLM-x32\...\{8F08E12A-363F-4F69-8BC8-0E0EA502A6ED}) (Version: 1.00.0000 - Purplehills)
Holly im Wunderland (HKLM-x32\...\Holly im Wunderland) (Version:  - )
HP Auto (Version: 1.0.12494.3472 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Connection Manager (HKLM-x32\...\{795AADBF-58C2-42D0-B779-E730702A247E}) (Version: 4.0.45.1 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Documentation (HKLM-x32\...\{6C453C9C-38AE-494D-BF89-7AA0DE87F3E5}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP On Screen Display (HKLM-x32\...\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}) (Version: 1.1.2 - Hewlett-Packard Company)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{EB58480C-0721-483C-B354-9D35A147999F}) (Version: 2.3.6 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Software Framework (HKLM-x32\...\{CE4551E8-8D09-4126-A39B-B7DF82C5EB83}) (Version: 4.0.110.1 - Hewlett-Packard Company)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{E92D47A1-D27D-430A-8368-0BAFD956507D}) (Version: 5.2.9.2 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6319.0 - IDT)
Insaniquarium Deluxe (HKLM-x32\...\Insaniquarium Deluxe) (Version:  - )
Insel der Feen - Fairy Island (HKLM-x32\...\Insel der Feen - Fairy Island) (Version: 1.0.0.0 - INTENIUM GmbH)
Jane Lucky (HKLM-x32\...\Jane Lucky) (Version: 1.0.0.0 - INTENIUM GmbH)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle)
Java(TM) 6 Update 24 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216024FF}) (Version: 6.0.240 - Oracle)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Jewel Mystery: Die Villa (HKLM-x32\...\Jewel Mystery: Die Villa) (Version: 1.0.0.0 - INTENIUM GmbH)
Jewel Quest Mysteries 2: Trail of the Midnight Heart (nur deinstallation) (HKLM-x32\...\Jewel Quest Mysteries 2: Trail of the Midnight Heart) (Version:  - )
Jewel Quest Mysteries Curse Of The Emerald Tear (nur deinstallation) (HKLM-x32\...\Jewel Quest Mysteries Curse Of The Emerald Tear) (Version:  - )
Jewel Quest Mysteries: The Oracle of Ur CE (HKLM-x32\...\Jewel Quest Mysteries: The Oracle of Ur CE) (Version: 3.32.0.0 - iWin.com)
Jewel Quest Mysteries: The Seventh Gate (HKLM-x32\...\BFG-Jewel Quest Mysteries - The Seventh Gate) (Version:  - )
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest: Der Saphirdrache (HKLM-x32\...\BFG-Jewel Quest - Der Saphirdrache) (Version:  - )
Jewels of Atlantis (HKLM-x32\...\Jewels of Atlantis/DE-German_is1) (Version:  - City Interactive)
Jules Vernes: Das Abenteuer Jangada (HKLM-x32\...\Jules Vernes: Das Abenteuer Jangada) (Version: 1.0.0.0 - INTENIUM GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kochprofi (HKLM-x32\...\Kochprofi) (Version: 1.0.0.0 - INTENIUM GmbH)
Kuros (HKLM-x32\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Laura Jones 2 (HKLM-x32\...\Laura Jones 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Legends of the Wild West: Golden Hill (HKLM-x32\...\Legends of the Wild West/DE-German_is1) (Version:  - City Interactive)
Lost Realms: Der Fluch von Babylon (HKLM-x32\...\BFG-Lost Realms - Der Fluch von Babylon) (Version:  - )
Lost Secrets - Bermuda Dreieck (HKLM-x32\...\Lost Secrets - Bermuda Dreieck) (Version: 1.0 - Astragon)
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS)
Magic Encyclopedia (HKLM-x32\...\Magic Encyclopedia) (Version:  - )
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mahjong Escape – Ancient China (HKLM-x32\...\Mahjong Escape – Ancient China) (Version:  - )
Mahjongg Artifacts 2 (HKLM-x32\...\Mahjongg Artifacts 2) (Version:  - )
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Master Wu (HKLM-x32\...\Master Wu) (Version:  - )
Maya - Fight for Jewels (HKLM-x32\...\Maya - Fight for Jewels_is1) (Version:  - Contendo Media GmbH)
Meine kleine Farm 2 (HKLM-x32\...\Meine kleine Farm 2) (Version:  - )
Meine kleine Farm 3 (HKLM-x32\...\Meine kleine Farm 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Meine kleine Farm 3: Ice Age (HKLM-x32\...\Meine kleine Farm 3: Ice Age) (Version: 1.0.0.0 - INTENIUM GmbH)
Meine kleine Farm 3: Russisches Roulette (HKLM-x32\...\Meine kleine Farm 3: Russisches Roulette) (Version: 1.0.0.0 - INTENIUM GmbH)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mysterious City: Cairo (nur deinstallation) (HKLM-x32\...\Mysterious City: Cairo) (Version:  - )
Mystery Case Files&reg;: Dire Grove™ (HKLM-x32\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: 13th Skull (HKLM-x32\...\BFG-Mystery Case Files - 13th Skull) (Version:  - )
Mystery Case Files: Huntsville ™ (HKLM-x32\...\BFG-Mystery Case Files - Huntsville) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM-x32\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: Prime Suspects ™ (HKLM-x32\...\BFG-Mystery Case Files - Prime Suspects) (Version:  - )
Mystery of Montezuma (HKLM-x32\...\Mystery of Montezuma/DE-German_is1) (Version:  - City Interactive)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mystery P.I. - The Lottery Ticket 1.0.0.5 (HKLM-x32\...\Mystery P.I. - The Lottery Ticket 1.0.0.5) (Version:  - )
Mystery P.I. – The Vegas Heist (HKLM-x32\...\Mystery P.I. – The Vegas Heist) (Version:  - )
Mystery Tales - Insel der Träume (HKLM-x32\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Tales - Insel der Träume (HKLM-x32\...\{F6856F9B-881C-4BAF-8602-1E2DBA0EA8A7}_is1) (Version:  - cerasus.media GmbH)
Mysteryville 2 (HKLM-x32\...\{7730D510-6DE2-4CD4-8F58-0B04680AEFE6}) (Version: 1.00.0000 - Mysteryville 2)
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Natalie Brooks (HKLM-x32\...\Natalie Brooks) (Version:  - )
Natalie Brooks 2 (HKLM-x32\...\Natalie Brooks 2) (Version:  - )
Natalie Brooks 3 (HKLM-x32\...\Natalie Brooks 3) (Version: 1.0.0.0 - INTENIUM GmbH)
National Geographic: Herod's Lost Tomb (HKLM-x32\...\National Geographic - Herod's Lost Tomb/DE-German_is1) (Version:  - City Interactive)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM-x32\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Nightmares from the Deep (HKLM-x32\...\Nightmares from the Deep_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Odyssee ins Ungewisse (HKLM-x32\...\Odyssee ins Ungewisse) (Version: 1.0.0.0 - INTENIUM GmbH)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PirateVille (HKLM-x32\...\PirateVille) (Version:  - )
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Profiler (HKLM-x32\...\{164B5A9F-D9BD-4EC3-880E-61A4E6935EEB}) (Version: 1.00.0000 - Purplehills)
Real Crimes - Jack The Ripper (HKLM-x32\...\Real Crimes - Jack The Ripper) (Version: 1.00 - phenomedia publishing gmbh)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.34.1130.2010 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.10.0416 - REALTEK Semiconductor Corp.)
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
Redemption Cemetery: Der Fluch des Raben (HKLM-x32\...\BFG-Redemption Cemetery - Der Fluch des Raben) (Version:  - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Ritter Arthur (HKLM-x32\...\Ritter Arthur) (Version:  - )
Robinson Crusoe (HKLM-x32\...\{7DF5A0FE-EEC4-439A-A3B5-DF91958DD5A7}_is1) (Version:  - cerasus.media GmbH)
Romance of Rome (HKLM-x32\...\{02CF7793-9F94-45E9-BB0F-E0E5FAB463E6}_is1) (Version:  - cerasus.media GmbH)
Samantha Swift and the Fountains of Fate (HKLM-x32\...\Samantha Swift and the Fountains of Fate) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Golden Touch (HKLM-x32\...\Samantha Swift and the Golden Touch) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Hidden Roses of Athena (HKLM-x32\...\Samantha Swift and the Hidden Roses of Athena) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Mystery from Atlantis (HKLM-x32\...\Samantha Swift and the Mystery from Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Schatz der Azteken (HKLM-x32\...\Schatz der Azteken) (Version:  - )
Secrets of Vatican (HKLM-x32\...\{66B76A83-4B3A-4218-82A4-862E26B745CA}) (Version: 1.00.0000 - Purplehills)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Snark Busters - Willkommen im Club (HKLM-x32\...\Snark Busters - Willkommen im Club) (Version:  - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Sony Ericsson Update Engine (HKLM-x32\...\Update Engine) (Version: 2.13.10.201308300830 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spannende Abenteuer Die verschollene Grabkammer (HKLM-x32\...\Spannende Abenteuer Die verschollene Grabkammer) (Version:  - )
Sprill && Ritchie (HKLM-x32\...\Sprill && Ritchie) (Version:  - )
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
StoneLoops of Jurassica (HKLM-x32\...\StoneLoops of Jurassica/DE-German_is1) (Version:  - City Interactive)
Strike Ball 3 (HKLM-x32\...\Strike Ball 3) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.4.4 - Synaptics Incorporated)
Tatort Museum (HKLM-x32\...\Tatort Museum) (Version: 1.0.0.0 - INTENIUM GmbH)
Tatort Museum 2 (HKLM-x32\...\Tatort Museum 2) (Version: 1.0.0.0 - INTENIUM GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer)
The Magicians Handbook 2 (HKLM-x32\...\{85225E9A-0292-4CF4-93AC-05C2559D4A6D}) (Version: 1.00.0000 - Purplehills)
The Mystery of Meane Manor (HKLM-x32\...\The Mystery of Meane Manor) (Version: 1.1.0.0 - MumboJumbo)
Time Machine (HKLM-x32\...\{9F9D845C-A5F0-423B-9820-240771C7645D}) (Version: 1.00.0000 - Purplehills)
TomTom HOME 2.8.2.2264 (HKLM-x32\...\TomTom HOME) (Version: 2.8.2.2264 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Treasure Island (HKLM-x32\...\{68EB8188-55D4-4BFA-9F37-F8167B095B17}) (Version: 1.00.0000 - Purplehills)
Treasure Masters, Inc. (HKLM-x32\...\Treasure Masters, Inc.) (Version:  - )
Treasures Of Mystery Island (HKLM-x32\...\Treasures Of Mystery Island) (Version:  - )
Tropical Lost Island (HKLM-x32\...\Tropical Lost Island/DE-German_is1) (Version:  - City Interactive)
Um die Welt in 80 Tagen - Wimmelbild (HKLM-x32\...\{4DE19B10-BF0A-40E4-85D7-C5CE09D83D92}) (Version: 1.00.0000 - Purplehills)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Unsolved Mystery Club - Amelia Earhart (HKLM-x32\...\Unsolved Mystery Club - Amelia Earhart) (Version:  - )
Update for Microsoft Office 2010 (KB2202188) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{86B7A074-265D-420C-9E1E-7A920EF0ECA7}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{556146F7-74AE-4E0A-B64F-5B8B93469F61}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B5516874-E926-4BFD-B412-D0E70112F244}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D6CE7280-6EE3-419A-8F47-DB111C040B1B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2523113) (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{C0FF04BF-A05E-408B-81CA-B7FACDA508A3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2523113) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{C0FF04BF-A05E-408B-81CA-B7FACDA508A3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2493983) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{309EEC22-83CE-4109-B019-BA9392FAA322}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector (KB2583935) (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{EDED840F-DD92-47ED-A2E4-63F6AC745B92}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector (KB2583935) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EDF9874C-9E37-4110-9FC3-094247E114DF}) (Version:  - Microsoft)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
Walsingham‘s Manor - Verlies der Seelen (HKLM-x32\...\Walsingham‘s Manor - Verlies der Seelen_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinZip Malware Protector (HKLM-x32\...\WinZip Malware Protector_is1) (Version: 2.1.1000.10740 - WinZip International LLC)
WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
World of Wimmelbild 2 (HKLM-x32\...\World of Wimmelbild 2) (Version:  - )
Youda Legend (HKLM-x32\...\Youda Legend) (Version:  - )
Youda Legend Der goldene Paradiesvogel (HKLM-x32\...\Youda Legend Der goldene Paradiesvogel) (Version:  - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2028D30E-633D-410D-830D-981298550799} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink)
Task: {262902C5-9376-4E7F-BC8A-D0BC75CB83D9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {33078020-8F6E-4D32-9436-737053F96DCE} - System32\Tasks\HPCeeScheduleForBesitzer => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {37CB5728-2BEC-453C-B7FF-D37DAC817765} - \Digital Sites No Task File
Task: {5B13AA26-741E-4D6C-A585-23ECF5DB0BA5} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-31] ()
Task: {5B20CC1D-E3D5-47E0-9312-457D594BCC0D} - \BitGuard No Task File
Task: {6461CFE0-9ABD-441B-AEBA-9D242E5F39B7} - System32\Tasks\WinZip Malware Protector => C:\Program Files (x86)\WinZip Malware Protector\AppManager.exe [2013-03-26] (Nico Mak Computing)
Task: {7A06B9E5-76A1-4208-BB0A-14DD979239FE} - \DSite No Task File
Task: {9734443C-2164-47F8-98BA-60C15FC3FA6E} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-03-26] (Nico Mak Computing)
Task: {977DB76C-E699-44C3-A351-4C9E0DDD0314} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {99607DA1-AB39-474C-BD4A-AEB4B72E42A5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {EC16804A-65EF-42BB-A6B7-E958C29679F6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-03-12] (Microsoft)
Task: C:\Windows\Tasks\HPCeeScheduleForBesitzer.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{0907793A-4E41-4A92-B5ED-210692D155D0}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2011-02-28 11:01 - 2011-02-28 11:01 - 00079872 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Services.dll
2011-02-28 11:01 - 2011-02-28 11:01 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2010-06-24 01:21 - 2010-06-24 01:21 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2011-02-28 11:02 - 2011-02-28 11:02 - 00102912 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2011-02-28 10:49 - 2011-02-28 10:49 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-02-02 10:41 - 2011-02-02 10:41 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-11-05 22:23 - 2013-11-05 22:21 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-03-27 22:52 - 2013-02-28 16:53 - 00886272 _____ () C:\Program Files (x86)\WinZip Malware Protector\System.Data.SQLite.dll
2014-03-27 22:52 - 2013-03-26 12:16 - 01718648 _____ () C:\Program Files (x86)\WinZip Malware Protector\aspsys.dll
2010-06-24 01:19 - 2010-06-24 01:19 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2013-12-26 14:35 - 2014-02-15 22:38 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:09629F6E
AlternateDataStreams: C:\ProgramData\Temp:0AC32449
AlternateDataStreams: C:\ProgramData\Temp:2495D97A
AlternateDataStreams: C:\ProgramData\Temp:2B1EA607
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F
AlternateDataStreams: C:\ProgramData\Temp:3E06C78F
AlternateDataStreams: C:\ProgramData\Temp:4673E9EA
AlternateDataStreams: C:\ProgramData\Temp:4CA05B44
AlternateDataStreams: C:\ProgramData\Temp:639BB5E9
AlternateDataStreams: C:\ProgramData\Temp:6FB48139
AlternateDataStreams: C:\ProgramData\Temp:78E0DF72
AlternateDataStreams: C:\ProgramData\Temp:9BAC4211
AlternateDataStreams: C:\ProgramData\Temp:A02025CE
AlternateDataStreams: C:\ProgramData\Temp:B54E4B5A
AlternateDataStreams: C:\ProgramData\Temp:B88DC997
AlternateDataStreams: C:\ProgramData\Temp:D31BE97C
AlternateDataStreams: C:\ProgramData\Temp:D48500F8
AlternateDataStreams: C:\ProgramData\Temp:F13867C6

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 33%
Total physical RAM: 5882.9 MB
Available physical RAM: 3927.38 MB
Total Pagefile: 11764 MB
Available Pagefile: 9295.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:684.19 GB) (Free:345.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.16 GB) (Free:1.55 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: B58C26AE)

Partition: GPT Partition Type.

==================== End Of Log ============================

Vielen Dank erst Mal!!

