Trojaner-Board - Windows 7: selbstständig öffnende Internetseiten sowohl im IE als auch bei Mozilla Firefox

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Windows 7: selbstständig öffnende Internetseiten sowohl im IE als auch bei Mozilla Firefox (https://www.trojaner-board.de/153776-windows-7-selbststaendig-oeffnende-internetseiten-sowohl-ie-mozilla-firefox.html)

Schramme

12.05.2014 18:50

Windows 7: selbstständig öffnende Internetseiten sowohl im IE als auch bei Mozilla Firefox

Hallo,

nachdem meine Frau massive Probleme in der Arbeit mit Adobe Photoshop CS5 in Kombination mit der Adobe Bridge bekam (u.a. ständige Run.dll-Fehlermeldungen nach dem Öffnen), wurde durch mich nach Problemlösungen gesucht. Im Ergebnis gelangte der "RegCleaner Pro" von Systweak auf das Sytem, da er versprach, Fehler zu beheben und das System insgesamt wieder deutlich zu beschleunigen. Im Ergebnis war jedoch nach der Installation und Ausführung des RegCleaner Pro keine merkliche Verbesserung zu verzeichnen. Dafür öffneten sich seitdem jedoch selbstständig Internetseiten, Tabs u.a. beim Nutzen des IE sowie des Mozilla Firefox. Ein webefreies Arbeiten oder Arbeiten ohne ständig neues Öffnen von neuen Internetseiten mit dem Hinweis auf erhebliche Systemschwierigkeiten ist seitdem nicht mehr möglich!

Somit wurde nach dem Durchforsten des Internet die entsprechende Software wieder deinstalliert, das Problem der übermäßigen Werbung jedoch nicht behoben.

Als Antiviren-Programm ist Norton 360 installiert.

Eurer Anleitung folgend habe ich die notwendigen Programm ausgeführt und hoffe nunmehr auf Eure Hilfe zur Beseitigung dieser extremen Arbeitsbeeinträchtigung.

Da die logfile-Dateien zu groß sind, nunmehr wunschgemäß als .zip-Anhang

schrauber

13.05.2014 06:33

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Schramme

13.05.2014 09:57

Alles klar!

Hier die erste Datei:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014

Ran by Christian (administrator) on *****-PC on 11-05-2014 17:47:47

Running from C:\Users\Christian\Downloads

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe

(brother Industries Ltd) C:\Windows\SysWOW64\BRSS01A.EXE

(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe

() C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

() C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Users\Christian\AppData\Roaming\BupSystem\bup.exe

(mst software GmbH, Germany) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 7\DfSdkS.exe

(CyberLink) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe

(T-Systems International GmbH) C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFInject64.exe

(Hewlett-Packard Company) C:\Program Files (x86)\hp\Common\HPSupportSolutionsFrameworkService.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccsvchst.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe

(LenovoEMC Ltd.) C:\Program Files (x86)\LenovoEMC Storage Manager\pCloudd.exe

(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe

() C:\Program Files\Iomega\Quikprotect\QpMonitor.exe

(EMC Corporation) C:\Program Files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe

(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe

(PacketVideo) C:\Program Files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe

() C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe

(Wajam Internet Technologies Inc.) C:\Program Files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancer.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

() C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccsvchst.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe

() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe

() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe

(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

() C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe

(Bandoo Media Inc.) C:\Users\Jessi\AppData\Local\iLivid\iLivid.exe

(Dropbox, Inc.) C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe

(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(eBay Inc.) C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTBDaemon.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_13_0_0_206_ActiveX.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

(Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe

(Microsoft Corporation) C:\Windows\System32\prevhost.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [itype] => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2342800 2009-05-28] (Microsoft Corporation)

HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [610360 2009-07-08] ()

HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)

HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)

HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [PPort12reminder] => C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe [328992 2010-02-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKLM\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [UIWatcher] => C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [3508568 2009-02-23] (ashampoo GmbH & Co. KG)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jessi\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-05-07] (Google Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [genesis] => c:\users\jessi\appdata\local\genesis\genesis.exe [3317760 2014-04-29] ()

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [GoogleChromeAutoLaunch_F51A6D0EEE39DF9BB15E2444D1233C4B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [iLivid] => C:\Users\Jessi\AppData\Local\iLivid\iLivid.exe [8271360 2014-04-08] (Bandoo Media Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Policies\Explorer: [NoCDBurning] 1