Rotetaube16 28.03.2014 13:48
So habe nun alles getan .....denke ich mir

erstmal mbam
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Update, 28.03.2014 11:53:43, SYSTEM, CONNYPC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1,
Update, 28.03.2014 11:54:14, SYSTEM, CONNYPC, Manual, Malware Database, 2014.3.4.9, 2014.3.28.3,

(end)
dann Adwcleaner
Code:
# AdwCleaner v3.022 - Bericht erstellt am 28/03/2014 um 13:05:12
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Besitzer - CONNYPC
# Gestartet von : C:\Users\Besitzer\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Babylon
[!] Ordner Gelöscht : C:\ProgramData\BitGuard
Ordner Gelöscht : C:\ProgramData\DSearchLink
Ordner Gelöscht : C:\ProgramData\iWin
Ordner Gelöscht : C:\ProgramData\Alawar Stargaze
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\LyriXeeker
Ordner Gelöscht : C:\Program Files (x86)\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\openit
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\DigitalSites
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\iWin
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\Smartbar
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\Extensions\133
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Lisa\AppData\Roaming\Mozilla\Firefox\Profiles\d3wwdsam.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Lisa\AppData\Roaming\Mozilla\Firefox\Profiles\d3wwdsam.default\searchplugins\Askcom.xml
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\searchplugins\Conduit.xml
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\BitGuard
Datei Gelöscht : C:\Windows\Tasks\Digital Sites.job
Datei Gelöscht : C:\Windows\System32\Tasks\Digital Sites
Datei Gelöscht : C:\Windows\Tasks\DSite.job
Datei Gelöscht : C:\Windows\System32\Tasks\DSite

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gelöscht : HKCU\Software\580dadfe26dbf48
Schlüssel Gelöscht : HKLM\SOFTWARE\580dadfe26dbf48
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\Conduit
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\delta LTD
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyrixeeker
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\openit open it!
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16421

[x] Nicht Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\prefs.js ]

Zeile gelöscht : user_pref("CT3201318.1000082.isPlayDisplay", "true");
Zeile gelöscht : user_pref("CT3201318.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
Zeile gelöscht : user_pref("CT3201318.1000234.TWC_TMP_city", "HAMBURG");
Zeile gelöscht : user_pref("CT3201318.1000234.TWC_TMP_country", "DE");
Zeile gelöscht : user_pref("CT3201318.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.FirstTime", "true");
Zeile gelöscht : user_pref("CT3201318.FirstTimeFF3", "true");
Zeile gelöscht : user_pref("CT3201318.LoginRevertSettingsEnabled", true);
Zeile gelöscht : user_pref("CT3201318.PG_ENABLE", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.RevertSettingsEnabled", true);
Zeile gelöscht : user_pref("CT3201318.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Zeile gelöscht : user_pref("CT3201318.SF_STATUS.enc", "RU5BQkxFRA==");
Zeile gelöscht : user_pref("CT3201318.SF_USER_ID.enc", "Y2lkXzExNTIwMTMxOTMxMjk3OTg3NTQ2");
Zeile gelöscht : user_pref("CT3201318.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3201318&SearchSource=2&q=");
Zeile gelöscht : user_pref("CT3201318.UserID", "UN96743018885466597");
Zeile gelöscht : user_pref("CT3201318.addressBarTakeOverEnabledInHidden", "true");
Zeile gelöscht : user_pref("CT3201318.browser.search.defaultthis.engineName", true);
Zeile gelöscht : user_pref("CT3201318.embeddedsData", "[{\"appId\":\"129768733323172459\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Zeile gelöscht : user_pref("CT3201318.enableAlerts", "always");
Zeile gelöscht : user_pref("CT3201318.enableFix404ByUser", "FALSE");
Zeile gelöscht : user_pref("CT3201318.event_data", "%5B%5D");
Zeile gelöscht : user_pref("CT3201318.fired_events", "");
Zeile gelöscht : user_pref("CT3201318.firstTimeDialogOpened", "true");
Zeile gelöscht : user_pref("CT3201318.fixPageNotFoundErrorByUser", "TRUE");
Zeile gelöscht : user_pref("CT3201318.fixPageNotFoundErrorInHidden", "true");
Zeile gelöscht : user_pref("CT3201318.fixUrls", true);
Zeile gelöscht : user_pref("CT3201318.isCheckedStartAsHidden", true);
Zeile gelöscht : user_pref("CT3201318.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.isFirstTimeToolbarLoading", "false");
Zeile gelöscht : user_pref("CT3201318.isNewTabEnabled", false);
Zeile gelöscht : user_pref("CT3201318.isPerformedSmartBarTransition", "true");
Zeile gelöscht : user_pref("CT3201318.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.key_date", "5");
Zeile gelöscht : user_pref("CT3201318.keyword", false);
Zeile gelöscht : user_pref("CT3201318.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3201318&octid=CT3201318&SearchSource=15&CUI=UN96743018885466597&SSPV=EB_SSPV\"}");
Zeile gelöscht : user_pref("CT3201318.lastVersion", "10.15.2.523");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appStateReportTime.enc", "MTM2ODI5MzQ2MTUxNA==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_CouponBuddy.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_Easytobook.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_PriceGong.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appState_WindowShopper.enc", "b24=");
Zeile gelöscht : user_pref("CT3201318.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnNEaWFsb2ciOnsiZGlzcGxheU5h[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_appsDefaultEnabled.enc", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGFyZ2V0ZWQiLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiIxM2RhYWE2YS02NzYwLTQ0NDAtOTJhMy1hYmEwNzliNzI4ZjAiLCJ[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_eventsCache.enc", "eyJjM2UyZWE4MS1hZDI3LTRmZjMtODBmNC1lMmM1NzIyNDNlZjIiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXcifSwidW5pcXVlS[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_first_time.enc", "MQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_gadgetOpen.enc", "MA==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_lastLoginTime.enc", "MTM2ODI5MzQ1NzQ1Ng==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50LVJpY2h0bGluaWUifSwiZ2FkZ2V0RGVzY3JpcHRpb25QcmltYXJ5Ijp7IlRleHQiOiJWYWx1ZSBBcHBzIGJlcmVpY2hlcnQgSWhy[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiMjQ5XzAiLCJpc1Rlc3QiOnRydWUsImlzV2VsY29tZUV4cGVyaWVuY2VFbmFibGVkQnlEZWZhdWx0I[...]
Zeile gelöscht : user_pref("CT3201318.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
Zeile gelöscht : user_pref("CT3201318.mam_gk_userId.enc", "YjhlNzNmNDEtZmExMi00MjZhLTgwNDUtMjY2NzI0NTI4YWVk");
Zeile gelöscht : user_pref("CT3201318.migrateAppsAndComponents", true);
Zeile gelöscht : user_pref("CT3201318.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fflvrunner.ourtoolbar.com%2FUninstallInstructions%2F\",\"EB_MAIN_FRAME_TITLE\":\"%0A%09How%20to%20Uninstall%0A\",\"EB[...]
Zeile gelöscht : user_pref("CT3201318.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.personalApps", "{\"dataType\":\"object\",\"data\":\"[\\\"BROWSER_COMPONENT\\\"]\"}");
Zeile gelöscht : user_pref("CT3201318.price-gong.isManagedApp", "true");
Zeile gelöscht : user_pref("CT3201318.search.searchAppId", "129768733323172459");
Zeile gelöscht : user_pref("CT3201318.search.searchCount", "0");
Zeile gelöscht : user_pref("CT3201318.searchInNewTabEnabled", "false");
Zeile gelöscht : user_pref("CT3201318.searchInNewTabEnabledByUser", "false");
Zeile gelöscht : user_pref("CT3201318.searchInNewTabEnabledInHidden", "true");
Zeile gelöscht : user_pref("CT3201318.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.sendUsageEnabled", "false");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3201318\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://FLVRunner.OurToolbar.com//xpi\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"FLV Runner\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1368293452948");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_appTracking_lastUpdate", "1349620404900");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_appsMetadata_lastUpdate", "1368293452515");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1368293452680");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_location_lastUpdate", "1368287060489");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.10.20.14_lastUpdate", "1345581571615");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.10.27.6_lastUpdate", "1353435432008");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358457612197");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359323287257");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360777977385");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.14.65.43_lastUpdate", "1364407137817");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.15.0.562_lastUpdate", "1366437967261");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368293452320");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_menu_769c590835a76d075fe33b9a87a87786_lastUpdate", "1368293453553");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_menu_d32f45618f5a02bd965c56155a643855_lastUpdate", "1368293453077");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_optimizer_lastUpdate", "1349620406566");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1368293452618");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_searchAPI_lastUpdate", "1368293452523");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_serviceMap_lastUpdate", "1368287059972");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_toolbarContextMenu_lastUpdate", "1368293452731");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_toolbarSettings_lastUpdate", "1368287062015");
Zeile gelöscht : user_pref("CT3201318.serviceLayer_services_translation_lastUpdate", "1368287061807");
Zeile gelöscht : user_pref("CT3201318.settingsINI", true);
Zeile gelöscht : user_pref("CT3201318.showToolbarPermission", "false");
Zeile gelöscht : user_pref("CT3201318.smartbar.CTID", "CT3201318");
Zeile gelöscht : user_pref("CT3201318.smartbar.Uninstall", "0");
Zeile gelöscht : user_pref("CT3201318.smartbar.homepage", true);
Zeile gelöscht : user_pref("CT3201318.smartbar.isHidden", false);
Zeile gelöscht : user_pref("CT3201318.smartbar.toolbarName", "FLV Runner ");
Zeile gelöscht : user_pref("CT3201318.startPage", "userChanged");
Zeile gelöscht : user_pref("CT3201318.toolbarBornServerTime", "5-8-2012");
Zeile gelöscht : user_pref("CT3201318.toolbarCurrentServerTime", "11-5-2013");
Zeile gelöscht : user_pref("CT3201318.toolbarLoginClientTime", "Mon Apr 01 2013 19:06:58 GMT+0200");
Zeile gelöscht : user_pref("CT3201318.upgradeFromClearSBVersion", true);
Zeile gelöscht : user_pref("CT3201318_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1368286936832,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelöscht : user_pref("Smartbar.ConduitHomepagesList", "");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchEngineList", "");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchUrlList", "");
Zeile gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "");
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "3646fac9000000000000ac81125a277a");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15945");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.622:27:16");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tt=288013_icon&tsp=4988");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Zeile gelöscht : user_pref("smartbar.machineId", "R64IL8NALTCQQW6/NME1OVTIB/IGHWH2ECFEAN2EJ2VXJUKJEZDK0V6V++XLFBCVYJTX74AL+GSUJTF1XGDSWW");

[ Datei : C:\Users\Lisa\AppData\Roaming\Mozilla\Firefox\Profiles\d3wwdsam.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=0B4792A2-3CA4-4582-B499-7557DE49B54C&apn_ptnrs=&apn_sauid=B25985F5-5B47-4650-847A-FD5432A794D0&ap[...]

*************************

AdwCleaner[R0].txt - [25125 octets] - [28/03/2014 13:02:18]
AdwCleaner[S0].txt - [23951 octets] - [28/03/2014 13:05:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24012 octets] ##########
musst ich noch ein 2.Mal machen
Code:
# AdwCleaner v3.022 - Bericht erstellt am 28/03/2014 um 13:12:27
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Besitzer - CONNYPC
# Gestartet von : C:\Users\Besitzer\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16421

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default\prefs.js ]


[ Datei : C:\Users\Lisa\AppData\Roaming\Mozilla\Firefox\Profiles\d3wwdsam.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [25125 octets] - [28/03/2014 13:02:18]
AdwCleaner[R1].txt - [1224 octets] - [28/03/2014 13:10:26]
AdwCleaner[S0].txt - [24173 octets] - [28/03/2014 13:05:12]
AdwCleaner[S1].txt - [1048 octets] - [28/03/2014 13:12:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1108 octets] ##########
dann JRT