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\MountPoints2: {99e6b394-a973-11de-ad27-806e6f6e6963} - E:\start.exe

AppInit_DLLs:  =>  File Not Found

AppInit_DLLs-x32:  => "" File Not Found

IFEO\bitguard.exe: [Debugger] tasklist.exe

IFEO\bprotect.exe: [Debugger] tasklist.exe

IFEO\bpsvc.exe: [Debugger] tasklist.exe

IFEO\browserdefender.exe: [Debugger] tasklist.exe

IFEO\browserprotect.exe: [Debugger] tasklist.exe

IFEO\browsersafeguard.exe: [Debugger] tasklist.exe

IFEO\dprotectsvc.exe: [Debugger] tasklist.exe

IFEO\jumpflip: [Debugger] tasklist.exe

IFEO\protectedsearch.exe: [Debugger] tasklist.exe

IFEO\searchinstaller.exe: [Debugger] tasklist.exe

IFEO\searchprotection.exe: [Debugger] tasklist.exe

IFEO\searchprotector.exe: [Debugger] tasklist.exe

IFEO\searchsettings.exe: [Debugger] tasklist.exe

IFEO\searchsettings64.exe: [Debugger] tasklist.exe

IFEO\snapdo.exe: [Debugger] tasklist.exe

IFEO\stinst32.exe: [Debugger] tasklist.exe

IFEO\stinst64.exe: [Debugger] tasklist.exe

IFEO\umbrella.exe: [Debugger] tasklist.exe

IFEO\utiljumpflip.exe: [Debugger] tasklist.exe

IFEO\volaro: [Debugger] tasklist.exe

IFEO\vonteera: [Debugger] tasklist.exe

IFEO\websteroids.exe: [Debugger] tasklist.exe

IFEO\websteroidsservice.exe: [Debugger] tasklist.exe

Startup: C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk

ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

Startup: C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:49177;https=127.0.0.1:49177

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaHp8Pk5fza5XP2LqNOcSHMtbl0vt3xjxqLjH3FfFGrtpLTUpBCystXadzXKHt04nu6I8nTDMYUtupArFZLr6Li5GO991xfN_MkMkDCIqxEGXil0t_3zWGyzR-iuv0Yg9jgMQzdG2sjq5s9_oUqfsK5h8RpgrI9NU-YGexbCP8T3mdzcMY_OVX2AojyAYXNE&q={searchTerms}

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://signin.ebay.de/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=77&ru=http%3A%2F%2Fmy.ebay.de%2Fws%2FeBayISAPI.dll%3FMyEbayBeta%26MyEbay%3D%26ssPageName%3DADME%253AB%253ATB4%253ADE%253A1%26guest%3D1&pageType=3984

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaHp8Pk5fza5XP2LqNOcSHMtbl0vt3xjxqLjH3FfFGrtpLTUpBCystXadzXKHt04nu6I8nTDMYUtupArFZLr6Li5GO991xfN_MkMkDCIqxEGXil0t_3zWGyzR-iuv0Yg9jgMQzdG2sjq5s9_oUqfsK5h8RpgrI9NU-YGexbCP8T3mdzcMY_OVX2AojyAYXNE&q={searchTerms}

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1398794045&from=cor&uid=WDCXWD10EADS-65M2B0_WD-WCAV5143632136321&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1398794045&from=cor&uid=WDCXWD10EADS-65M2B0_WD-WCAV5143632136321&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1398794045&from=cor&uid=WDCXWD10EADS-65M2B0_WD-WCAV5143632136321&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1398794045&from=cor&uid=WDCXWD10EADS-65M2B0_WD-WCAV5143632136321&q={searchTerms}

URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File

StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKLM - {134B5A9E-37E4-4B34-93B8-94ED49FF6DDB} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de

SearchScopes: HKLM - {25E3C058-0862-4EA6-9592-A8852FFC76C2} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06

SearchScopes: HKLM - {57948E9B-85E2-4A57-B023-93A71375A317} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1384&systemid=406&v=n12521-338&apn_uid=2736460711224265&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {134B5A9E-37E4-4B34-93B8-94ED49FF6DDB} URL = 

SearchScopes: HKCU - {25E3C058-0862-4EA6-9592-A8852FFC76C2} URL = 

SearchScopes: HKCU - {57948E9B-85E2-4A57-B023-93A71375A317} URL = 

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = 

BHO: Plus-HD-9.1 - {11111111-1111-1111-1111-110511291116} - C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-bho64.dll (Plus HD)