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Home Premium x64
Ran by Besitzer on 28.03.2014 at 13:19:09,65
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-619880712-574751267-193086799-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{647809D8-3F44-4F72-A81B-6ED305E9F372}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{647809D8-3F44-4F72-A81B-6ED305E9F372}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\big fish"
Successfully deleted: [Folder] "C:\ProgramData\big fish games"
Successfully deleted: [Folder] "C:\Users\Besitzer\AppData\Roaming\big fish games"
Successfully deleted: [Folder] "C:\Users\Besitzer\appdata\local\big fish"
Successfully deleted: [Folder] "C:\bigfishcache"
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{0A347265-20E9-402B-A2B9-B0D0A5214354}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{0A859682-EAD1-4AF1-977F-F3FB8088ED90}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{0CD414EA-5A27-4048-8EB6-91E334C6ABC5}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{0FCA8F39-2696-40CB-9F08-5ADE1F4CAA73}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{117BFF30-99ED-4EE8-A192-ABDB287B41DB}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{189D95E6-271E-4420-9F6F-AE238680FAB2}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{1F0D4559-BF71-499C-98D2-C163893CF492}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{2315BE41-43BA-4ABE-85CC-09C5C19A1315}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{252034A5-9A33-48D2-A4B1-59F719840D81}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{2DBE4BB6-8973-42F0-9EE4-92A45F0053D6}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{2F0F8CB9-53E6-442E-BE84-818039DF9A48}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3020BAAE-91D0-4FB1-A34B-68D6EB0C3D92}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{365F7E17-EEC9-4248-8DA1-0B741F844E37}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{39E5AC1B-BC50-4DB8-89AF-CC967509F7D3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3A770467-C39C-4C17-8414-1BA1728B003B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3C134F6D-B3B8-410B-9874-32F58A9E3D7B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3DD210BB-8C85-451F-9EA4-7B033A308AF6}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{3E96D129-8882-4C4A-8132-0955610D1D6D}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{4C7225C5-2FDC-4B1E-9457-A21ED71CCAA3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{4F6BB57C-484C-4542-8C69-AC26C8A66921}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{51040CE6-81CA-4D1F-9695-39BD63995DBC}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{514ACB0E-6FEA-4CBD-96E8-34DFC3B1015B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{52F92B82-902D-493E-82FA-DC160413CDDD}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{5B02A775-7377-4C75-BC23-EC630BAAA223}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{5D6BD3FF-3194-4E24-A374-F963CD8D3B51}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{600D2BF2-5739-4444-B72B-7ECC52B36325}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{605E3553-B6FF-4ED4-ADF3-1BF601FFA432}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{61745BD8-5E40-482A-A70F-60D26ECA6AD4}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{62866BF4-A40F-46F8-9A0E-3AB0A6ACC744}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{6335AD71-5205-498C-ABB0-1F803184EFE0}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{6677A6C7-A16F-4169-891D-0BCF5A28946F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{6755DD1B-B2E3-4799-8E50-73D9C675038F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7357D46D-AA8E-46F8-ABEA-3F5E3368F344}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{74088BF4-4CBA-4132-B920-320FEF38FB4F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{74B7C679-581F-4B8D-8E2D-DF1BDF2D4D59}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{76898B6A-9D30-4F4E-8E69-561644A0843B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7AAEFA6E-BAAF-4F4E-83B8-DBD779622968}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7B69222F-C663-4E0E-95F5-7EA116AB6B7B}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7B7BB5AD-B276-41B7-B377-774A6A78BC04}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{7E4D45B7-6941-4E69-9F2B-F282707F870E}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{86571AEE-D721-4898-BC41-E02FF42997F8}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{86DE42C2-15F4-4CC0-900D-AF1BB6ECC6A9}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{887ED6B2-1447-45D1-8A0D-5B063A45EE76}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{89B7CA46-B744-4D1C-A6E7-2B22B0C5DC47}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{91A65640-F1A2-4812-A59B-6C4226E40620}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{92B2AF8B-CB71-4F83-AF6B-81FE883FEF68}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{96A59F0D-1DBC-40AC-984C-CD41EE9A551C}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{96FE2A92-5A49-4956-8F88-852959CAEEE2}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{A4DEDEEE-92EA-46AA-A4F0-F1D2840C0927}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{A6F2B3F2-4574-47C9-A098-7E6EF809D977}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{A91AB844-24D3-443D-AB7E-E004530145B0}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{AE9E9A5F-B0B3-4B7F-B6B7-2926CC58A164}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{AEC038D1-BAC3-45F1-B78B-C02A418402C3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{B0012355-54AE-4380-8955-6C13A64B0ED2}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{B3855772-61E9-42AA-8B84-3B0E452F09B3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{B3FB29FE-DFA5-474A-B22E-067E02188A71}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{B40ED8FF-7376-448C-B672-FA4D709A97B6}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{BD2D308C-8BCF-4FD6-8DA8-AAD3EC42FFB9}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{C2FDF706-3F85-4CFF-B463-55F8396F6BCE}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{CCC7AC1F-7F2C-435A-ACD8-4B7D46203DE4}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{CF45CA51-68E2-4CED-AE7F-DBF6D762D89F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{D4DA2241-395D-4ED9-B86D-20FD1338A874}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{DB3D7E2F-ED00-48BA-8D8F-FE50D85F0C37}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{DE546201-5D50-4E08-855F-9B9421472B11}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{E00B87C1-FF7B-404A-8DE5-671126D547C9}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{E2F72F32-3E11-4F5D-B4CE-E4797F31967F}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{E6B09C02-1B09-46F9-9916-330D55CD52D6}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{ECD187F6-A6ED-40BA-9104-97A076410EA3}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{F21969C8-4112-4775-80B6-43755BE3774D}
Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{FB605E5E-5FF4-41C1-81E9-44A12DBA44D7}



~~~ FireFox

Emptied folder: C:\Users\Besitzer\AppData\Roaming\mozilla\firefox\profiles\za6muobr.default\minidumps [274 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.03.2014 at 13:32:24,75
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
und zum Schluss noch
FRST

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Besitzer (administrator) on CONNYPC on 28-03-2014 13:35:55
Running from C:\Users\Besitzer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intenium) C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [525312 2010-12-17] (IDT, Inc.)
HKLM\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2011-01-27] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-12] (Easybits)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [WinZip Malware Protector_startup] - C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [6390136 2013-03-26] (Nico Mak Computing)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-12] (Hewlett-Packard)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [Spiele Post] - C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe [483400 2013-12-06] (Intenium)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [247728 2011-04-22] (TomTom)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: {a496f38a-dfce-11e0-a586-984be1b1002d} - F:\LaunchU3.exe -a
GroupPolicyUsers\S-1-5-21-619880712-574751267-193086799-1006\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {647809D8-3F44-4F72-A81B-6ED305E9F372} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-04-13] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default
FF Homepage: hxxp://www.arcor.de/ums/ums_ordner.jsp?ordnername=Posteingang
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-09]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-09]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-02-28] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-28 13:32 - 2014-03-28 13:34 - 00009204 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-03-28 13:19 - 2014-03-28 13:19 - 00000000 ____D () C:\Windows\ERUNT
2014-03-28 13:18 - 2014-03-28 13:18 - 01038974 _____ (Thisisu) C:\Users\Besitzer\Desktop\JRT.exe
2014-03-28 13:15 - 2014-03-28 13:15 - 00001188 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S1].txt
2014-03-28 13:08 - 2014-03-28 13:08 - 00024173 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S0].txt
2014-03-28 13:02 - 2014-03-28 13:12 - 00000000 ____D () C:\AdwCleaner
2014-03-28 13:01 - 2014-03-28 13:01 - 01950720 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-03-28 13:00 - 2014-03-28 13:00 - 00000259 _____ () C:\Users\Besitzer\Desktop\mbam.txt
2014-03-28 11:53 - 2014-03-28 12:57 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-28 11:52 - 2014-03-28 11:52 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-03-28 11:52 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-28 11:52 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-28 11:52 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-28 11:50 - 2014-03-28 11:52 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Besitzer\Desktop\mbam-setup-2.0.0.1000.exe
2014-03-28 11:18 - 2014-03-28 11:18 - 00001260 _____ () C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2014-03-28 11:18 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-28 11:05 - 2014-03-28 11:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Desktop\revosetup95.exe
2014-03-28 10:11 - 2014-03-28 10:11 - 00012547 _____ () C:\Users\Besitzer\Desktop\Gmer.txt
2014-03-28 09:39 - 2014-03-28 09:39 - 00009212 _____ () C:\Users\Besitzer\Desktop\log 2.xml
2014-03-28 09:21 - 2014-03-28 09:28 - 00055480 _____ () C:\Users\Besitzer\Desktop\Addition.txt
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2014-03-28 09:20 - 2014-03-28 13:35 - 00017962 _____ () C:\Users\Besitzer\Desktop\FRST.txt
2014-03-28 09:20 - 2014-03-28 13:35 - 00000000 ____D () C:\FRST
2014-03-28 09:19 - 2014-03-28 09:19 - 02157056 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-03-28 09:16 - 2014-03-28 09:17 - 00000478 _____ () C:\Users\Besitzer\Desktop\defogger_disable.log
2014-03-28 09:16 - 2014-03-28 09:16 - 00000000 _____ () C:\Users\Besitzer\defogger_reenable
2014-03-28 09:15 - 2014-03-28 09:15 - 00050477 _____ () C:\Users\Besitzer\Desktop\Defogger.exe
2014-03-28 08:56 - 2014-03-28 08:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 08:53 - 2014-03-28 09:12 - 00000700 _____ () C:\Users\Besitzer\Desktop\Ereignisse.txt
2014-03-28 08:23 - 2014-03-28 08:23 - 00003063 _____ () C:\Users\Besitzer\Desktop\log.xml
2014-03-28 00:38 - 2014-03-28 00:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 00:07 - 2014-03-28 00:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 00:00 - 2014-03-28 00:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 22:52 - 2014-03-28 13:15 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-27 22:52 - 2014-03-28 09:38 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-27 22:52 - 2014-03-28 00:38 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-27 22:52 - 2014-03-28 00:38 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-27 22:52 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe
2014-03-27 22:51 - 2014-03-27 22:52 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 13:21 - 2014-03-28 08:56 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-27 13:21 - 2014-03-28 08:56 - 00000000 ____D () C:\Windows\Minidump
2014-03-27 13:21 - 2014-03-27 13:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-21 20:11 - 2014-03-21 20:11 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-11 23:40 - 2014-03-11 23:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-11 23:40 - 2014-03-11 23:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien

==================== One Month Modified Files and Folders =======

2014-03-28 13:36 - 2014-03-28 09:20 - 00017962 _____ () C:\Users\Besitzer\Desktop\FRST.txt
2014-03-28 13:35 - 2014-03-28 09:20 - 00000000 ____D () C:\FRST
2014-03-28 13:34 - 2014-03-28 13:32 - 00009204 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-03-28 13:21 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-28 13:21 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-28 13:19 - 2014-03-28 13:19 - 00000000 ____D () C:\Windows\ERUNT
2014-03-28 13:18 - 2014-03-28 13:18 - 01038974 _____ (Thisisu) C:\Users\Besitzer\Desktop\JRT.exe
2014-03-28 13:15 - 2014-03-28 13:15 - 00001188 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S1].txt
2014-03-28 13:15 - 2014-03-27 22:52 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-28 13:14 - 2012-03-30 19:46 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-03-28 13:14 - 2011-09-09 21:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-03-28 13:13 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-28 13:13 - 2009-07-14 05:51 - 00179172 _____ () C:\Windows\setupact.log
2014-03-28 13:12 - 2014-03-28 13:02 - 00000000 ____D () C:\AdwCleaner
2014-03-28 13:12 - 2011-05-01 00:53 - 01651465 _____ () C:\Windows\WindowsUpdate.log
2014-03-28 13:08 - 2014-03-28 13:08 - 00024173 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S0].txt
2014-03-28 13:06 - 2010-11-21 04:47 - 00587100 _____ () C:\Windows\PFRO.log
2014-03-28 13:01 - 2014-03-28 13:01 - 01950720 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-03-28 13:00 - 2014-03-28 13:00 - 00000259 _____ () C:\Users\Besitzer\Desktop\mbam.txt
2014-03-28 12:57 - 2014-03-28 11:53 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-28 11:52 - 2014-03-28 11:52 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-03-28 11:52 - 2014-03-28 11:50 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Besitzer\Desktop\mbam-setup-2.0.0.1000.exe
2014-03-28 11:18 - 2014-03-28 11:18 - 00001260 _____ () C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2014-03-28 11:18 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-28 11:05 - 2014-03-28 11:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Desktop\revosetup95.exe
2014-03-28 10:11 - 2014-03-28 10:11 - 00012547 _____ () C:\Users\Besitzer\Desktop\Gmer.txt
2014-03-28 09:46 - 2013-08-29 21:26 - 00000213 _____ () C:\Users\Besitzer\AppData\Roaming\WB.CFG
2014-03-28 09:39 - 2014-03-28 09:39 - 00009212 _____ () C:\Users\Besitzer\Desktop\log 2.xml
2014-03-28 09:38 - 2014-03-27 22:52 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-28 09:28 - 2014-03-28 09:21 - 00055480 _____ () C:\Users\Besitzer\Desktop\Addition.txt
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2014-03-28 09:19 - 2014-03-28 09:19 - 02157056 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-03-28 09:17 - 2014-03-28 09:16 - 00000478 _____ () C:\Users\Besitzer\Desktop\defogger_disable.log
2014-03-28 09:16 - 2014-03-28 09:16 - 00000000 _____ () C:\Users\Besitzer\defogger_reenable
2014-03-28 09:16 - 2011-07-25 11:05 - 00000000 ____D () C:\Users\Besitzer
2014-03-28 09:15 - 2014-03-28 09:15 - 00050477 _____ () C:\Users\Besitzer\Desktop\Defogger.exe
2014-03-28 09:12 - 2014-03-28 08:53 - 00000700 _____ () C:\Users\Besitzer\Desktop\Ereignisse.txt
2014-03-28 08:56 - 2014-03-28 08:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 08:56 - 2014-03-27 13:21 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-28 08:56 - 2014-03-27 13:21 - 00000000 ____D () C:\Windows\Minidump
2014-03-28 08:55 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-28 08:23 - 2014-03-28 08:23 - 00003063 _____ () C:\Users\Besitzer\Desktop\log.xml
2014-03-28 00:38 - 2014-03-28 00:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 00:38 - 2014-03-27 22:52 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-28 00:38 - 2014-03-27 22:52 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-28 00:32 - 2011-09-07 21:03 - 00000000 ____D () C:\Users\Besitzer\Desktop\Wimmelbild
2014-03-28 00:07 - 2014-03-28 00:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 00:00 - 2014-03-28 00:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 22:52 - 2014-03-27 22:51 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 13:21 - 2014-03-27 13:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-26 22:37 - 2011-09-07 10:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\SoftGrid Client
2014-03-26 13:01 - 2013-03-23 23:54 - 00003204 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForBesitzer
2014-03-26 13:01 - 2013-03-23 23:54 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForBesitzer.job
2014-03-24 07:32 - 2011-12-24 20:35 - 00000000 ____D () C:\Users\Lisa\AppData\Local\CrashDumps
2014-03-21 20:11 - 2014-03-21 20:11 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-21 19:01 - 2011-09-09 21:03 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-17 21:44 - 2011-04-14 01:04 - 00658120 _____ () C:\Windows\system32\perfh007.dat
2014-03-17 21:44 - 2011-04-14 01:04 - 00131202 _____ () C:\Windows\system32\perfc007.dat
2014-03-17 21:44 - 2009-07-14 06:13 - 01508746 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-16 23:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-12 23:17 - 2012-08-30 19:10 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 23:17 - 2011-09-07 15:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 23:15 - 2011-09-07 18:12 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-03-11 23:40 - 2014-03-11 23:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-11 23:40 - 2014-03-11 23:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien
2014-03-05 09:26 - 2014-03-28 11:52 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-03-28 11:52 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2014-03-28 11:52 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\AskSLib.dll
C:\Users\Besitzer\AppData\Local\Temp\avgnt.exe
C:\Users\Besitzer\AppData\Local\Temp\bfguni.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe
C:\Users\Besitzer\AppData\Local\Temp\tmqjb5q9.dll
C:\Users\Besitzer\AppData\Local\Temp\uninst1.exe
C:\Users\Besitzer\AppData\Local\Temp\zcenhbks.dll
C:\Users\Lisa\AppData\Local\Temp\APNStub.exe
C:\Users\Lisa\AppData\Local\Temp\AskSLib.dll
C:\Users\Lisa\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-17 13:53

==================== End Of Log ============================
--- --- ---

ein hab ich noch
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Besitzer at 2014-03-28 13:38:10
Running from C:\Users\Besitzer\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

100 Prozent Wimmelbild (HKLM-x32\...\{149F9A5E-889D-474B-BA15-AFA0E614E5EA}_is1) (Version:  - cerasus.media GmbH)
1001 Nacht - Die Abenteuer von Sindbad (HKLM-x32\...\1001 Nacht - Die Abenteuer von Sindbad) (Version:  - )
20.000 Meilen unter dem Meer (HKLM-x32\...\{6692A6CC-6EDA-40C3-8F57-1E8ECD5AE2E0}) (Version: 1.00.0000 - Purplehills)
3 Days - Amulet Secret (HKLM-x32\...\3 Days - Amulet Secret_is1) (Version:  - Realore Studios)
3*3 Match (HKCU\...\3*3 Match) (Version:  - )
5600 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
5600_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
5600Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
Abenteuer Hawaii - Pearl Harbor (HKLM-x32\...\Abenteuer Hawaii - Pearl Harbor) (Version:  - )
Abenteuer Hawaii 2 - Die Verborgene Insel (HKLM-x32\...\Abenteuer Hawaii 2 - Die Verborgene Insel) (Version:  - )
Abenteuer von Luxor (HKLM-x32\...\Abenteuer von Luxor) (Version: 1.1.0.0 - MumboJumbo)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.2.152.32 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.1) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.1 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
Aegypten Box (HKLM-x32\...\Aegypten Box) (Version:  - )
Affair Bureau (HKLM-x32\...\Affair Bureau) (Version: 1.0.0.0 - INTENIUM GmbH)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
Agatha Christie Death on the Nile (HKLM-x32\...\{4C33389D-0F65-40A3-B76C-897502500C4B}) (Version: 1.0.0 - JoWood)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Akademie der Magie 2 (HKLM-x32\...\Akademie der Magie 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Alabama Smith (HKLM-x32\...\Alabama Smith) (Version:  - )
Alabama Smith 2 (HKLM-x32\...\Alabama Smith 2) (Version:  - )
Aladins Wunderlampe (HKLM-x32\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM-x32\...\Alamandi) (Version: 1.0.0.0 - INTENIUM GmbH)
Amazing Adventures Around the World (HKLM-x32\...\Amazing Adventures Around the World) (Version:  - PopCap Games)
AMD Fuel (Version: 2011.0228.1151.21177 - Ihr Firmenname) Hidden
Ancient Mysteries (HKLM-x32\...\Ancient Mysteries_is1) (Version:  - astragon Software GmbH)
Ancient Quest of Saqqarah (HKLM-x32\...\Ancient Quest of Saqqarah/DE-German_is1) (Version:  - City Interactive)
Animal Agents (HKLM-x32\...\{7B5A952B-3150-4037-BE90-D94DFB717713}_is1) (Version:  - cerasus.media GmbH)
Ankh_hog (HKLM-x32\...\Ankh_hog) (Version:  - )
Annies Millions (HKLM-x32\...\Annies Millions) (Version: 1.0.0.0 - INTENIUM GmbH)
Antique Road Trip U.S.A. (HKLM-x32\...\Antique Road Trip U.S.A.) (Version: 1.0.0.0 - INTENIUM GmbH)
Ashley Jones – Reise Ins Alte Ägypten (HKLM-x32\...\Ashley Jones – Reise Ins Alte Ägypten) (Version:  - )
ATI Catalyst Install Manager (HKLM\...\{7FBA6627-88F8-0AE0-9326-FB8488DD26E0}) (Version: 3.0.812.0 - ATI Technologies, Inc.)
AtlantisQuest (HKLM-x32\...\{1D619FC4-4F88-406C-9E78-B948BFC998FA}) (Version: 1.00.0000 - Ihr Firmenname)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Aztec Adventures (HKLM-x32\...\Aztec Adventures/DE-German_is1) (Version:  - City Interactive)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bejeweled Twist (HKLM-x32\...\Bejeweled Twist) (Version:  - )
Big City Mystery (HKLM-x32\...\{9918955A-AA7E-4C18-AB5D-B949A1314347}_is1) (Version:  - cerasus.media GmbH)
Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.2.0.6 - )
Big Rig Europe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Build-a-lot 3 (HKLM-x32\...\Build-a-lot 3) (Version:  - )
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0228.1151.21177 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0228.1151.21177 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0228.1151.21177 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help English (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help French (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help German (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
ccc-core-static (x32 Version: 2011.0228.1151.21177 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2011.0228.1151.21177 - ATI) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Christmasville (HKLM-x32\...\{D178746E-0919-424E-88A7-81A0E46FF03E}) (Version: 1.00.0000 - Purplehills)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
City Style (HKLM-x32\...\City Style) (Version:  - )
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Cradle of Egypt (HKLM-x32\...\{2C02C8E3-CF3B-44BE-98C8-12A16EAF2713}_is1) (Version:  - cerasus.media GmbH)
Cradle of Rome 2 (HKLM-x32\...\{E60E8119-F64A-436B-8449-4FF87FC97350}_is1) (Version:  - cerasus.media GmbH)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Curse of the Pharaoh: Die Tr&auml;nen der Sachmet (HKLM-x32\...\BFG-Curse of the Pharaoh - Die Traenen der Sachmet) (Version:  - )
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.3922 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.1.3922 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Tales: Der Goldkafer von Edgar Allan Poe (HKLM-x32\...\BFG-Dark Tales - Der Goldkafer von Edgar Allan Poe) (Version:  - )
Das Geheimnis des Pharaos (HKLM-x32\...\Das Geheimnis des Pharaos) (Version:  - )
Das geheimnisvolle Tagebuch (HKLM-x32\...\Das geheimnisvolle Tagebuch) (Version:  - )
Das rätselhafte Kristall-Portal (HKLM-x32\...\Das rätselhafte Kristall-Portal) (Version:  - )
Das Schicksal der Marie Antoinette (HKLM-x32\...\Das Schicksal der Marie Antoinette) (Version:  - )
Das Vermächtnis: Die Legende des Heiligen Schatzes (HKLM-x32\...\Chronicles of Mystery 3/DE-German_is1) (Version:  - City Interactive)
Definition update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{28857979-5507-4C10-A922-FF709A19D38C}) (Version:  - Microsoft)
Der Fluch des Aegyptischen Artefakts (HKLM-x32\...\Der Fluch des Aegyptischen Artefakts) (Version:  - )
Der Graf von Monte Christo (HKLM-x32\...\Der Graf von Monte Christo) (Version: 1.0.0.0 - INTENIUM GmbH)
Der Stein der Weisen (HKLM-x32\...\Der Stein der Weisen) (Version:  - )
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)
DEUTSCHLAND SPIELT Spiele Post (HKLM-x32\...\DEUTSCHLAND SPIELT Spiele Post) (Version: 1.0.2.4 - INTENIUM GmbH)
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
Die 4 Elemente (HKLM-x32\...\Die 4 Elemente) (Version:  - )
Die Abenteuer-Reise (HKLM-x32\...\Die Abenteuer-Reise) (Version: 1.0.0.0 - INTENIUM GmbH)
Die Jade-Münze (HKLM-x32\...\Die Jade-Münze) (Version: 1.0.0.0 - INTENIUM GmbH)
Die Kunst des Mordens: Der Marionettenspieler (HKLM-x32\...\Art of Murder 2/DE-German_is1) (Version:  - City Interactive)
Die Legende von Pocahontas (HKLM-x32\...\{3BFA752E-2E76-4964-BDA3-94B486A18223}_is1) (Version:  - cerasus.media GmbH)
Die Sage von Kolossus (HKLM-x32\...\Die Sage von Kolossus) (Version:  - )
Die Schatzsucher: Visionen des Goldes ™ (HKLM-x32\...\BFG-Die Schatzsucher - Visionen des Goldes) (Version:  - )
Die Schlange der Isis ™ (HKLM-x32\...\BFG-Die Schlange der Isis) (Version:  - )
Die Wiege Olympias 2 (HKLM-x32\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
DriverTuner 3.1.0.1 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.1 - LionSea SoftWare)
Eldorado (HKLM-x32\...\{6540D6AD-4218-444D-84EC-E6C85F35EE31}) (Version: 1.00.0000 - Purplehills)
Emily Archer und der Fluch des Tutanchamun (HKLM-x32\...\{D09BA721-DF68-4149-883C-F2AE7A808962}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Escape from Lost Island (HKLM-x32\...\Escape from Lost Island) (Version: 1.0.0.0 - INTENIUM GmbH)
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Fallen Shadows - Schatten der Kindheit (HKLM-x32\...\{AE2893E9-145A-41AC-85C6-ED046B13572E}) (Version: 1.0.0 - Happy Muffin Top)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Fiona Finch (HKLM-x32\...\Fiona Finch) (Version: 1.0.0.0 - INTENIUM GmbH)
Fishdom (x32 Version: 2.2.0.95 - WildTangent) Hidden
Frankenstein (HKLM-x32\...\{610B773E-3183-43D5-B01D-862EFF276B81}) (Version: 1.00.0000 - Ihr Firmenname)
freundin - Big City Mystery (HKLM-x32\...\{1F9A14A2-BC64-40D2-9241-4470345298C7}_is1) (Version:  - cerasus.media GmbH)
freundin - Goldenes Prag (HKLM-x32\...\{9E8AA698-979E-4694-A2C3-10591194328A}_is1) (Version:  - cerasus.media GmbH)
freundin - Romance of Rome (HKLM-x32\...\{5E70B619-B3D0-4B50-B57E-5CEBE0201248}_is1) (Version:  - cerasus.media GmbH)
freundin - The Lost Inca Prophecy (HKLM-x32\...\{BE0DFE33-C23B-4111-A63D-ED0994DF3B2C}_is1) (Version:  - cerasus.media GmbH)
Garten-Glück (HKLM-x32\...\Garten-Glück) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheime Fälle: Die gestohlene Venus (HKLM-x32\...\Geheime Fälle: Die gestohlene Venus) (Version:  - )
Geheime Fälle: Die gestohlene Venus 2 (HKLM-x32\...\Geheime Fälle: Die gestohlene Venus 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheime Fälle: Vermisst in Rom (HKLM-x32\...\Geheime Fälle: Vermisst in Rom) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM-x32\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Green Moon (HKLM-x32\...\Green Moon_is1) (Version:  - )
Haunting Mysteries (HKLM-x32\...\{9613E073-00BB-4244-AC06-BAC3DAF7B197}) (Version: 1.00.0000 - PurpleHills)
Heroes of Hellas 2 (HKLM-x32\...\{6E67E70D-606A-4EB0-8094-EFF064431435}) (Version: 1.00.0000 - Purplehills)
Herr des Wetters (HKLM-x32\...\Herr des Wetters) (Version: 1.0.0.0 - INTENIUM GmbH)
Hidden Expedition: Amazon ™ (HKLM-x32\...\BFG-Hidden Expedition Amazon) (Version:  - )
Hidden Magic (HKLM-x32\...\Hidden Magic) (Version: 1.0.0.0 - INTENIUM GmbH)
Hidden Object Crosswords (HKLM-x32\...\Hidden Object Crosswords) (Version: 1.0.0.0 - INTENIUM GmbH)
Hide And Secret 3 (HKLM-x32\...\Hide And Secret 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Holly - Ein Weihnachtsmärchen (HKLM-x32\...\{8F08E12A-363F-4F69-8BC8-0E0EA502A6ED}) (Version: 1.00.0000 - Purplehills)
Holly im Wunderland (HKLM-x32\...\Holly im Wunderland) (Version:  - )
HP Auto (Version: 1.0.12494.3472 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Connection Manager (HKLM-x32\...\{795AADBF-58C2-42D0-B779-E730702A247E}) (Version: 4.0.45.1 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Documentation (HKLM-x32\...\{6C453C9C-38AE-494D-BF89-7AA0DE87F3E5}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP On Screen Display (HKLM-x32\...\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}) (Version: 1.1.2 - Hewlett-Packard Company)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{EB58480C-0721-483C-B354-9D35A147999F}) (Version: 2.3.6 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Software Framework (HKLM-x32\...\{CE4551E8-8D09-4126-A39B-B7DF82C5EB83}) (Version: 4.0.110.1 - Hewlett-Packard Company)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{E92D47A1-D27D-430A-8368-0BAFD956507D}) (Version: 5.2.9.2 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6319.0 - IDT)
Insaniquarium Deluxe (HKLM-x32\...\Insaniquarium Deluxe) (Version:  - )
Insel der Feen - Fairy Island (HKLM-x32\...\Insel der Feen - Fairy Island) (Version: 1.0.0.0 - INTENIUM GmbH)
Jane Lucky (HKLM-x32\...\Jane Lucky) (Version: 1.0.0.0 - INTENIUM GmbH)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle)
Java(TM) 6 Update 24 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216024FF}) (Version: 6.0.240 - Oracle)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Jewel Mystery: Die Villa (HKLM-x32\...\Jewel Mystery: Die Villa) (Version: 1.0.0.0 - INTENIUM GmbH)
Jewel Quest Mysteries 2: Trail of the Midnight Heart (nur deinstallation) (HKLM-x32\...\Jewel Quest Mysteries 2: Trail of the Midnight Heart) (Version:  - )
Jewel Quest Mysteries Curse Of The Emerald Tear (nur deinstallation) (HKLM-x32\...\Jewel Quest Mysteries Curse Of The Emerald Tear) (Version:  - )
Jewel Quest Mysteries: The Oracle of Ur CE (HKLM-x32\...\Jewel Quest Mysteries: The Oracle of Ur CE) (Version: 3.32.0.0 - iWin.com)
Jewel Quest Mysteries: The Seventh Gate (HKLM-x32\...\BFG-Jewel Quest Mysteries - The Seventh Gate) (Version:  - )
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest: Der Saphirdrache (HKLM-x32\...\BFG-Jewel Quest - Der Saphirdrache) (Version:  - )
Jewels of Atlantis (HKLM-x32\...\Jewels of Atlantis/DE-German_is1) (Version:  - City Interactive)
Jules Vernes: Das Abenteuer Jangada (HKLM-x32\...\Jules Vernes: Das Abenteuer Jangada) (Version: 1.0.0.0 - INTENIUM GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kochprofi (HKLM-x32\...\Kochprofi) (Version: 1.0.0.0 - INTENIUM GmbH)
Kuros (HKLM-x32\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Laura Jones 2 (HKLM-x32\...\Laura Jones 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Legends of the Wild West: Golden Hill (HKLM-x32\...\Legends of the Wild West/DE-German_is1) (Version:  - City Interactive)
Lost Realms: Der Fluch von Babylon (HKLM-x32\...\BFG-Lost Realms - Der Fluch von Babylon) (Version:  - )
Lost Secrets - Bermuda Dreieck (HKLM-x32\...\Lost Secrets - Bermuda Dreieck) (Version: 1.0 - Astragon)
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS)
Magic Encyclopedia (HKLM-x32\...\Magic Encyclopedia) (Version:  - )
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mahjong Escape – Ancient China (HKLM-x32\...\Mahjong Escape – Ancient China) (Version:  - )
Mahjongg Artifacts 2 (HKLM-x32\...\Mahjongg Artifacts 2) (Version:  - )
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Master Wu (HKLM-x32\...\Master Wu) (Version:  - )
Maya - Fight for Jewels (HKLM-x32\...\Maya - Fight for Jewels_is1) (Version:  - Contendo Media GmbH)
Meine kleine Farm 2 (HKLM-x32\...\Meine kleine Farm 2) (Version:  - )
Meine kleine Farm 3 (HKLM-x32\...\Meine kleine Farm 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Meine kleine Farm 3: Ice Age (HKLM-x32\...\Meine kleine Farm 3: Ice Age) (Version: 1.0.0.0 - INTENIUM GmbH)
Meine kleine Farm 3: Russisches Roulette (HKLM-x32\...\Meine kleine Farm 3: Russisches Roulette) (Version: 1.0.0.0 - INTENIUM GmbH)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mysterious City: Cairo (nur deinstallation) (HKLM-x32\...\Mysterious City: Cairo) (Version:  - )
Mystery Case Files&reg;: Dire Grove™ (HKLM-x32\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: 13th Skull (HKLM-x32\...\BFG-Mystery Case Files - 13th Skull) (Version:  - )
Mystery Case Files: Huntsville ™ (HKLM-x32\...\BFG-Mystery Case Files - Huntsville) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM-x32\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: Prime Suspects ™ (HKLM-x32\...\BFG-Mystery Case Files - Prime Suspects) (Version:  - )
Mystery of Montezuma (HKLM-x32\...\Mystery of Montezuma/DE-German_is1) (Version:  - City Interactive)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mystery P.I. - The Lottery Ticket 1.0.0.5 (HKLM-x32\...\Mystery P.I. - The Lottery Ticket 1.0.0.5) (Version:  - )
Mystery P.I. – The Vegas Heist (HKLM-x32\...\Mystery P.I. – The Vegas Heist) (Version:  - )
Mystery Tales - Insel der Träume (HKLM-x32\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Tales - Insel der Träume (HKLM-x32\...\{F6856F9B-881C-4BAF-8602-1E2DBA0EA8A7}_is1) (Version:  - cerasus.media GmbH)
Mysteryville 2 (HKLM-x32\...\{7730D510-6DE2-4CD4-8F58-0B04680AEFE6}) (Version: 1.00.0000 - Mysteryville 2)
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Natalie Brooks (HKLM-x32\...\Natalie Brooks) (Version:  - )
Natalie Brooks 2 (HKLM-x32\...\Natalie Brooks 2) (Version:  - )
Natalie Brooks 3 (HKLM-x32\...\Natalie Brooks 3) (Version: 1.0.0.0 - INTENIUM GmbH)
National Geographic: Herod's Lost Tomb (HKLM-x32\...\National Geographic - Herod's Lost Tomb/DE-German_is1) (Version:  - City Interactive)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM-x32\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Nightmares from the Deep (HKLM-x32\...\Nightmares from the Deep_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Odyssee ins Ungewisse (HKLM-x32\...\Odyssee ins Ungewisse) (Version: 1.0.0.0 - INTENIUM GmbH)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PirateVille (HKLM-x32\...\PirateVille) (Version:  - )
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Profiler (HKLM-x32\...\{164B5A9F-D9BD-4EC3-880E-61A4E6935EEB}) (Version: 1.00.0000 - Purplehills)
Real Crimes - Jack The Ripper (HKLM-x32\...\Real Crimes - Jack The Ripper) (Version: 1.00 - phenomedia publishing gmbh)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.34.1130.2010 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.10.0416 - REALTEK Semiconductor Corp.)
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
Redemption Cemetery: Der Fluch des Raben (HKLM-x32\...\BFG-Redemption Cemetery - Der Fluch des Raben) (Version:  - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Ritter Arthur (HKLM-x32\...\Ritter Arthur) (Version:  - )
Robinson Crusoe (HKLM-x32\...\{7DF5A0FE-EEC4-439A-A3B5-DF91958DD5A7}_is1) (Version:  - cerasus.media GmbH)
Romance of Rome (HKLM-x32\...\{02CF7793-9F94-45E9-BB0F-E0E5FAB463E6}_is1) (Version:  - cerasus.media GmbH)
Samantha Swift and the Fountains of Fate (HKLM-x32\...\Samantha Swift and the Fountains of Fate) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Golden Touch (HKLM-x32\...\Samantha Swift and the Golden Touch) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Hidden Roses of Athena (HKLM-x32\...\Samantha Swift and the Hidden Roses of Athena) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Mystery from Atlantis (HKLM-x32\...\Samantha Swift and the Mystery from Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Schatz der Azteken (HKLM-x32\...\Schatz der Azteken) (Version:  - )
Secrets of Vatican (HKLM-x32\...\{66B76A83-4B3A-4218-82A4-862E26B745CA}) (Version: 1.00.0000 - Purplehills)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Snark Busters - Willkommen im Club (HKLM-x32\...\Snark Busters - Willkommen im Club) (Version:  - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Sony Ericsson Update Engine (HKLM-x32\...\Update Engine) (Version: 2.13.10.201308300830 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spannende Abenteuer Die verschollene Grabkammer (HKLM-x32\...\Spannende Abenteuer Die verschollene Grabkammer) (Version:  - )
Sprill && Ritchie (HKLM-x32\...\Sprill && Ritchie) (Version:  - )
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
StoneLoops of Jurassica (HKLM-x32\...\StoneLoops of Jurassica/DE-German_is1) (Version:  - City Interactive)
Strike Ball 3 (HKLM-x32\...\Strike Ball 3) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.4.4 - Synaptics Incorporated)
Tatort Museum (HKLM-x32\...\Tatort Museum) (Version: 1.0.0.0 - INTENIUM GmbH)
Tatort Museum 2 (HKLM-x32\...\Tatort Museum 2) (Version: 1.0.0.0 - INTENIUM GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer)
The Magicians Handbook 2 (HKLM-x32\...\{85225E9A-0292-4CF4-93AC-05C2559D4A6D}) (Version: 1.00.0000 - Purplehills)
The Mystery of Meane Manor (HKLM-x32\...\The Mystery of Meane Manor) (Version: 1.1.0.0 - MumboJumbo)
Time Machine (HKLM-x32\...\{9F9D845C-A5F0-423B-9820-240771C7645D}) (Version: 1.00.0000 - Purplehills)
TomTom HOME 2.8.2.2264 (HKLM-x32\...\TomTom HOME) (Version: 2.8.2.2264 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Treasure Island (HKLM-x32\...\{68EB8188-55D4-4BFA-9F37-F8167B095B17}) (Version: 1.00.0000 - Purplehills)
Treasure Masters, Inc. (HKLM-x32\...\Treasure Masters, Inc.) (Version:  - )
Treasures Of Mystery Island (HKLM-x32\...\Treasures Of Mystery Island) (Version:  - )
Tropical Lost Island (HKLM-x32\...\Tropical Lost Island/DE-German_is1) (Version:  - City Interactive)
Um die Welt in 80 Tagen - Wimmelbild (HKLM-x32\...\{4DE19B10-BF0A-40E4-85D7-C5CE09D83D92}) (Version: 1.00.0000 - Purplehills)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Unsolved Mystery Club - Amelia Earhart (HKLM-x32\...\Unsolved Mystery Club - Amelia Earhart) (Version:  - )
Update for Microsoft Office 2010 (KB2202188) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{86B7A074-265D-420C-9E1E-7A920EF0ECA7}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{556146F7-74AE-4E0A-B64F-5B8B93469F61}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B5516874-E926-4BFD-B412-D0E70112F244}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2413186) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D6CE7280-6EE3-419A-8F47-DB111C040B1B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2523113) (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{C0FF04BF-A05E-408B-81CA-B7FACDA508A3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2523113) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{C0FF04BF-A05E-408B-81CA-B7FACDA508A3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2493983) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{309EEC22-83CE-4109-B019-BA9392FAA322}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector (KB2583935) (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{EDED840F-DD92-47ED-A2E4-63F6AC745B92}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector (KB2583935) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EDF9874C-9E37-4110-9FC3-094247E114DF}) (Version:  - Microsoft)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
Walsingham‘s Manor - Verlies der Seelen (HKLM-x32\...\Walsingham‘s Manor - Verlies der Seelen_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinZip Malware Protector (HKLM-x32\...\WinZip Malware Protector_is1) (Version: 2.1.1000.10740 - WinZip International LLC)
WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
World of Wimmelbild 2 (HKLM-x32\...\World of Wimmelbild 2) (Version:  - )
Youda Legend (HKLM-x32\...\Youda Legend) (Version:  - )
Youda Legend Der goldene Paradiesvogel (HKLM-x32\...\Youda Legend Der goldene Paradiesvogel) (Version:  - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2028D30E-633D-410D-830D-981298550799} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink)
Task: {262902C5-9376-4E7F-BC8A-D0BC75CB83D9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {33078020-8F6E-4D32-9436-737053F96DCE} - System32\Tasks\HPCeeScheduleForBesitzer => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {37CB5728-2BEC-453C-B7FF-D37DAC817765} - \Digital Sites No Task File
Task: {5B13AA26-741E-4D6C-A585-23ECF5DB0BA5} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-31] ()
Task: {5B20CC1D-E3D5-47E0-9312-457D594BCC0D} - \BitGuard No Task File
Task: {6461CFE0-9ABD-441B-AEBA-9D242E5F39B7} - System32\Tasks\WinZip Malware Protector => C:\Program Files (x86)\WinZip Malware Protector\AppManager.exe [2013-03-26] (Nico Mak Computing)
Task: {7A06B9E5-76A1-4208-BB0A-14DD979239FE} - \DSite No Task File
Task: {9734443C-2164-47F8-98BA-60C15FC3FA6E} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-03-26] (Nico Mak Computing)
Task: {977DB76C-E699-44C3-A351-4C9E0DDD0314} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {99607DA1-AB39-474C-BD4A-AEB4B72E42A5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {EC16804A-65EF-42BB-A6B7-E958C29679F6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-03-12] (Microsoft)
Task: C:\Windows\Tasks\HPCeeScheduleForBesitzer.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{0907793A-4E41-4A92-B5ED-210692D155D0}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2011-02-28 11:01 - 2011-02-28 11:01 - 00079872 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Services.dll
2011-02-28 11:01 - 2011-02-28 11:01 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2010-06-24 01:21 - 2010-06-24 01:21 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2011-02-28 11:02 - 2011-02-28 11:02 - 00102912 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2011-02-28 10:49 - 2011-02-28 10:49 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-02-02 10:41 - 2011-02-02 10:41 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-11-05 22:23 - 2013-11-05 22:21 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-03-27 22:52 - 2013-02-28 16:53 - 00886272 _____ () C:\Program Files (x86)\WinZip Malware Protector\System.Data.SQLite.dll
2014-03-27 22:52 - 2013-03-26 12:16 - 01718648 _____ () C:\Program Files (x86)\WinZip Malware Protector\aspsys.dll
2010-06-24 01:19 - 2010-06-24 01:19 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2013-12-26 14:35 - 2014-02-15 22:38 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:09629F6E
AlternateDataStreams: C:\ProgramData\Temp:0AC32449
AlternateDataStreams: C:\ProgramData\Temp:2495D97A
AlternateDataStreams: C:\ProgramData\Temp:2B1EA607
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F
AlternateDataStreams: C:\ProgramData\Temp:3E06C78F
AlternateDataStreams: C:\ProgramData\Temp:4673E9EA
AlternateDataStreams: C:\ProgramData\Temp:4CA05B44
AlternateDataStreams: C:\ProgramData\Temp:639BB5E9
AlternateDataStreams: C:\ProgramData\Temp:6FB48139
AlternateDataStreams: C:\ProgramData\Temp:78E0DF72
AlternateDataStreams: C:\ProgramData\Temp:9BAC4211
AlternateDataStreams: C:\ProgramData\Temp:A02025CE
AlternateDataStreams: C:\ProgramData\Temp:B54E4B5A
AlternateDataStreams: C:\ProgramData\Temp:B88DC997
AlternateDataStreams: C:\ProgramData\Temp:D31BE97C
AlternateDataStreams: C:\ProgramData\Temp:D48500F8
AlternateDataStreams: C:\ProgramData\Temp:F13867C6

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 33%
Total physical RAM: 5882.9 MB
Available physical RAM: 3927.38 MB
Total Pagefile: 11764 MB
Available Pagefile: 9295.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:684.19 GB) (Free:345.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.16 GB) (Free:1.55 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: B58C26AE)

Partition: GPT Partition Type.

==================== End Of Log ============================

Vielen Dank erst Mal!!

schrauber 29.03.2014 09:39

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Rotetaube16 29.03.2014 14:41
Hallo schrauber,
da scheint jemand hartnäckig zu sein,,,
hier der ESET-Log
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f370620f179fee45bac4a57dfc6260a7
# engine=17672
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-29 01:14:26
# local_time=2014-03-29 02:14:26 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 22722 12416599 15462 0
# compatibility_mode=5893 16776574 100 94 84354751 147728716 0 0
# scanned=366661
# found=2
# cleaned=0
# scan_time=15564
sh=577B5D209E01726C67014C9B2B75D668E9727FFD ft=0 fh=0000000000000000 vn="Win32/AdWare.AddLyrics.T application" ac=I fn="C:\Users\Besitzer\AppData\Local\Temp\che41B0.tmp"
sh=801D5849EE65F5CB80B9BA52645F38A7EF6BE078 ft=1 fh=f334e185dfa62535 vn="multiple threats" ac=I fn="C:\Users\Besitzer\AppData\Local\Temp\is357113909\3311341_Setup.EXE"
mach denn jetzt weiter mit dem nächsten.Bis dann

so nun den checkup-Editor
Code:
Results of screen317's Security Check version 0.99.80 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop 
 Antivirus up to date!  (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
 JavaFX 2.1.0   
 Java(TM) 6 Update 24 
 Java 7 Update 51 
 Adobe Flash Player 10 Flash Player out of Date!
 Adobe Flash Player 12.0.0.77 
 Adobe Reader 10.1.1 Adobe Reader out of Date! 
 Mozilla Firefox (27.0.1)
````````Process Check: objlist.exe by Laurent```````` 
 Avira Antivir avgnt.exe
 Avira Antivir avguard.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
warte dann auf weiteres!