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)

BHO-x32: Plus-HD-9.1 - {11111111-1111-1111-1111-110511291116} - C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-bho.dll (Plus HD)

BHO-x32: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

BHO-x32: amazon - {84B94901-3645-4D80-A6B7-4D0050B19455} - C:\Program Files (x86)\Preispiraten6\IEButtonAmazonInterface.dll ()

BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Tunebite_WebRipPlugin Class - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: eBay - {CD9B7762-DFBC-42B1-BB30-02A78287B456} - C:\Program Files (x86)\Preispiraten6\IEButtonEbayInterface.dll ()

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

BHO-x32: Preispiraten - {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} - C:\Program Files (x86)\Preispiraten6\IEButtonPPInterface.dll ()

BHO-x32: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)

Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} -  No File

Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} -  No File

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

Toolbar: HKCU - No Name - {37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} -  No File

DPF: HKLM-x32 {28B66320-9687-4B13-8757-36F901887AB5} hxxp://www.photodose.de/ips-opdata/operator/69189345/objects/canvasx.cab

DPF: HKLM-x32 {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} hxxp://www.photodose.de/ips-opdata/operator/69189345/objects/jordan.cab

DPF: HKLM-x32 {72376E32-8AF2-473F-BE32-E5D0F39C865D} hxxp://de.cyberlink.com/prog/win7/js/UpdateAdvisor.cab

DPF: HKLM-x32 {B1953AD6-C50E-11D3-B020-00A0C9251384} hxxp://www.o2c.de/download/O2CPlayer.CAB

DPF: HKLM-x32 {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} hxxp://office.microsoft.com/officeupdate/content/opuc4.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

DPF: HKLM-x32 {EDFCB7CB-942C-4822-AF14-F0B687409848} https://www.fotopostonline.de/ImageUploader4.cab

Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File

Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Hosts: 127.0.0.1                                activate.adobe.com

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default

FF DefaultSearchEngine: Web Search

FF SelectedSearchEngine: Web Search

FF Homepage: hxxp://www.ytong-bausatzhaus.de/

FF Keyword.URL: hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaHp8Pk5fza5XP2LqNOcSHMtbl0vt3xjxqLjH3FfFGrtpLTUpBCystXadzXKHt04nu6I8nTDMYUtupArFZLr6Li5GO991xfN_MkMkDCIqxEGXil0t_3zWGyzR-iuv0Yg9jgMQzdG2sjq5s9_oUqfsK5h8RpgrI9NU-YGexbCP8T3mdzcMY_OVX2AojyAYXNE&q=

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)

FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.5 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)

FF SearchPlugin: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\searchplugins\Web Search.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Plus-HD-9.1 - C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com [2014-05-06]

FF Extension: SparPilot - Gutscheine &amp; mehr... - C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\sparpilot@sparpilot.com [2014-05-07]

FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\elemhidehelper@adblockplus.org.xpi [2014-05-11]

FF Extension: Adblock Plus - C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-11]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-04-14]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-04-14]

FF HKLM-x32\...\Firefox\Extensions: [tunebite-firefox-surf-and-catch-extension@audials.com] - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\

FF Extension: Tunebite Firefox Surf and Catch Plugin - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ []

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\ []

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFF [2013-10-09]

FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\extensions\quick_start@gmail.com

FF Extension: Quick Start - C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\extensions\quick_start@gmail.com [2014-04-29]

FF HKLM-x32\...\Thunderbird\Extensions: [{857610fe-b36c-47f2-b4fa-6b7affe0cf5a}] - C:\Program Files (x86)\Mobile Master\ext\1\

FF Extension: Mobile Master Add-In - C:\Program Files (x86)\Mobile Master\ext\1\ []
 

Chrome: 

=======

CHR HomePage: hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaHp8Pk5fza5XP2LqNOcSHMtbl0vt3xjxqLjH3FfFGrtpLTUpBCystXadzXKHt04nu6I8nTDMYUtupArFZLr6Li5GO991xfN_MkMkDCIqxEGXil0t_3zWGyzR-iuv0Yg9jQx3Q3ScVmBFs262mgefwCT7pXPXcPci_2nZV18df9jn8VW3K4c9chFTGvipD14