hatte noch was vergessen , das frische FRST

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Besitzer (administrator) on CONNYPC on 29-03-2014 14:39:01
Running from C:\Users\Besitzer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intenium) C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [525312 2010-12-17] (IDT, Inc.)
HKLM\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2011-01-27] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-12] (Easybits)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [WinZip Malware Protector_startup] - C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [6390136 2013-03-26] (Nico Mak Computing)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-25] (Hewlett-Packard)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [Spiele Post] - C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe [483400 2013-12-06] (Intenium)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [247728 2011-04-22] (TomTom)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: {a496f38a-dfce-11e0-a586-984be1b1002d} - F:\LaunchU3.exe -a
GroupPolicyUsers\S-1-5-21-619880712-574751267-193086799-1006\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {647809D8-3F44-4F72-A81B-6ED305E9F372} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll ()
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-04-13] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\za6muobr.default
FF Homepage: hxxp://www.arcor.de/ums/ums_ordner.jsp?ordnername=Posteingang
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-09]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-09]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-02-28] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-29 14:27 - 2014-03-29 14:27 - 00987442 _____ () C:\Users\Besitzer\Desktop\SecurityCheck.exe
2014-03-29 09:46 - 2014-03-29 09:47 - 02347384 _____ (ESET) C:\Users\Besitzer\Desktop\esetsmartinstaller_enu.exe
2014-03-28 21:58 - 2014-03-28 21:58 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-28 13:37 - 2014-03-28 13:37 - 00031434 _____ () C:\Users\Besitzer\Desktop\FRST2.txt
2014-03-28 13:32 - 2014-03-28 13:34 - 00009204 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-03-28 13:19 - 2014-03-28 13:19 - 00000000 ____D () C:\Windows\ERUNT
2014-03-28 13:18 - 2014-03-28 13:18 - 01038974 _____ (Thisisu) C:\Users\Besitzer\Desktop\JRT.exe
2014-03-28 13:15 - 2014-03-28 13:15 - 00001188 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S1].txt
2014-03-28 13:08 - 2014-03-28 13:43 - 00024173 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S0].txt
2014-03-28 13:02 - 2014-03-28 13:12 - 00000000 ____D () C:\AdwCleaner
2014-03-28 13:01 - 2014-03-28 13:01 - 01950720 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-03-28 13:00 - 2014-03-28 13:00 - 00000259 _____ () C:\Users\Besitzer\Desktop\mbam.txt
2014-03-28 11:53 - 2014-03-28 12:57 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-28 11:52 - 2014-03-28 11:52 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-03-28 11:52 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-28 11:52 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-28 11:52 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-28 11:50 - 2014-03-28 11:52 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Besitzer\Desktop\mbam-setup-2.0.0.1000.exe
2014-03-28 11:18 - 2014-03-28 11:18 - 00001260 _____ () C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2014-03-28 11:18 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-28 11:05 - 2014-03-28 11:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Desktop\revosetup95.exe
2014-03-28 10:11 - 2014-03-28 10:11 - 00012547 _____ () C:\Users\Besitzer\Desktop\Gmer.txt
2014-03-28 09:39 - 2014-03-28 09:39 - 00009212 _____ () C:\Users\Besitzer\Desktop\log 2.xml
2014-03-28 09:21 - 2014-03-28 13:39 - 00045995 _____ () C:\Users\Besitzer\Desktop\Addition.txt
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2014-03-28 09:20 - 2014-03-29 14:39 - 00017781 _____ () C:\Users\Besitzer\Desktop\FRST.txt
2014-03-28 09:20 - 2014-03-29 14:39 - 00000000 ____D () C:\FRST
2014-03-28 09:19 - 2014-03-28 09:19 - 02157056 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-03-28 09:16 - 2014-03-28 09:17 - 00000478 _____ () C:\Users\Besitzer\Desktop\defogger_disable.log
2014-03-28 09:16 - 2014-03-28 09:16 - 00000000 _____ () C:\Users\Besitzer\defogger_reenable
2014-03-28 09:15 - 2014-03-28 09:15 - 00050477 _____ () C:\Users\Besitzer\Desktop\Defogger.exe
2014-03-28 08:56 - 2014-03-28 08:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 08:53 - 2014-03-28 09:12 - 00000700 _____ () C:\Users\Besitzer\Desktop\Ereignisse.txt
2014-03-28 08:23 - 2014-03-28 08:23 - 00003063 _____ () C:\Users\Besitzer\Desktop\log.xml
2014-03-28 00:38 - 2014-03-28 00:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 00:07 - 2014-03-28 00:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 00:00 - 2014-03-28 00:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 22:52 - 2014-03-29 09:45 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-27 22:52 - 2014-03-28 09:38 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-27 22:52 - 2014-03-28 00:38 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-27 22:52 - 2014-03-28 00:38 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-27 22:52 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe
2014-03-27 22:51 - 2014-03-27 22:52 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 13:21 - 2014-03-28 08:56 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-27 13:21 - 2014-03-28 08:56 - 00000000 ____D () C:\Windows\Minidump
2014-03-27 13:21 - 2014-03-27 13:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-11 23:40 - 2014-03-11 23:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-11 23:40 - 2014-03-11 23:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien

==================== One Month Modified Files and Folders =======

2014-03-29 14:39 - 2014-03-28 09:20 - 00017781 _____ () C:\Users\Besitzer\Desktop\FRST.txt
2014-03-29 14:39 - 2014-03-28 09:20 - 00000000 ____D () C:\FRST
2014-03-29 14:27 - 2014-03-29 14:27 - 00987442 _____ () C:\Users\Besitzer\Desktop\SecurityCheck.exe
2014-03-29 14:11 - 2011-05-01 00:53 - 01707144 _____ () C:\Windows\WindowsUpdate.log
2014-03-29 09:49 - 2011-04-14 01:04 - 00658120 _____ () C:\Windows\system32\perfh007.dat
2014-03-29 09:49 - 2011-04-14 01:04 - 00131202 _____ () C:\Windows\system32\perfc007.dat
2014-03-29 09:49 - 2009-07-14 06:13 - 01508746 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-29 09:47 - 2014-03-29 09:46 - 02347384 _____ (ESET) C:\Users\Besitzer\Desktop\esetsmartinstaller_enu.exe
2014-03-29 09:45 - 2014-03-27 22:52 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-29 08:57 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-29 08:57 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-29 08:55 - 2011-09-09 21:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-03-29 08:50 - 2012-03-30 19:46 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-03-29 08:49 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-29 08:49 - 2009-07-14 05:51 - 00179284 _____ () C:\Windows\setupact.log
2014-03-28 21:58 - 2014-03-28 21:58 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-28 13:43 - 2014-03-28 13:08 - 00024173 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S0].txt
2014-03-28 13:39 - 2014-03-28 09:21 - 00045995 _____ () C:\Users\Besitzer\Desktop\Addition.txt
2014-03-28 13:37 - 2014-03-28 13:37 - 00031434 _____ () C:\Users\Besitzer\Desktop\FRST2.txt
2014-03-28 13:34 - 2014-03-28 13:32 - 00009204 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-03-28 13:19 - 2014-03-28 13:19 - 00000000 ____D () C:\Windows\ERUNT
2014-03-28 13:18 - 2014-03-28 13:18 - 01038974 _____ (Thisisu) C:\Users\Besitzer\Desktop\JRT.exe
2014-03-28 13:15 - 2014-03-28 13:15 - 00001188 _____ () C:\Users\Besitzer\Desktop\AdwCleaner[S1].txt
2014-03-28 13:12 - 2014-03-28 13:02 - 00000000 ____D () C:\AdwCleaner
2014-03-28 13:06 - 2010-11-21 04:47 - 00587100 _____ () C:\Windows\PFRO.log
2014-03-28 13:01 - 2014-03-28 13:01 - 01950720 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-03-28 13:00 - 2014-03-28 13:00 - 00000259 _____ () C:\Users\Besitzer\Desktop\mbam.txt
2014-03-28 12:57 - 2014-03-28 11:53 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-28 11:52 - 2014-03-28 11:52 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-28 11:52 - 2014-03-28 11:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-03-28 11:52 - 2014-03-28 11:50 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Besitzer\Desktop\mbam-setup-2.0.0.1000.exe
2014-03-28 11:18 - 2014-03-28 11:18 - 00001260 _____ () C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2014-03-28 11:18 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-28 11:05 - 2014-03-28 11:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Desktop\revosetup95.exe
2014-03-28 10:11 - 2014-03-28 10:11 - 00012547 _____ () C:\Users\Besitzer\Desktop\Gmer.txt
2014-03-28 09:46 - 2013-08-29 21:26 - 00000213 _____ () C:\Users\Besitzer\AppData\Roaming\WB.CFG
2014-03-28 09:39 - 2014-03-28 09:39 - 00009212 _____ () C:\Users\Besitzer\Desktop\log 2.xml
2014-03-28 09:38 - 2014-03-27 22:52 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-28 09:21 - 2014-03-28 09:21 - 00380416 _____ () C:\Users\Besitzer\Desktop\Gmer-19357.exe
2014-03-28 09:19 - 2014-03-28 09:19 - 02157056 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-03-28 09:17 - 2014-03-28 09:16 - 00000478 _____ () C:\Users\Besitzer\Desktop\defogger_disable.log
2014-03-28 09:16 - 2014-03-28 09:16 - 00000000 _____ () C:\Users\Besitzer\defogger_reenable
2014-03-28 09:16 - 2011-07-25 11:05 - 00000000 ____D () C:\Users\Besitzer
2014-03-28 09:15 - 2014-03-28 09:15 - 00050477 _____ () C:\Users\Besitzer\Desktop\Defogger.exe
2014-03-28 09:12 - 2014-03-28 08:53 - 00000700 _____ () C:\Users\Besitzer\Desktop\Ereignisse.txt
2014-03-28 08:56 - 2014-03-28 08:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 08:56 - 2014-03-27 13:21 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-28 08:56 - 2014-03-27 13:21 - 00000000 ____D () C:\Windows\Minidump
2014-03-28 08:55 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-28 08:23 - 2014-03-28 08:23 - 00003063 _____ () C:\Users\Besitzer\Desktop\log.xml
2014-03-28 00:38 - 2014-03-28 00:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 00:38 - 2014-03-27 22:52 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-28 00:38 - 2014-03-27 22:52 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-28 00:32 - 2011-09-07 21:03 - 00000000 ____D () C:\Users\Besitzer\Desktop\Wimmelbild
2014-03-28 00:07 - 2014-03-28 00:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 00:00 - 2014-03-28 00:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 22:52 - 2014-03-27 22:51 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 13:21 - 2014-03-27 13:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-26 22:37 - 2011-09-07 10:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\SoftGrid Client
2014-03-26 13:01 - 2013-03-23 23:54 - 00003204 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForBesitzer
2014-03-26 13:01 - 2013-03-23 23:54 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForBesitzer.job
2014-03-24 07:32 - 2011-12-24 20:35 - 00000000 ____D () C:\Users\Lisa\AppData\Local\CrashDumps
2014-03-21 19:01 - 2011-09-09 21:03 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-16 23:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-12 23:17 - 2012-08-30 19:10 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 23:17 - 2011-09-07 15:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 23:15 - 2011-09-07 18:12 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-03-11 23:40 - 2014-03-11 23:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-11 23:40 - 2014-03-11 23:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien
2014-03-05 09:26 - 2014-03-28 11:52 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-03-28 11:52 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2014-03-28 11:52 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\AskSLib.dll
C:\Users\Besitzer\AppData\Local\Temp\avgnt.exe
C:\Users\Besitzer\AppData\Local\Temp\bfguni.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe
C:\Users\Besitzer\AppData\Local\Temp\tmqjb5q9.dll
C:\Users\Besitzer\AppData\Local\Temp\uninst1.exe
C:\Users\Besitzer\AppData\Local\Temp\yzbjcvva.dll
C:\Users\Besitzer\AppData\Local\Temp\zcenhbks.dll
C:\Users\Lisa\AppData\Local\Temp\APNStub.exe
C:\Users\Lisa\AppData\Local\Temp\AskSLib.dll
C:\Users\Lisa\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-28 15:02

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 30.03.2014 07:34
Das sind nur Temps :)

Adobe und Flash updaten.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Rotetaube16 30.03.2014 22:53
Hallo schrauber,
weiß nicht ,ob alles okay ist,wenn ich online bin wird das gesamte obere Feld,kann auch nichts mehr eingeben ,bei FB auch die rechte Seite nach ca20min schwarz.Nach nem Neustart scheint dann wieder alles okay zu sein .Ist bisher 2-mal passiert.
Updates hab ich runtergeladen und bei Windows (Einstellungen)auch geändert.
Einige Tools habe ich auch drauf.

Nur Secunia Online Software geht nicht ,weil Java sowie Adobe geupdatet werden sollen ???????

Gibst du mir noch einen Tip für einen anti viren programm ?


Vielen lieben Dank erst mal auch für Deine Zeit!!

schrauber 31.03.2014 13:30
Ich empfehle immer Emsisoft.

Zitat:
weiß nicht ,ob alles okay ist,wenn ich online bin wird das gesamte obere Feld,kann auch nichts mehr eingeben ,bei FB auch die rechte Seite nach ca20min schwarz.Nach nem Neustart scheint dann wieder alles okay zu sein .Ist bisher 2-mal passiert.
Geh das genauer? was wird schwarz, das Disply also das ganze Bild? und was meinst Du mit Online? Ansonsten passiert das nicht?

Rotetaube16 31.03.2014 22:49
Hallo schrauber,

bezüglich des Zitates meine ich, bei mozilla firefox wurde nach ca 20 min die gesamte obere eingabemaske (datei,bearbeitenn chronik usw.,der angezeigte Tab) schwarz.
Die aufgerufene Seite war da ,aber ich konnte weder wechseln noch zumachen!
mmmmh.... merk auch grade ,ich weiß nicht wie ich es beschreiben soll.....
wenn ich mit der Maus auf (ich weiß es) aktualisieren gehe, steht dort nicht aktualisieren,sondern nur eine gefärbter (gelb-weiss) Balken ,dasselbe ist auch bei Reiter download.....usw.
Kann dass an firefox liegen ???

Muss ich aufgeben ?
Aber die Daten sind ja sicher ,die könnt ich mir ja dann runterziehen.....


LG Conny

Hi ich bins nochmal, momentan ist es mit dem schwarzen bildschirm immer nach 15- 20 min. genau andersherum .die aufgeschlagene Seite wird schwarz , die oberen suchfenster sind zu sehen aber ich kann mich auch nichtausloggen oder die Fenster zumachen.Fährt sich fest ??? Muss immer neu starten aber es dauert dann nicht lange!!!
??????
Gute Nacht!

schrauber 01.04.2014 12:58
Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen

Rotetaube16 01.04.2014 21:41
Hi schrauber muss schnell schreiben ,habe mit revo ff deinstalliert,dann wieder geladen , mich kurz bei FB und ebay eingeloggt und die Probleme haben sich jetzt verstärkt ,links und rechts und links oben gehen popups auf (single ? gewonnen? PC-leistung schwach) Bildschirm wird nach kurzer zeit wieder schwarz entweder Die Seite oder oben die Eingabemasken .
2-Mal ist es jetzt schon passsiert beim schreiben:killpc::killpc::killpc::killpc::killpc:
schick jetzt erst ma ab ,bevor ich es noch ein viertes mal schreiben muss!

Mal sehen ...... beim schreiben bemerkte ich auch dass es manchmal 1 sec dauerte bis der Buchstabe zu sehen war (ist vllt auch !!!!! graphikfehler??)
Aber denn würden ja die Bilder nicht überall auftauchen??
Ach übrigends ist zur Zeit links oben Trojaner board.de und das Pferd total verpixelt !
Sag jetzt mal gut Nacht !!! Vllt hast ja noch was zum..... jetzt kommm ich noch nicht mal rechts an die Smiley`s............

Ach hatte ganz vergessen zu schreiben,ich hab auf nichts buntes geklickt, nur ebay und FB aufgemacht und schon ging'los !!

Hi, schrauber melde mich jetzt über handy , der pc ist jetzt schon 2-mal beim antworten auf der seite schwarz geworden und hat sich aufgehangen.Hatte ff mit revo deinstalliert und dann ff wieder geladen , mich bei fb und ebay wieder angemeldet und passierte gleich wieder!
Jetz ist der pc wieder hoch gefahren , würd ja gerne ein foto machen .....da wo links oben trojaner board mi pony steht hab ich nur fabpixel und rechts öffnen sich popups??? (MEGABROWSE.BIZ)
Soll mit jemand chatten hot deals machen u d gratis gewinnen????
ich hab auf nichts buntes geglickt!!!!!!!!!
:headbang:
i h hatte ja am pc fertig geschrieben, wollte nur noch abschicken. Beim schreiben bemerkte ich auch, das es 1-2 secunden dauerte, bis der buchstabe zu sehen war!!!
grrrrrrrrrrrrrrr
gute Nacht erstmal ,vllt hast du ja noch was in petto!

schrauber 02.04.2014 13:52
Wo hast Du FF geladen?

FRST öffnen, Haken setzen bei Additional und scannen, poste bitte beide Logfiles.

Rotetaube16 02.04.2014 22:11
Hi schrauber ,wieder 2x beim schreiben abgestürzt erstmal frst

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Besitzer (administrator) on CONNYPC on 02-04-2014 22:50:41
Running from C:\Users\Besitzer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
() C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intenium) C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\ipmGui.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [525312 2010-12-17] (IDT, Inc.)
HKLM\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2011-01-27] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [MDX.CloudPin] - "C:\Program Files (x86)\Microsoft Digital Experience\Scripts\PinApps.vbs"
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-12] (Easybits)
HKLM-x32\...\Run: [WinZip Malware Protector_startup] - C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [6390136 2013-03-26] (Nico Mak Computing)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-25] (Hewlett-Packard)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [Spiele Post] - C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe [483400 2013-12-06] (Intenium)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [247728 2011-04-22] (TomTom)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-619880712-574751267-193086799-1001\...\MountPoints2: {a496f38a-dfce-11e0-a586-984be1b1002d} - F:\LaunchU3.exe -a
GroupPolicyUsers\S-1-5-21-619880712-574751267-193086799-1006\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
SearchScopes: HKLM - {647809D8-3F44-4F72-A81B-6ED305E9F372} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {3FFD291F-A119-43AE-B600-D1D311C52A2C} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {3FFD291F-A119-43AE-B600-D1D311C52A2C} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Mega Browse - {4e6cd411-ce62-4584-97ff-6afbcf6900af} - C:\Program Files (x86)\Mega Browse\MegaBrowsebho.dll (Mega Browse)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-04-13] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\rj9hvhbu.default-1396369141202
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Mega Browse - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\rj9hvhbu.default-1396369141202\Extensions\{29b136c9-938d-4d3d-8df8-d649d9b74d02}.xpi [2014-04-01]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-02-28] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 Update Mega Browse; C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe [348448 2014-03-29] ()
R2 Util Mega Browse; C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe [350496 2014-04-02] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 wStLibG64; C:\Windows\System32\drivers\wStLibG64.sys [61120 2014-03-30] (StdLib)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-02 22:50 - 2014-04-02 22:51 - 00016761 _____ () C:\Users\Besitzer\Downloads\FRST.txt
2014-04-02 22:50 - 2014-04-02 22:50 - 00000000 ____D () C:\FRST
2014-04-02 22:49 - 2014-04-02 22:49 - 02157056 _____ (Farbar) C:\Users\Besitzer\Downloads\FRST64(1).exe
2014-04-02 22:47 - 2014-04-02 22:48 - 02157056 _____ (Farbar) C:\Users\Besitzer\Downloads\FRST64.exe
2014-04-01 18:19 - 2014-04-01 18:19 - 00000000 ____D () C:\Users\Besitzer\Desktop\Alte Firefox-Daten
2014-04-01 18:13 - 2014-04-01 18:13 - 00001143 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-01 18:13 - 2014-04-01 18:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-01 18:12 - 2014-04-01 18:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 17:57 - 2014-04-01 17:57 - 00001260 _____ () C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2014-04-01 17:56 - 2014-04-01 17:56 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Desktop\revosetup95.exe
2014-03-31 22:54 - 2014-03-31 22:54 - 00000000 ____D () C:\Users\Besitzer\Downloads\JQM2DEPatch(1)
2014-03-31 17:24 - 2014-03-31 17:24 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-31 17:24 - 2014-03-31 17:24 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-31 17:11 - 2013-12-21 11:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-31 17:11 - 2013-12-21 10:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-31 16:21 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 16:21 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 16:21 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-31 16:21 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-31 16:21 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-31 16:21 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-31 16:21 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-31 16:21 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-31 16:21 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-31 16:21 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-31 16:21 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-31 16:21 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-31 16:21 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-31 16:21 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-31 16:21 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-31 16:21 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 16:21 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-31 16:21 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-31 16:21 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-31 16:21 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-31 16:21 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-31 16:21 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-31 16:21 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-31 16:21 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-31 16:21 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-31 16:21 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-31 16:21 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-31 16:21 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-31 16:21 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-31 16:21 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-31 16:21 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-31 16:21 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-31 16:21 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-31 16:21 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-31 16:21 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-31 16:21 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-31 16:21 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-31 16:21 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-31 16:21 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-31 16:21 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-31 16:21 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-03-31 16:21 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-03-31 16:21 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-03-31 16:21 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-03-30 23:39 - 2014-04-01 22:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-30 23:39 - 2014-03-31 16:39 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-30 16:46 - 2014-03-30 16:46 - 01950720 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-03-30 13:23 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-03-30 13:14 - 2014-03-30 13:14 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-30 13:14 - 2014-03-30 13:14 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-30 13:14 - 2014-03-30 13:14 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-30 13:14 - 2014-03-30 13:14 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-30 13:14 - 2014-03-30 13:14 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-30 13:14 - 2014-03-30 13:14 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-30 13:14 - 2014-03-30 13:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-03-30 13:11 - 2014-03-30 13:11 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-30 13:11 - 2014-03-30 13:11 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-03-30 13:11 - 2014-03-30 13:11 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-30 13:04 - 2014-03-30 13:04 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-03-30 13:04 - 2014-03-30 13:04 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-03-30 13:03 - 2014-03-30 13:23 - 00015350 _____ () C:\Windows\IE11_main.log
2014-03-30 12:43 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-03-30 12:27 - 2014-03-30 12:27 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\wStLibG64.sys
2014-03-30 11:44 - 2014-03-30 11:44 - 00700980 _____ () C:\Users\Besitzer\Desktop\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi
2014-03-30 11:18 - 2014-03-30 16:48 - 00000000 ____D () C:\AdwCleaner
2014-03-30 10:59 - 2014-03-30 10:59 - 00003266 _____ () C:\Windows\System32\Tasks\{F645D53C-90B4-44B4-BF2C-A061FF2D2048}
2014-03-30 10:57 - 2014-03-30 10:57 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-30 10:57 - 2014-03-30 10:57 - 00000000 ____D () C:\140480dc487d39eb912a9e4ef6
2014-03-30 10:51 - 2014-03-30 11:56 - 00000000 ____D () C:\Program Files (x86)\Mega Browse
2014-03-30 10:40 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-03-30 10:40 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-03-30 10:40 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-03-30 10:31 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-03-30 10:31 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-03-30 10:31 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-03-30 10:31 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-03-30 10:30 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-03-30 10:30 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-03-30 10:30 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-03-30 10:30 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-03-30 10:30 - 2013-11-12 04:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-03-30 10:30 - 2013-11-12 04:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-03-30 10:30 - 2013-10-05 22:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-03-30 10:30 - 2013-10-05 21:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-03-30 10:30 - 2013-09-28 03:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-03-30 10:30 - 2013-09-25 04:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-03-30 10:30 - 2013-09-25 04:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-03-30 10:30 - 2013-09-25 04:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-03-30 10:30 - 2013-09-25 04:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-03-30 10:30 - 2013-09-25 04:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-03-30 10:30 - 2013-09-25 04:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-03-30 10:30 - 2013-09-25 04:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-03-30 10:30 - 2013-09-25 04:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-03-30 10:30 - 2013-09-25 03:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-03-30 10:30 - 2013-09-25 03:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-03-30 10:30 - 2013-09-25 03:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-03-30 10:30 - 2013-09-25 03:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-03-30 10:30 - 2013-09-25 03:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-03-30 10:30 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-03-30 10:30 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-03-30 10:30 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-03-30 10:30 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-03-30 10:30 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-03-30 10:30 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-03-30 10:30 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-03-30 10:30 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-03-30 10:30 - 2013-07-04 14:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-03-30 10:30 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-03-30 10:30 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-03-30 10:30 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-03-30 10:30 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-03-30 10:30 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-03-30 10:30 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-03-30 10:29 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-30 10:29 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-30 10:29 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-30 10:29 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-03-30 10:29 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-03-30 10:29 - 2013-10-04 04:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-03-30 10:29 - 2013-10-04 03:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-03-30 10:29 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-03-30 10:29 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-03-30 10:29 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-03-30 10:29 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-03-30 10:29 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-03-30 10:29 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-03-30 10:29 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-03-30 10:29 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-03-30 10:29 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-03-30 10:29 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-03-30 10:29 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-03-30 10:29 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-03-30 10:29 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-30 10:28 - 2014-03-30 10:29 - 00921000 _____ (Oracle Corporation) C:\Users\Besitzer\Downloads\jxpiinstall.exe
2014-03-30 10:26 - 2013-12-18 22:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-30 10:26 - 2013-12-18 22:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-30 10:26 - 2013-12-18 22:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-30 10:21 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-03-30 10:21 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-03-30 10:21 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-03-30 10:21 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-03-30 10:21 - 2013-11-27 03:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-03-30 10:21 - 2013-11-27 03:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-03-30 10:21 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-03-30 10:21 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-03-30 10:21 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-03-30 10:21 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-03-30 10:21 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-03-30 10:21 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-03-30 10:21 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-03-30 10:21 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-03-30 10:21 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-03-30 10:21 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-03-30 10:21 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2014-03-30 10:21 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-03-30 10:21 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-03-30 10:21 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-03-30 10:21 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-30 10:21 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-30 10:21 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-03-30 10:21 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-30 10:21 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-03-30 10:21 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-03-30 10:21 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-03-30 10:21 - 2012-11-29 00:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-03-30 10:21 - 2012-11-29 00:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-03-30 10:21 - 2012-11-29 00:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-03-30 10:21 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-03-30 10:21 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-03-30 10:21 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-03-30 10:18 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-03-30 10:18 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-03-30 10:18 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-03-30 10:18 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-03-30 10:18 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-03-30 10:18 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-03-30 10:18 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-03-30 10:18 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-03-30 10:18 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-03-30 10:18 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-03-30 10:18 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-03-30 10:18 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-03-30 10:18 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-03-30 10:18 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-03-30 10:18 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-03-30 10:18 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-03-30 10:17 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-30 10:17 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-30 10:17 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-03-30 10:17 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-03-30 10:17 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-03-30 10:17 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-03-30 10:17 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-03-30 10:17 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-03-30 10:17 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-03-30 10:17 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-03-30 10:17 - 2013-10-03 04:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-03-30 10:17 - 2013-10-03 04:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-03-30 10:17 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-03-30 10:17 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-03-30 10:17 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-03-30 10:17 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2014-03-30 10:17 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-03-30 10:17 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-03-30 10:17 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-03-30 10:17 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-03-30 10:17 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-03-30 10:17 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-03-30 10:17 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-03-30 10:17 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-03-30 10:17 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-03-30 10:17 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-03-30 10:17 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-03-30 10:17 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-03-30 10:17 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-03-30 10:17 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-03-30 10:17 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-03-30 10:17 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-03-30 10:17 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-03-30 10:17 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-03-30 10:17 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-03-30 10:17 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-03-30 10:17 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-03-30 10:17 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-03-30 10:17 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-03-30 10:17 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-03-30 10:14 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-03-30 10:14 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-03-30 10:14 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-03-30 10:14 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-03-30 10:14 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-03-30 10:12 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-03-30 10:12 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-03-30 09:53 - 2014-03-30 10:09 - 00001219 _____ () C:\DelFix.txt
2014-03-30 09:39 - 2014-03-30 09:39 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-30 09:28 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-03-30 09:28 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-03-30 09:28 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-03-29 23:37 - 2014-03-30 13:53 - 00000000 ____D () C:\Users\Besitzer\Desktop\Deinstaller tro
2014-03-28 22:58 - 2014-03-28 22:58 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-28 14:19 - 2014-03-30 09:53 - 00000000 ____D () C:\Windows\ERUNT
2014-03-28 14:00 - 2014-03-28 14:00 - 00000259 _____ () C:\Users\Besitzer\Desktop\mbam.txt
2014-03-28 12:53 - 2014-03-30 16:40 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-28 12:52 - 2014-03-28 12:52 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-28 12:52 - 2014-03-28 12:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-28 12:52 - 2014-03-28 12:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-03-28 12:52 - 2014-03-05 10:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-28 12:52 - 2014-03-05 10:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-28 12:52 - 2014-03-05 10:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-28 12:18 - 2014-04-01 17:57 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-28 09:56 - 2014-03-28 09:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 01:38 - 2014-03-28 01:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 01:07 - 2014-03-28 01:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 01:00 - 2014-03-28 01:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 23:52 - 2014-04-02 22:42 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-03-27 23:52 - 2014-03-30 11:32 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-27 23:52 - 2014-03-28 01:38 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-27 23:52 - 2014-03-28 01:38 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-27 23:52 - 2013-03-15 18:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe
2014-03-27 23:51 - 2014-03-27 23:52 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 14:21 - 2014-03-28 09:56 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-27 14:21 - 2014-03-28 09:56 - 00000000 ____D () C:\Windows\Minidump
2014-03-27 14:21 - 2014-03-27 14:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-12 00:40 - 2014-03-12 00:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-12 00:40 - 2014-03-12 00:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien

==================== One Month Modified Files and Folders =======

2014-04-02 22:51 - 2014-04-02 22:50 - 00016761 _____ () C:\Users\Besitzer\Downloads\FRST.txt
2014-04-02 22:51 - 2011-05-01 01:53 - 01592445 _____ () C:\Windows\WindowsUpdate.log
2014-04-02 22:50 - 2014-04-02 22:50 - 00000000 ____D () C:\FRST
2014-04-02 22:49 - 2014-04-02 22:49 - 02157056 _____ (Farbar) C:\Users\Besitzer\Downloads\FRST64(1).exe
2014-04-02 22:48 - 2014-04-02 22:47 - 02157056 _____ (Farbar) C:\Users\Besitzer\Downloads\FRST64.exe
2014-04-02 22:42 - 2014-03-27 23:52 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-04-02 22:42 - 2012-03-30 20:46 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-04-02 22:41 - 2010-11-21 05:47 - 00605770 _____ () C:\Windows\PFRO.log
2014-04-02 22:41 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-02 22:41 - 2009-07-14 06:51 - 00180628 _____ () C:\Windows\setupact.log
2014-04-01 22:38 - 2014-03-30 23:39 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-01 20:42 - 2009-07-14 06:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-01 20:42 - 2009-07-14 06:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-01 19:53 - 2011-10-14 14:54 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-01 19:47 - 2009-07-14 04:34 - 00000513 _____ () C:\Windows\win.ini
2014-04-01 18:19 - 2014-04-01 18:19 - 00000000 ____D () C:\Users\Besitzer\Desktop\Alte Firefox-Daten
2014-04-01 18:13 - 2014-04-01 18:13 - 00001143 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-01 18:13 - 2014-04-01 18:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-01 18:13 - 2014-04-01 18:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-01 18:13 - 2011-09-07 16:20 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Mozilla
2014-04-01 17:57 - 2014-04-01 17:57 - 00001260 _____ () C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2014-04-01 17:57 - 2014-03-28 12:18 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-01 17:56 - 2014-04-01 17:56 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Desktop\revosetup95.exe
2014-03-31 22:54 - 2014-03-31 22:54 - 00000000 ____D () C:\Users\Besitzer\Downloads\JQM2DEPatch(1)
2014-03-31 19:01 - 2013-03-24 00:54 - 00003204 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForBesitzer
2014-03-31 19:01 - 2013-03-24 00:54 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForBesitzer.job
2014-03-31 17:58 - 2011-04-14 02:04 - 00658120 _____ () C:\Windows\system32\perfh007.dat
2014-03-31 17:58 - 2011-04-14 02:04 - 00131202 _____ () C:\Windows\system32\perfc007.dat
2014-03-31 17:58 - 2009-07-14 07:13 - 01530050 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-31 17:24 - 2014-03-31 17:24 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-03-31 17:24 - 2014-03-31 17:24 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-03-31 16:39 - 2014-03-30 23:39 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-31 16:39 - 2012-08-30 20:10 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-31 16:39 - 2011-09-07 16:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-30 16:48 - 2014-03-30 11:18 - 00000000 ____D () C:\AdwCleaner
2014-03-30 16:46 - 2014-03-30 16:46 - 01950720 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-03-30 16:40 - 2014-03-28 12:53 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-30 13:53 - 2014-03-29 23:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Deinstaller tro
2014-03-30 13:51 - 2011-07-25 12:09 - 00001417 _____ () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-30 13:46 - 2009-07-14 06:45 - 00418168 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-03-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-03-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-03-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-03-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-30 13:42 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-30 13:42 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-30 13:35 - 2011-09-07 11:52 - 01535612 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-30 13:35 - 2011-09-07 11:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-03-30 13:23 - 2014-03-30 13:03 - 00015350 _____ () C:\Windows\IE11_main.log
2014-03-30 13:14 - 2014-03-30 13:14 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-30 13:14 - 2014-03-30 13:14 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-30 13:14 - 2014-03-30 13:14 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-30 13:14 - 2014-03-30 13:14 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-30 13:14 - 2014-03-30 13:14 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-30 13:14 - 2014-03-30 13:14 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-30 13:14 - 2014-03-30 13:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-30 13:14 - 2014-03-30 13:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-30 13:14 - 2014-03-30 13:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-03-30 13:12 - 2014-03-30 13:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-03-30 13:12 - 2014-03-30 13:12 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-03-30 13:11 - 2014-03-30 13:11 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-30 13:11 - 2014-03-30 13:11 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-03-30 13:11 - 2014-03-30 13:11 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-30 13:07 - 2014-03-30 13:07 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-30 13:04 - 2014-03-30 13:04 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-03-30 13:04 - 2014-03-30 13:04 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-03-30 12:27 - 2014-03-30 12:27 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\wStLibG64.sys
2014-03-30 11:56 - 2014-03-30 10:51 - 00000000 ____D () C:\Program Files (x86)\Mega Browse
2014-03-30 11:49 - 2011-09-09 22:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-03-30 11:44 - 2014-03-30 11:44 - 00700980 _____ () C:\Users\Besitzer\Desktop\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi
2014-03-30 11:32 - 2014-03-27 23:52 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector
2014-03-30 11:09 - 2011-07-25 12:09 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-30 11:09 - 2011-07-25 12:09 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-30 10:59 - 2014-03-30 10:59 - 00003266 _____ () C:\Windows\System32\Tasks\{F645D53C-90B4-44B4-BF2C-A061FF2D2048}
2014-03-30 10:57 - 2014-03-30 10:57 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-30 10:57 - 2014-03-30 10:57 - 00000000 ____D () C:\140480dc487d39eb912a9e4ef6
2014-03-30 10:50 - 2013-08-29 22:26 - 00000244 _____ () C:\Users\Besitzer\AppData\Roaming\WB.CFG
2014-03-30 10:38 - 2013-07-14 20:43 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-30 10:38 - 2013-07-14 20:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-30 10:29 - 2014-03-30 10:28 - 00921000 _____ (Oracle Corporation) C:\Users\Besitzer\Downloads\jxpiinstall.exe
2014-03-30 10:26 - 2011-04-13 16:40 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-30 10:09 - 2014-03-30 09:53 - 00001219 _____ () C:\DelFix.txt
2014-03-30 09:53 - 2014-03-28 14:19 - 00000000 ____D () C:\Windows\ERUNT
2014-03-30 09:51 - 2011-07-25 12:05 - 00000000 ____D () C:\Users\Besitzer
2014-03-30 09:40 - 2011-09-07 19:12 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-03-30 09:39 - 2014-03-30 09:39 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-30 09:39 - 2011-04-13 16:37 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-28 22:58 - 2014-03-28 22:58 - 00000000 ____D () C:\HP_TOOLS_mountHPSF
2014-03-28 14:00 - 2014-03-28 14:00 - 00000259 _____ () C:\Users\Besitzer\Desktop\mbam.txt
2014-03-28 12:52 - 2014-03-28 12:52 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-28 12:52 - 2014-03-28 12:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-28 12:52 - 2014-03-28 12:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-03-28 09:56 - 2014-03-28 09:56 - 00274472 _____ () C:\Windows\Minidump\032814-32073-01.dmp
2014-03-28 09:56 - 2014-03-27 14:21 - 581660838 _____ () C:\Windows\MEMORY.DMP
2014-03-28 09:56 - 2014-03-27 14:21 - 00000000 ____D () C:\Windows\Minidump
2014-03-28 09:55 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-28 01:38 - 2014-03-28 01:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Nico Mak Computing
2014-03-28 01:38 - 2014-03-27 23:52 - 00001185 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-03-28 01:38 - 2014-03-27 23:52 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-03-28 01:32 - 2011-09-07 22:03 - 00000000 ____D () C:\Users\Besitzer\Desktop\Wimmelbild
2014-03-28 01:07 - 2014-03-28 01:07 - 00003720 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector
2014-03-28 01:00 - 2014-03-28 01:00 - 04894544 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmalwareprotector_1.exe
2014-03-27 23:52 - 2014-03-27 23:51 - 04892480 _____ (WinZip International LLC ) C:\Users\Besitzer\Downloads\wzmp_8.exe
2014-03-27 14:21 - 2014-03-27 14:21 - 00274472 _____ () C:\Windows\Minidump\032714-31418-01.dmp
2014-03-26 23:37 - 2011-09-07 11:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\SoftGrid Client
2014-03-24 08:32 - 2011-12-24 21:35 - 00000000 ____D () C:\Users\Lisa\AppData\Local\CrashDumps
2014-03-21 20:01 - 2011-09-09 22:03 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-17 00:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-12 00:40 - 2014-03-12 00:40 - 00334962 _____ () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook.htm
2014-03-12 00:40 - 2014-03-12 00:40 - 00000000 ____D () C:\Users\Besitzer\Downloads\(2) Pearl's Peril auf Facebook-Dateien
2014-03-05 10:26 - 2014-03-28 12:52 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 10:26 - 2014-03-28 12:52 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 10:26 - 2014-03-28 12:52 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\avgnt.exe
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-28 16:02

==================== End Of Log ============================
--- --- ---

Rotetaube16 02.04.2014 22:14
dann noch add ,wenns klappt hat's jetzt 50 min gedauert
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Besitzer at 2014-04-02 22:52:40
Running from C:\Users\Besitzer\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

100 Prozent Wimmelbild (HKLM-x32\...\{149F9A5E-889D-474B-BA15-AFA0E614E5EA}_is1) (Version:  - cerasus.media GmbH)
1001 Nacht - Die Abenteuer von Sindbad (HKLM-x32\...\1001 Nacht - Die Abenteuer von Sindbad) (Version:  - )
20.000 Meilen unter dem Meer (HKLM-x32\...\{6692A6CC-6EDA-40C3-8F57-1E8ECD5AE2E0}) (Version: 1.00.0000 - Purplehills)
3 Days - Amulet Secret (HKLM-x32\...\3 Days - Amulet Secret_is1) (Version:  - Realore Studios)
3*3 Match (HKCU\...\3*3 Match) (Version:  - )
5600 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
5600_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
5600Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
Abenteuer Hawaii - Pearl Harbor (HKLM-x32\...\Abenteuer Hawaii - Pearl Harbor) (Version:  - )
Abenteuer Hawaii 2 - Die Verborgene Insel (HKLM-x32\...\Abenteuer Hawaii 2 - Die Verborgene Insel) (Version:  - )
Abenteuer von Luxor (HKLM-x32\...\Abenteuer von Luxor) (Version: 1.1.0.0 - MumboJumbo)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
Aegypten Box (HKLM-x32\...\Aegypten Box) (Version:  - )
Affair Bureau (HKLM-x32\...\Affair Bureau) (Version: 1.0.0.0 - INTENIUM GmbH)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
Agatha Christie Death on the Nile (HKLM-x32\...\{4C33389D-0F65-40A3-B76C-897502500C4B}) (Version: 1.0.0 - JoWood)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Akademie der Magie 2 (HKLM-x32\...\Akademie der Magie 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Alabama Smith (HKLM-x32\...\Alabama Smith) (Version:  - )
Alabama Smith 2 (HKLM-x32\...\Alabama Smith 2) (Version:  - )
Aladins Wunderlampe (HKLM-x32\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM-x32\...\Alamandi) (Version: 1.0.0.0 - INTENIUM GmbH)
Amazing Adventures Around the World (HKLM-x32\...\Amazing Adventures Around the World) (Version:  - PopCap Games)
AMD Fuel (Version: 2011.0228.1151.21177 - Ihr Firmenname) Hidden
Ancient Mysteries (HKLM-x32\...\Ancient Mysteries_is1) (Version:  - astragon Software GmbH)
Ancient Quest of Saqqarah (HKLM-x32\...\Ancient Quest of Saqqarah/DE-German_is1) (Version:  - City Interactive)
Animal Agents (HKLM-x32\...\{7B5A952B-3150-4037-BE90-D94DFB717713}_is1) (Version:  - cerasus.media GmbH)
Ankh_hog (HKLM-x32\...\Ankh_hog) (Version:  - )
Annies Millions (HKLM-x32\...\Annies Millions) (Version: 1.0.0.0 - INTENIUM GmbH)
Antique Road Trip U.S.A. (HKLM-x32\...\Antique Road Trip U.S.A.) (Version: 1.0.0.0 - INTENIUM GmbH)
Ashley Jones – Reise Ins Alte Ägypten (HKLM-x32\...\Ashley Jones – Reise Ins Alte Ägypten) (Version:  - )
ATI Catalyst Install Manager (HKLM\...\{7FBA6627-88F8-0AE0-9326-FB8488DD26E0}) (Version: 3.0.812.0 - ATI Technologies, Inc.)
AtlantisQuest (HKLM-x32\...\{1D619FC4-4F88-406C-9E78-B948BFC998FA}) (Version: 1.00.0000 - Ihr Firmenname)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Aztec Adventures (HKLM-x32\...\Aztec Adventures/DE-German_is1) (Version:  - City Interactive)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bejeweled Twist (HKLM-x32\...\Bejeweled Twist) (Version:  - )
Big City Mystery (HKLM-x32\...\{9918955A-AA7E-4C18-AB5D-B949A1314347}_is1) (Version:  - cerasus.media GmbH)
Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.2.0.6 - )
Big Rig Europe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Build-a-lot 3 (HKLM-x32\...\Build-a-lot 3) (Version:  - )
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0228.1151.21177 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0228.1151.21177 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0228.1151.21177 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help English (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help French (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help German (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0228.1150.21177 - ATI) Hidden
ccc-core-static (x32 Version: 2011.0228.1151.21177 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2011.0228.1151.21177 - ATI) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Christmasville (HKLM-x32\...\{D178746E-0919-424E-88A7-81A0E46FF03E}) (Version: 1.00.0000 - Purplehills)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
City Style (HKLM-x32\...\City Style) (Version:  - )
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Cradle of Egypt (HKLM-x32\...\{2C02C8E3-CF3B-44BE-98C8-12A16EAF2713}_is1) (Version:  - cerasus.media GmbH)
Cradle of Rome 2 (HKLM-x32\...\{E60E8119-F64A-436B-8449-4FF87FC97350}_is1) (Version:  - cerasus.media GmbH)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Curse of the Pharaoh: Die Tr&auml;nen der Sachmet (HKLM-x32\...\BFG-Curse of the Pharaoh - Die Traenen der Sachmet) (Version:  - )
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.3922 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.1.3922 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Tales: Der Goldkafer von Edgar Allan Poe (HKLM-x32\...\BFG-Dark Tales - Der Goldkafer von Edgar Allan Poe) (Version:  - )
Das Geheimnis des Pharaos (HKLM-x32\...\Das Geheimnis des Pharaos) (Version:  - )
Das geheimnisvolle Tagebuch (HKLM-x32\...\Das geheimnisvolle Tagebuch) (Version:  - )
Das rätselhafte Kristall-Portal (HKLM-x32\...\Das rätselhafte Kristall-Portal) (Version:  - )
Das Schicksal der Marie Antoinette (HKLM-x32\...\Das Schicksal der Marie Antoinette) (Version:  - )
Das Vermächtnis: Die Legende des Heiligen Schatzes (HKLM-x32\...\Chronicles of Mystery 3/DE-German_is1) (Version:  - City Interactive)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
Der Fluch des Aegyptischen Artefakts (HKLM-x32\...\Der Fluch des Aegyptischen Artefakts) (Version:  - )
Der Graf von Monte Christo (HKLM-x32\...\Der Graf von Monte Christo) (Version: 1.0.0.0 - INTENIUM GmbH)
Der Stein der Weisen (HKLM-x32\...\Der Stein der Weisen) (Version:  - )
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)
DEUTSCHLAND SPIELT Spiele Post (HKLM-x32\...\DEUTSCHLAND SPIELT Spiele Post) (Version: 1.0.2.4 - INTENIUM GmbH)
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
Die 4 Elemente (HKLM-x32\...\Die 4 Elemente) (Version:  - )
Die Abenteuer-Reise (HKLM-x32\...\Die Abenteuer-Reise) (Version: 1.0.0.0 - INTENIUM GmbH)
Die Jade-Münze (HKLM-x32\...\Die Jade-Münze) (Version: 1.0.0.0 - INTENIUM GmbH)
Die Kunst des Mordens: Der Marionettenspieler (HKLM-x32\...\Art of Murder 2/DE-German_is1) (Version:  - City Interactive)
Die Legende von Pocahontas (HKLM-x32\...\{3BFA752E-2E76-4964-BDA3-94B486A18223}_is1) (Version:  - cerasus.media GmbH)
Die Sage von Kolossus (HKLM-x32\...\Die Sage von Kolossus) (Version:  - )
Die Schatzsucher: Visionen des Goldes ™ (HKLM-x32\...\BFG-Die Schatzsucher - Visionen des Goldes) (Version:  - )
Die Schlange der Isis ™ (HKLM-x32\...\BFG-Die Schlange der Isis) (Version:  - )
Die Wiege Olympias 2 (HKLM-x32\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
DriverTuner 3.1.0.1 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.1 - LionSea SoftWare)
Eldorado (HKLM-x32\...\{6540D6AD-4218-444D-84EC-E6C85F35EE31}) (Version: 1.00.0000 - Purplehills)
Emily Archer und der Fluch des Tutanchamun (HKLM-x32\...\{D09BA721-DF68-4149-883C-F2AE7A808962}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Escape from Lost Island (HKLM-x32\...\Escape from Lost Island) (Version: 1.0.0.0 - INTENIUM GmbH)
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Fallen Shadows - Schatten der Kindheit (HKLM-x32\...\{AE2893E9-145A-41AC-85C6-ED046B13572E}) (Version: 1.0.0 - Happy Muffin Top)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Fiona Finch (HKLM-x32\...\Fiona Finch) (Version: 1.0.0.0 - INTENIUM GmbH)
Fishdom (x32 Version: 2.2.0.95 - WildTangent) Hidden
Frankenstein (HKLM-x32\...\{610B773E-3183-43D5-B01D-862EFF276B81}) (Version: 1.00.0000 - Ihr Firmenname)
freundin - Big City Mystery (HKLM-x32\...\{1F9A14A2-BC64-40D2-9241-4470345298C7}_is1) (Version:  - cerasus.media GmbH)
freundin - Goldenes Prag (HKLM-x32\...\{9E8AA698-979E-4694-A2C3-10591194328A}_is1) (Version:  - cerasus.media GmbH)
freundin - Romance of Rome (HKLM-x32\...\{5E70B619-B3D0-4B50-B57E-5CEBE0201248}_is1) (Version:  - cerasus.media GmbH)
freundin - The Lost Inca Prophecy (HKLM-x32\...\{BE0DFE33-C23B-4111-A63D-ED0994DF3B2C}_is1) (Version:  - cerasus.media GmbH)
Garten-Glück (HKLM-x32\...\Garten-Glück) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheime Fälle: Die gestohlene Venus (HKLM-x32\...\Geheime Fälle: Die gestohlene Venus) (Version:  - )
Geheime Fälle: Die gestohlene Venus 2 (HKLM-x32\...\Geheime Fälle: Die gestohlene Venus 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheime Fälle: Vermisst in Rom (HKLM-x32\...\Geheime Fälle: Vermisst in Rom) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM-x32\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Green Moon (HKLM-x32\...\Green Moon_is1) (Version:  - )
Haunting Mysteries (HKLM-x32\...\{9613E073-00BB-4244-AC06-BAC3DAF7B197}) (Version: 1.00.0000 - PurpleHills)
Heroes of Hellas 2 (HKLM-x32\...\{6E67E70D-606A-4EB0-8094-EFF064431435}) (Version: 1.00.0000 - Purplehills)
Herr des Wetters (HKLM-x32\...\Herr des Wetters) (Version: 1.0.0.0 - INTENIUM GmbH)
Hidden Expedition: Amazon ™ (HKLM-x32\...\BFG-Hidden Expedition Amazon) (Version:  - )
Hidden Magic (HKLM-x32\...\Hidden Magic) (Version: 1.0.0.0 - INTENIUM GmbH)
Hidden Object Crosswords (HKLM-x32\...\Hidden Object Crosswords) (Version: 1.0.0.0 - INTENIUM GmbH)
Hide And Secret 3 (HKLM-x32\...\Hide And Secret 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Holly - Ein Weihnachtsmärchen (HKLM-x32\...\{8F08E12A-363F-4F69-8BC8-0E0EA502A6ED}) (Version: 1.00.0000 - Purplehills)
Holly im Wunderland (HKLM-x32\...\Holly im Wunderland) (Version:  - )
HP Auto (Version: 1.0.12494.3472 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Connection Manager (HKLM-x32\...\{795AADBF-58C2-42D0-B779-E730702A247E}) (Version: 4.0.45.1 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Documentation (HKLM-x32\...\{6C453C9C-38AE-494D-BF89-7AA0DE87F3E5}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP On Screen Display (HKLM-x32\...\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}) (Version: 1.1.2 - Hewlett-Packard Company)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{EB58480C-0721-483C-B354-9D35A147999F}) (Version: 2.3.6 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Software Framework (HKLM-x32\...\{CE4551E8-8D09-4126-A39B-B7DF82C5EB83}) (Version: 4.0.110.1 - Hewlett-Packard Company)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{E92D47A1-D27D-430A-8368-0BAFD956507D}) (Version: 5.2.9.2 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6319.0 - IDT)
Insaniquarium Deluxe (HKLM-x32\...\Insaniquarium Deluxe) (Version:  - )
Insel der Feen - Fairy Island (HKLM-x32\...\Insel der Feen - Fairy Island) (Version: 1.0.0.0 - INTENIUM GmbH)
Jane Lucky (HKLM-x32\...\Jane Lucky) (Version: 1.0.0.0 - INTENIUM GmbH)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Jewel Mystery: Die Villa (HKLM-x32\...\Jewel Mystery: Die Villa) (Version: 1.0.0.0 - INTENIUM GmbH)
Jewel Quest Mysteries 2: Trail of the Midnight Heart (nur deinstallation) (HKLM-x32\...\Jewel Quest Mysteries 2: Trail of the Midnight Heart) (Version:  - )
Jewel Quest Mysteries Curse Of The Emerald Tear (nur deinstallation) (HKLM-x32\...\Jewel Quest Mysteries Curse Of The Emerald Tear) (Version:  - )
Jewel Quest Mysteries: The Oracle of Ur CE (HKLM-x32\...\Jewel Quest Mysteries: The Oracle of Ur CE) (Version: 3.32.0.0 - iWin.com)
Jewel Quest Mysteries: The Seventh Gate (HKLM-x32\...\BFG-Jewel Quest Mysteries - The Seventh Gate) (Version:  - )
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest: Der Saphirdrache (HKLM-x32\...\BFG-Jewel Quest - Der Saphirdrache) (Version:  - )
Jewels of Atlantis (HKLM-x32\...\Jewels of Atlantis/DE-German_is1) (Version:  - City Interactive)
Jules Vernes: Das Abenteuer Jangada (HKLM-x32\...\Jules Vernes: Das Abenteuer Jangada) (Version: 1.0.0.0 - INTENIUM GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kochprofi (HKLM-x32\...\Kochprofi) (Version: 1.0.0.0 - INTENIUM GmbH)
Kuros (HKLM-x32\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Laura Jones 2 (HKLM-x32\...\Laura Jones 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Legends of the Wild West: Golden Hill (HKLM-x32\...\Legends of the Wild West/DE-German_is1) (Version:  - City Interactive)
Lost Realms: Der Fluch von Babylon (HKLM-x32\...\BFG-Lost Realms - Der Fluch von Babylon) (Version:  - )
Lost Secrets - Bermuda Dreieck (HKLM-x32\...\Lost Secrets - Bermuda Dreieck) (Version: 1.0 - Astragon)
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS)
Magic Encyclopedia (HKLM-x32\...\Magic Encyclopedia) (Version:  - )
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mahjong Escape – Ancient China (HKLM-x32\...\Mahjong Escape – Ancient China) (Version:  - )
Mahjongg Artifacts 2 (HKLM-x32\...\Mahjongg Artifacts 2) (Version:  - )
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Master Wu (HKLM-x32\...\Master Wu) (Version:  - )
Maya - Fight for Jewels (HKLM-x32\...\Maya - Fight for Jewels_is1) (Version:  - Contendo Media GmbH)
Mega Browse (HKLM\...\Mega Browse) (Version: 2014.03.28.231011 - Mega Browse)
Meine kleine Farm 2 (HKLM-x32\...\Meine kleine Farm 2) (Version:  - )
Meine kleine Farm 3 (HKLM-x32\...\Meine kleine Farm 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Meine kleine Farm 3: Ice Age (HKLM-x32\...\Meine kleine Farm 3: Ice Age) (Version: 1.0.0.0 - INTENIUM GmbH)
Meine kleine Farm 3: Russisches Roulette (HKLM-x32\...\Meine kleine Farm 3: Russisches Roulette) (Version: 1.0.0.0 - INTENIUM GmbH)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mysterious City: Cairo (nur deinstallation) (HKLM-x32\...\Mysterious City: Cairo) (Version:  - )
Mystery Case Files&reg;: Dire Grove™ (HKLM-x32\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: 13th Skull (HKLM-x32\...\BFG-Mystery Case Files - 13th Skull) (Version:  - )
Mystery Case Files: Huntsville ™ (HKLM-x32\...\BFG-Mystery Case Files - Huntsville) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM-x32\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: Prime Suspects ™ (HKLM-x32\...\BFG-Mystery Case Files - Prime Suspects) (Version:  - )
Mystery of Montezuma (HKLM-x32\...\Mystery of Montezuma/DE-German_is1) (Version:  - City Interactive)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mystery P.I. - The Lottery Ticket 1.0.0.5 (HKLM-x32\...\Mystery P.I. - The Lottery Ticket 1.0.0.5) (Version:  - )
Mystery P.I. – The Vegas Heist (HKLM-x32\...\Mystery P.I. – The Vegas Heist) (Version:  - )
Mystery Tales - Insel der Träume (HKLM-x32\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Tales - Insel der Träume (HKLM-x32\...\{F6856F9B-881C-4BAF-8602-1E2DBA0EA8A7}_is1) (Version:  - cerasus.media GmbH)
Mysteryville 2 (HKLM-x32\...\{7730D510-6DE2-4CD4-8F58-0B04680AEFE6}) (Version: 1.00.0000 - Mysteryville 2)
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Natalie Brooks (HKLM-x32\...\Natalie Brooks) (Version:  - )
Natalie Brooks 2 (HKLM-x32\...\Natalie Brooks 2) (Version:  - )
Natalie Brooks 3 (HKLM-x32\...\Natalie Brooks 3) (Version: 1.0.0.0 - INTENIUM GmbH)
National Geographic: Herod's Lost Tomb (HKLM-x32\...\National Geographic - Herod's Lost Tomb/DE-German_is1) (Version:  - City Interactive)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM-x32\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Nightmares from the Deep (HKLM-x32\...\Nightmares from the Deep_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Odyssee ins Ungewisse (HKLM-x32\...\Odyssee ins Ungewisse) (Version: 1.0.0.0 - INTENIUM GmbH)
PC Speed Maximizer v3.2 (HKLM-x32\...\PC Speed Maximizer_is1) (Version: 3.2 - Smart PC Solutions)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PirateVille (HKLM-x32\...\PirateVille) (Version:  - )
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Profiler (HKLM-x32\...\{164B5A9F-D9BD-4EC3-880E-61A4E6935EEB}) (Version: 1.00.0000 - Purplehills)
Real Crimes - Jack The Ripper (HKLM-x32\...\Real Crimes - Jack The Ripper) (Version: 1.00 - phenomedia publishing gmbh)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.34.1130.2010 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.10.0416 - REALTEK Semiconductor Corp.)
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
Redemption Cemetery: Der Fluch des Raben (HKLM-x32\...\BFG-Redemption Cemetery - Der Fluch des Raben) (Version:  - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Ritter Arthur (HKLM-x32\...\Ritter Arthur) (Version:  - )
Robinson Crusoe (HKLM-x32\...\{7DF5A0FE-EEC4-439A-A3B5-DF91958DD5A7}_is1) (Version:  - cerasus.media GmbH)
Romance of Rome (HKLM-x32\...\{02CF7793-9F94-45E9-BB0F-E0E5FAB463E6}_is1) (Version:  - cerasus.media GmbH)
Samantha Swift and the Fountains of Fate (HKLM-x32\...\Samantha Swift and the Fountains of Fate) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Golden Touch (HKLM-x32\...\Samantha Swift and the Golden Touch) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Hidden Roses of Athena (HKLM-x32\...\Samantha Swift and the Hidden Roses of Athena) (Version: 1.1.0.0 - MumboJumbo)
Samantha Swift and the Mystery from Atlantis (HKLM-x32\...\Samantha Swift and the Mystery from Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Schatz der Azteken (HKLM-x32\...\Schatz der Azteken) (Version:  - )
Secrets of Vatican (HKLM-x32\...\{66B76A83-4B3A-4218-82A4-862E26B745CA}) (Version: 1.00.0000 - Purplehills)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Snark Busters - Willkommen im Club (HKLM-x32\...\Snark Busters - Willkommen im Club) (Version:  - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Sony Ericsson Update Engine (HKLM-x32\...\Update Engine) (Version: 2.13.10.201308300830 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spannende Abenteuer Die verschollene Grabkammer (HKLM-x32\...\Spannende Abenteuer Die verschollene Grabkammer) (Version:  - )
Sprill && Ritchie (HKLM-x32\...\Sprill && Ritchie) (Version:  - )
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
StoneLoops of Jurassica (HKLM-x32\...\StoneLoops of Jurassica/DE-German_is1) (Version:  - City Interactive)
Strike Ball 3 (HKLM-x32\...\Strike Ball 3) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.4.4 - Synaptics Incorporated)
Tatort Museum (HKLM-x32\...\Tatort Museum) (Version: 1.0.0.0 - INTENIUM GmbH)
Tatort Museum 2 (HKLM-x32\...\Tatort Museum 2) (Version: 1.0.0.0 - INTENIUM GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer)
The Magicians Handbook 2 (HKLM-x32\...\{85225E9A-0292-4CF4-93AC-05C2559D4A6D}) (Version: 1.00.0000 - Purplehills)
The Mystery of Meane Manor (HKLM-x32\...\The Mystery of Meane Manor) (Version: 1.1.0.0 - MumboJumbo)
Time Machine (HKLM-x32\...\{9F9D845C-A5F0-423B-9820-240771C7645D}) (Version: 1.00.0000 - Purplehills)
TomTom HOME 2.8.2.2264 (HKLM-x32\...\TomTom HOME) (Version: 2.8.2.2264 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Treasure Island (HKLM-x32\...\{68EB8188-55D4-4BFA-9F37-F8167B095B17}) (Version: 1.00.0000 - Purplehills)
Treasure Masters, Inc. (HKLM-x32\...\Treasure Masters, Inc.) (Version:  - )
Treasures Of Mystery Island (HKLM-x32\...\Treasures Of Mystery Island) (Version:  - )
Tropical Lost Island (HKLM-x32\...\Tropical Lost Island/DE-German_is1) (Version:  - City Interactive)
Um die Welt in 80 Tagen - Wimmelbild (HKLM-x32\...\{4DE19B10-BF0A-40E4-85D7-C5CE09D83D92}) (Version: 1.00.0000 - Purplehills)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Unsolved Mystery Club - Amelia Earhart (HKLM-x32\...\Unsolved Mystery Club - Amelia Earhart) (Version:  - )
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
Walsingham‘s Manor - Verlies der Seelen (HKLM-x32\...\Walsingham‘s Manor - Verlies der Seelen_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinZip Malware Protector (HKLM-x32\...\WinZip Malware Protector_is1) (Version: 2.1.1000.10740 - WinZip International LLC)
WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
World of Wimmelbild 2 (HKLM-x32\...\World of Wimmelbild 2) (Version:  - )
Youda Legend (HKLM-x32\...\Youda Legend) (Version:  - )
Youda Legend Der goldene Paradiesvogel (HKLM-x32\...\Youda Legend Der goldene Paradiesvogel) (Version:  - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Restore Points  =========================