CHR StartupUrls: "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaHp8Pk5fza5XP2LqNOcSHMtbl0vt3xjxqLjH3FfFGrtpLTUpBCystXadzXKHt04nu6I8nTDMYUtupArFZLr6Li5GO991xfN_MkMkDCIqxEGXil0t_3zWGyzR-iuv0Yg9jQx3Q3ScVmBFs262mgefwCT7pXPXcPci_2nZV18df9jn8VW3K4c9chFTGvipD14"

CHR DefaultSearchKeyword: ask.com

CHR DefaultSearchProvider: Ask.com

CHR DefaultSearchURL: hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=1384&systemid=406&v=n12521-338&apn_uid=2736460711224265&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll No File

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll No File

CHR Plugin: (Babylon ToolBar) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0\BabylonChromeToolBar.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File

CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: ( Wacom Dynamic Link Library) - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll No File

CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Extension: (Plus-HD-9.1) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe [2014-05-06]

CHR Extension: (Protegere) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddkeieaieohnceanbhdeijclgemgjjkf [2014-05-07]

CHR Extension: (New Tab) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpmlnedpdikbgdghljdepnljfpkhccn [2012-09-23]

CHR Extension: (V-bates) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljmibnagodajacnnbifpamhggcohblip [2014-04-29]

CHR Extension: (Norton Identity Protection) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-01-23]

CHR Extension: (Google Wallet) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-23]

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\Exts\Chrome.crx [2014-04-02]

CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx [2012-09-23]
 

==================== Services (Whitelisted) =================
 

R2 BlockAndSurf; C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe [143872 2014-04-29] ()

S2 Brother XP spl Service; C:\Windows\SysWOW64\brsvc01a.exe [57344 2002-04-12] (brother Industries Ltd)

R2 bupService; C:\Users\Christian\AppData\Roaming\BupSystem\bup.exe [1005056 2014-05-07] ()

R2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 7\DfsdkS.exe [544768 2009-08-24] (mst software GmbH, Germany)

R2 DFSVC; C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFInject64.exe [376832 2009-10-21] (T-Systems International GmbH)

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-04-01] (Hewlett-Packard Company)

R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)

S2 Irmon; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S2 LightsOff; C:\ProgramData\LightsOff\up\2.6.80\LightsOff.exe [42872 2014-05-09] (Coffee and Comfort Apps, LLC)

R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)

R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)

R2 PCloudd; C:\Program Files (x86)\LenovoEMC Storage Manager\pCloudd.exe [215040 2013-07-07] (LenovoEMC Ltd.)

R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)

R2 QPCopyEngine; C:\Program Files\Iomega\Quikprotect\QpMonitor.exe [458240 2012-09-07] ()

R2 RetroExpLauncher; C:\Program Files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe [115992 2008-07-16] (EMC Corporation)

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [24576 2014-05-06] (Realtek Semiconductor.)

R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)

R2 TwonkyMedia; C:\Program Files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe [512840 2012-02-03] (PacketVideo)

R2 TwonkyWebDav; C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe [250696 2012-02-03] ()

S2 Wajam Internet Enhancer Service; C:\Program Files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe [217600 2014-05-05] (Wajam Internet Technologies Inc.)

R2 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe [884608 2012-05-14] ()

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [635160 2014-04-04] (Wacom Technology, Corp.)

S2 xmkysecqun64; C:\Program Files\003\xmkysecqun64.exe run options=01110010030000000000000000000000 sourceguid=19A6D51C-2D35-44DB-B412-0B01BF8D2D62 [X]

S2 yewimmxqbs64; C:\Program Files\002\yewimmxqbs64.exe run options=01100010020000000000000000000000 sourceguid=3A5B3E40-3C96-4F4E-A48D-C161A8B0E1A6 [X]
 

==================== Drivers (Whitelisted) ====================
 

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20140409.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)

S3 BioNTDrv; C:\Program Files\Paragon Software\Festplatten Manager 14 Professional\program\BioNTDrv.SYS [19720 2014-02-14] (Paragon Software Group)

R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)

S3 DFSYS; C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFSYS64.SYS [17952 2009-10-15] (T-Systems International GmbH)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-05-05] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-05-05] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20140509.001\IDSvia64.sys [525016 2014-03-31] (Symantec Corporation)

R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()

S3 MosIrUsb; C:\Windows\System32\DRIVERS\MosIrUsb.sys [27648 2007-10-11] ()

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20140510.001\ENG64.SYS [126040 2014-05-05] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20140510.001\EX64.SYS [2099288 2014-05-05] (Symantec Corporation)

S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)