30-03-2014 08:07:26 Ende der Bereinigung
30-03-2014 08:25:15 Removed Java(TM) 6 Update 24
30-03-2014 08:26:56 Removed Java(TM) 6 Update 24 (64-bit)
30-03-2014 08:35:04 Windows Update
30-03-2014 09:32:07 WinZip Malware Protector
30-03-2014 10:21:07 Windows Update
31-03-2014 15:10:35 Windows Update
31-03-2014 19:46:39 Windows Update
01-04-2014 16:02:44 Revo Uninstaller's restore point - Mozilla Firefox 28.0 (x86 de)
01-04-2014 17:43:46 Windows Update
01-04-2014 20:17:51 Revo Uninstaller's restore point - OpenAL

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {09426B15-3A03-4214-827A-753A64D6C519} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-31] (Adobe Systems Incorporated)
Task: {1EF15CAC-ADFC-488A-B27E-1ADBB5571BCA} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-03-26] (Nico Mak Computing)
Task: {2028D30E-633D-410D-830D-981298550799} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink)
Task: {262902C5-9376-4E7F-BC8A-D0BC75CB83D9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {33078020-8F6E-4D32-9436-737053F96DCE} - System32\Tasks\HPCeeScheduleForBesitzer => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {51533916-602B-4D2F-AC71-2BDD997E989E} - \Digital Sites No Task File
Task: {5B13AA26-741E-4D6C-A585-23ECF5DB0BA5} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-31] ()
Task: {5B20CC1D-E3D5-47E0-9312-457D594BCC0D} - \BitGuard No Task File
Task: {6461CFE0-9ABD-441B-AEBA-9D242E5F39B7} - System32\Tasks\WinZip Malware Protector => C:\Program Files (x86)\WinZip Malware Protector\AppManager.exe [2013-03-26] (Nico Mak Computing)
Task: {7A06B9E5-76A1-4208-BB0A-14DD979239FE} - \DSite No Task File
Task: {977DB76C-E699-44C3-A351-4C9E0DDD0314} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {99607DA1-AB39-474C-BD4A-AEB4B72E42A5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {EC16804A-65EF-42BB-A6B7-E958C29679F6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-03-25] (Microsoft)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\HPCeeScheduleForBesitzer.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{0907793A-4E41-4A92-B5ED-210692D155D0}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2014-03-29 01:10 - 2014-03-29 01:10 - 00348448 _____ () C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe
2011-02-28 12:01 - 2011-02-28 12:01 - 00079872 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Services.dll
2011-02-28 12:01 - 2011-02-28 12:01 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-03-30 11:56 - 2014-04-02 22:42 - 00350496 _____ () C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe
2010-06-24 02:21 - 2010-06-24 02:21 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2013-11-05 23:23 - 2013-11-05 23:21 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-03-27 23:52 - 2013-02-28 17:53 - 00886272 _____ () C:\Program Files (x86)\WinZip Malware Protector\System.Data.SQLite.dll
2014-03-27 23:52 - 2013-03-26 13:16 - 01718648 _____ () C:\Program Files (x86)\WinZip Malware Protector\aspsys.dll
2014-03-27 23:52 - 2013-02-28 17:53 - 00168448 _____ () C:\Program Files (x86)\WinZip Malware Protector\UNRAR.DLL
2014-04-01 18:12 - 2014-03-15 10:40 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-03-13 00:17 - 2014-03-30 09:29 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
2010-06-24 02:19 - 2010-06-24 02:19 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:09629F6E
AlternateDataStreams: C:\ProgramData\Temp:0AC32449
AlternateDataStreams: C:\ProgramData\Temp:2495D97A
AlternateDataStreams: C:\ProgramData\Temp:2B1EA607
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F
AlternateDataStreams: C:\ProgramData\Temp:3E06C78F
AlternateDataStreams: C:\ProgramData\Temp:4673E9EA
AlternateDataStreams: C:\ProgramData\Temp:4CA05B44
AlternateDataStreams: C:\ProgramData\Temp:639BB5E9
AlternateDataStreams: C:\ProgramData\Temp:6FB48139
AlternateDataStreams: C:\ProgramData\Temp:78E0DF72
AlternateDataStreams: C:\ProgramData\Temp:9BAC4211
AlternateDataStreams: C:\ProgramData\Temp:A02025CE
AlternateDataStreams: C:\ProgramData\Temp:AD022376
AlternateDataStreams: C:\ProgramData\Temp:B54E4B5A
AlternateDataStreams: C:\ProgramData\Temp:B88DC997
AlternateDataStreams: C:\ProgramData\Temp:D31BE97C
AlternateDataStreams: C:\ProgramData\Temp:D48500F8
AlternateDataStreams: C:\ProgramData\Temp:F13867C6

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/02/2014 10:48:21 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (04/02/2014 10:46:28 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (04/02/2014 10:46:02 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (04/02/2014 10:42:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2014 11:27:44 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (04/01/2014 11:27:44 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (04/01/2014 11:27:41 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (04/01/2014 11:26:11 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (04/01/2014 11:24:44 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC

Error: (04/01/2014 11:24:44 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU failed to post message to CCC


System errors:
=============
Error: (04/02/2014 10:44:58 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (04/01/2014 05:54:06 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (04/01/2014 08:11:51 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (03/31/2014 08:29:25 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (03/31/2014 07:57:12 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (03/31/2014 07:57:10 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (03/30/2014 01:51:33 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 9 für Windows 7 für x64-Systeme (KB2925418)

Error: (03/30/2014 01:44:16 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004002

Error: (03/30/2014 01:43:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde mit folgendem Fehler beendet:
%%32

Error: (03/30/2014 01:43:05 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x80080005


Microsoft Office Sessions:
=========================
Error: (04/02/2014 10:48:21 PM) (Source: ATIeRecord)(User: )
Description:

Error: (04/02/2014 10:46:28 PM) (Source: ATIeRecord)(User: )
Description:

Error: (04/02/2014 10:46:02 PM) (Source: ATIeRecord)(User: )
Description:

Error: (04/02/2014 10:42:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2014 11:27:44 PM) (Source: ATIeRecord)(User: )
Description:

Error: (04/01/2014 11:27:44 PM) (Source: ATIeRecord)(User: )
Description:

Error: (04/01/2014 11:27:41 PM) (Source: ATIeRecord)(User: )
Description:

Error: (04/01/2014 11:26:11 PM) (Source: ATIeRecord)(User: )
Description:

Error: (04/01/2014 11:24:44 PM) (Source: ATIeRecord)(User: )
Description:

Error: (04/01/2014 11:24:44 PM) (Source: ATIeRecord)(User: )
Description:


==================== Memory info ===========================

Percentage of memory in use: 42%
Total physical RAM: 5882.9 MB
Available physical RAM: 3376.11 MB
Total Pagefile: 11763.98 MB
Available Pagefile: 8122.63 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:684.19 GB) (Free:427.83 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.16 GB) (Free:1.55 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: B58C26AE)

Partition: GPT Partition Type.

==================== End Of Log ============================
bis denn , Übrigends ich wars nicht.........:headbang:


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:30 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131