R3 OXSDIDRV_x64; C:\Windows\System32\DRIVERS\OXSDIDRV_x64.sys [51760 2009-09-28] ()

S3 OXUDIDRV; C:\Windows\system32\Drivers\OXUDIDRV_X64.sys [31280 2010-05-25] ()

S3 PolarUSB; C:\Windows\SysWOW64\DRIVERS\PolarUSB.sys [17343 2001-07-12] (Polar Electro)

R3 QsFsFltr; C:\Windows\System32\DRIVERS\QsFsFltr.sys [22584 2012-08-20] (Windows (R) Win 7 DDK provider)

S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31264 2009-11-03] (RapidSolution Software AG)

R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31264 2009-11-03] (RapidSolution Software AG)

R3 SipIMNDI; C:\Windows\System32\DRIVERS\SipIMNDI64.sys [28192 2009-10-15] (T-Systems International GmbH)

S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()

R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\N360x64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\N360x64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)

R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2014-02-14] ()

R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2014-02-14] ()

R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700424 2014-02-14] ()

R3 vNICdrv; C:\Windows\System32\DRIVERS\vNICdrv.sys [20048 2012-05-11] (Iomega Corporation)

U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; c:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [146928 2009-07-23] (CyberLink Corp.)

S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]

S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]

S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-11 17:47 - 2014-05-11 17:54 - 00040739 _____ () C:\Users\Christian\Downloads\FRST.txt

2014-05-11 17:47 - 2014-05-11 17:47 - 00000000 ____D () C:\FRST

2014-05-11 17:46 - 2014-05-11 17:47 - 02066432 _____ (Farbar) C:\Users\Christian\Downloads\FRST64.exe

2014-05-11 17:38 - 2014-05-11 17:38 - 00017570 _____ () C:\Users\Christian\Desktop\get-mirror-server.htm

2014-05-11 17:26 - 2014-05-11 17:26 - 00000000 _____ () C:\Users\Christian\defogger_reenable

2014-05-11 16:39 - 2014-05-11 16:39 - 00000000 ____D () C:\ProgramData\374311380

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\ProgramData\Package Cache

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\Program Files\Adblock Plus for IE

2014-05-11 14:42 - 2014-05-11 14:43 - 00000000 ____D () C:\Users\Christian\Downloads\Bedienungsanleitungen

2014-05-11 14:25 - 2014-05-11 14:25 - 00001336 _____ () C:\Windows\IE11_main.log

2014-05-11 14:06 - 2014-05-11 14:06 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup

2014-05-10 11:20 - 2014-05-11 14:02 - 00000112 _____ () C:\Windows\setupact.log

2014-05-10 11:20 - 2014-05-10 11:20 - 00000000 _____ () C:\Windows\setuperr.log

2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-10 06:43 - 2014-05-10 06:43 - 00003548 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 08:12 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 06:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 00:08 - 00001255 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Nico Mak Computing

2014-05-10 00:08 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe

2014-05-10 00:07 - 2014-05-10 00:07 - 04892480 _____ (WinZip International LLC ) C:\Users\Jessi\Downloads\wzmp_8.exe

2014-05-09 23:41 - 2014-05-10 07:50 - 00000000 ____D () C:\Users\Jessi\AppData\Local\LightsOff

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup.exe

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup(1).exe

2014-05-09 23:24 - 2014-05-09 23:24 - 02077392 _____ (Microsoft Corporation) C:\Users\Christian\Downloads\IE11-Windows6.1.exe

2014-05-09 23:17 - 2014-05-09 23:17 - 01356664 _____ () C:\Windows\system32\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:12 - 2014-05-09 23:12 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:12 - 2014-05-09 23:12 - 00000000 ____D () C:\Users\Christian\Documents\Optimizer Pro

2014-05-09 23:08 - 2014-05-09 23:18 - 00000000 ____D () C:\Users\Christian\AppData\Local\LightsOff

2014-05-09 23:08 - 2014-05-09 23:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark 0.5.3-git

2014-05-09 23:08 - 2014-05-09 23:08 - 00000000 ____D () C:\Program Files (x86)\Lightspark 0.5.3-git

2014-05-09 23:07 - 2014-05-09 23:17 - 00000000 ____D () C:\ProgramData\LightsOff

2014-05-08 20:29 - 2014-05-08 20:29 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1(1).xpi

2014-05-08 20:28 - 2014-05-08 20:28 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1.xpi

2014-05-08 19:40 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-05-08 19:40 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Program Files\Realtek

2014-05-08 18:48 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-05-08 18:48 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-05-08 18:48 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-05-08 18:48 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-05-08 18:48 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-05-08 18:48 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-05-08 18:48 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-05-08 18:48 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-05-08 18:48 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-05-08 18:48 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-05-08 18:48 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-05-08 18:48 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-05-08 18:48 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-05-08 18:48 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-05-08 18:48 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-05-08 18:48 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-05-08 18:47 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-05-08 18:47 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-05-08 18:47 - 2012-08-23 15:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-05-08 18:47 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-05-08 18:47 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-05-08 18:47 - 2012-08-23 11:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-05-08 18:45 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-05-08 18:45 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-05-08 18:45 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2014-05-08 18:45 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2014-05-08 18:20 - 2014-05-08 18:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\DropboxMaster

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Program Files (x86)\Paragon Software

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\ImageStorage

2014-05-07 09:38 - 2014-05-07 09:38 - 00002472 _____ () C:\Users\Christian\Desktop\Paragon Recovery Media Builder™.lnk

2014-05-07 09:38 - 2014-05-07 09:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Recovery Media Builder

2014-05-07 09:36 - 2014-05-07 09:36 - 00002483 _____ () C:\Users\Public\Desktop\Paragon Festplatten Manager™ 14 Professional.lnk

2014-05-07 09:36 - 2014-05-07 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:29 - 2014-05-07 09:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_blockmounter_01_09_00.Wdf

2014-05-07 09:26 - 2014-05-07 09:26 - 00003122 _____ () C:\Windows\System32\Tasks\{92236A19-9683-4ACF-92F3-1023691EB6F5}

2014-05-07 01:59 - 2014-05-07 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\dlg

2014-05-07 01:56 - 2014-05-07 09:23 - 00000000 ____D () C:\Users\Christian\AppData\Local\Lollipop

2014-05-07 01:56 - 2014-05-07 02:57 - 00002036 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk

2014-05-07 01:56 - 2014-05-07 01:56 - 00000000 ____D () C:\Program Files\Google

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Security System 2

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\BupSystem

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Program Files (x86)\SparPilotAddon

2014-05-07 01:28 - 2014-05-07 01:28 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Downloaded Installations

2014-05-07 00:55 - 2014-05-07 00:55 - 00003232 _____ () C:\Windows\System32\Tasks\{CCAEAFB8-B227-4463-B7B4-768C5109CD9B}

2014-05-07 00:51 - 2014-05-07 00:54 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000.exe

2014-05-07 00:48 - 2014-05-07 00:48 - 00003298 _____ () C:\Windows\System32\Tasks\{CB6EC068-6806-42CB-A914-30BCF36B7A95}

2014-05-07 00:42 - 2014-05-07 00:44 - 54721832 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_RMBInstallx64_10.1.21.471_000.exe

2014-05-07 00:41 - 2014-05-07 00:45 - 175107584 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_BMBInstallSNU_10.1.21.471_000.msi

2014-05-07 00:39 - 2014-05-07 00:43 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000(1).exe

2014-05-07 00:35 - 2014-05-07 00:35 - 02113272 _____ (Nexway) C:\Users\Christian\Downloads\Download your order 21308190.exe

2014-05-06 08:08 - 2014-05-06 08:08 - 00024576 _____ (Realtek Semiconductor.) C:\Windows\SetupAfterRebootService.exe

2014-05-06 08:08 - 2014-05-06 08:08 - 00000000 ____D () C:\Users\Christian\AppData\Local\iLivid

2014-05-06 07:30 - 2013-11-26 15:49 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys

2014-05-06 07:30 - 2013-11-26 15:49 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-05-06 07:23 - 2014-05-06 07:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\NVIDIA

2014-05-06 05:56 - 2014-05-06 05:56 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-06 05:41 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-06 05:41 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-06 01:12 - 2014-05-06 01:12 - 00000000 ____D () C:\ProgramData\redistpart

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\Users\Christian\.kchmviewer

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\ProgramData\chmview

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\launcher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\explauncher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\deletepart

2014-05-06 01:06 - 2014-05-07 09:38 - 00000000 ____D () C:\Program Files\Paragon Software

2014-05-06 00:24 - 2014-05-06 00:24 - 00000000 ____D () C:\Users\Jessi\AppData\Local\ilividmoviestoolbar20

2014-05-06 00:22 - 2014-05-06 00:25 - 00001044 _____ () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk

2014-05-06 00:22 - 2014-05-06 00:25 - 00001036 _____ () C:\Users\Jessi\Desktop\iLivid.lnk

2014-05-06 00:19 - 2014-05-06 00:25 - 00000000 ____D () C:\Users\Jessi\AppData\Local\iLivid

2014-05-06 00:17 - 2014-05-06 00:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam

2014-05-06 00:17 - 2014-05-06 00:17 - 00000000 ____D () C:\Program Files (x86)\Wajam

2014-05-05 23:37 - 2014-05-11 17:42 - 00001280 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-7.job

2014-05-05 23:37 - 2014-05-11 17:37 - 00002128 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-4.job

2014-05-05 23:37 - 2014-05-11 17:37 - 00001452 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-5.job

2014-05-05 23:37 - 2014-05-11 17:37 - 00001346 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-2.job

2014-05-05 23:37 - 2014-05-11 17:37 - 00001344 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-6.job

2014-05-05 23:37 - 2014-05-11 17:37 - 00001342 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-1.job

2014-05-05 23:37 - 2014-05-05 23:37 - 00005158 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-4

2014-05-05 23:37 - 2014-05-05 23:37 - 00004482 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-5

2014-05-05 23:37 - 2014-05-05 23:37 - 00004376 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-2

2014-05-05 23:37 - 2014-05-05 23:37 - 00004374 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-6

2014-05-05 23:37 - 2014-05-05 23:37 - 00004372 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-1

2014-05-05 23:37 - 2014-05-05 23:37 - 00004308 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-7

2014-05-05 23:36 - 2014-05-11 17:37 - 00003118 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-3.job

2014-05-05 23:36 - 2014-05-10 08:12 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-9.1

2014-05-05 23:36 - 2014-05-05 23:37 - 00006148 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-3

2014-05-02 19:19 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-02 19:19 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-02 19:19 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-02 19:19 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-04-29 20:12 - 2014-04-29 20:12 - 00000000 _____ () C:\Users\Christian\daemonprocess.txt

2014-04-29 20:11 - 2014-04-29 20:15 - 00000000 ____D () C:\Users\Christian\AppData\Local\MoboGenie

2014-04-29 20:11 - 2014-04-29 20:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\fst_de_2

2014-04-29 19:57 - 2014-04-30 19:57 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP2.job

2014-04-29 19:57 - 2014-04-29 20:10 - 00000380 _____ () C:\Windows\Tasks\APSnotifierPP1.job

2014-04-29 19:57 - 2014-04-29 20:10 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP3.job

2014-04-29 19:57 - 2014-04-29 19:57 - 00002830 _____ () C:\Windows\System32\Tasks\APSnotifierPP1

2014-04-29 19:57 - 2014-04-29 19:57 - 00002828 _____ () C:\Windows\System32\Tasks\APSnotifierPP3

2014-04-29 19:57 - 2014-04-29 19:57 - 00002828 _____ () C:\Windows\System32\Tasks\APSnotifierPP2

2014-04-29 19:56 - 2014-04-29 19:57 - 00000318 _____ () C:\Users\Jessi\AppData\Roaming\aps.uninstall.scan.results

2014-04-29 19:55 - 2014-05-07 01:09 - 00000000 ____D () C:\Program Files (x86)\BlockAndSurf-soft

2014-04-29 19:54 - 2014-05-11 17:54 - 00000282 _____ () C:\Windows\Tasks\FF Watcher {D665BA04-1404-4D39-800B-3CA6B911E149}.job

2014-04-29 19:54 - 2014-05-01 15:32 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\sweet-page

2014-04-29 19:54 - 2014-05-01 15:30 - 00000000 ____D () C:\Program Files (x86)\SupTab

2014-04-29 19:54 - 2014-04-29 19:59 - 00000000 ____D () C:\ProgramData\IePluginService

2014-04-29 19:54 - 2014-04-29 19:54 - 00003250 _____ () C:\Windows\System32\Tasks\FF Watcher {D665BA04-1404-4D39-800B-3CA6B911E149}

2014-04-29 19:54 - 2014-04-29 19:54 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\SupTab

2014-04-29 19:54 - 2014-04-29 19:54 - 00000000 ____D () C:\ProgramData\WPM

2014-04-29 19:53 - 2014-04-29 14:58 - 01727816 _____ (AnyProtect.com) C:\Users\Jessi\AppData\Local\AnyProtectScannerSetup.exe

2014-04-29 19:27 - 2014-05-10 06:37 - 00000000 ____D () C:\Program Files\002

2014-04-29 19:27 - 2014-04-29 19:27 - 00000000 _____ () C:\Users\Jessi\daemonprocess.txt

2014-04-29 19:26 - 2014-04-30 19:12 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Mobogenie

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\AppData\Local\cache

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\.android

2014-04-29 19:25 - 2014-04-30 19:12 - 00000000 ____D () C:\Program Files (x86)\Mobogenie

2014-04-29 19:25 - 2014-04-29 19:25 - 00002539 _____ () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-04-29 19:18 - 2014-05-11 17:46 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Genesis

2014-04-29 19:18 - 2014-05-10 06:37 - 00000000 ____D () C:\Program Files\003

2014-04-29 19:18 - 2014-04-29 19:18 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\IminentToolbar

2014-04-29 19:17 - 2014-04-29 19:30 - 00511192 _____ (Installer) C:\Users\Jessi\Downloads\Paragon Partition Manager.exe

2014-04-25 18:13 - 2014-04-25 18:13 - 00033814 _____ () C:\Users\Christian\Downloads\Speedport_w921v_1.34.000_25.04.14_1813.bin

2014-04-24 23:10 - 2014-04-24 23:10 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.dll

2014-04-24 01:12 - 2014-05-07 09:25 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA Corporation

2014-04-24 01:11 - 2014-04-24 01:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA

2014-04-23 16:10 - 2014-04-23 16:10 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\NVIDIA

2014-04-23 15:40 - 2014-04-23 15:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\NVIDIA Corporation

2014-04-23 15:39 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2014-04-23 15:38 - 2014-05-07 09:26 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-04-23 15:38 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-04-23 15:32 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-04-23 15:32 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-04-23 15:19 - 2014-04-23 16:06 - 00007656 _____ () C:\Users\Jessi\AppData\Local\resmon.resmoncfg

2014-04-22 19:34 - 2010-06-17 12:02 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2014-04-22 19:24 - 2014-04-22 19:24 - 00002047 _____ () C:\Users\Public\Desktop\Live Update 5.lnk

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\Program Files (x86)\MSI

2014-04-22 19:24 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieUserList

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieSiteList

2014-04-22 00:13 - 2014-04-22 00:13 - 00000000 ____D () C:\Users\Christian\.android

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-04-22 00:09 - 2014-03-17 18:13 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys

2014-04-22 00:08 - 2014-04-04 01:55 - 01946904 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01922328 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01560344 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01556760 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll

2014-04-22 00:08 - 2014-03-17 18:13 - 00095032 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys

2014-04-22 00:08 - 2014-03-17 18:13 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys

2014-04-22 00:08 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll

2014-04-21 23:59 - 2010-03-03 13:33 - 03311616 _____ () C:\Users\Christian\Desktop\sp46206.iso

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieUserList

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieSiteList

2014-04-21 14:22 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-04-21 14:22 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-04-21 14:22 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-21 14:22 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-04-21 14:22 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-21 14:22 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-21 14:22 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-04-21 14:22 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-21 14:22 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-21 14:22 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-04-21 14:22 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-04-21 14:22 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-21 14:22 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-21 14:22 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-04-21 14:22 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-04-21 14:22 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-04-21 14:22 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-04-21 14:22 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-04-21 14:22 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-21 14:22 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-04-21 14:22 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-04-21 14:22 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-04-21 14:22 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-04-21 14:22 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-04-21 14:22 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-04-21 14:22 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-04-21 14:22 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-04-21 14:22 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-04-21 14:22 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-04-21 14:22 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-21 14:22 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-04-21 14:22 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-21 14:22 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-04-21 14:22 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-04-21 14:22 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-21 14:22 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-04-21 14:22 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-04-21 14:22 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-04-21 14:22 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-21 14:22 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-21 14:22 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-04-21 14:22 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-04-21 14:22 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-04-21 14:22 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-04-18 15:25 - 2014-04-18 15:25 - 00003902 _____ () C:\Users\Jessi\Downloads\qrcode (2).eps

2014-04-17 14:09 - 2014-04-24 08:18 - 00007597 _____ () C:\Users\Christian\AppData\Local\resmon.resmoncfg

2014-04-17 08:55 - 2014-04-17 08:55 - 00020108 _____ () C:\Users\Jessi\Downloads\qrcode (1).eps

2014-04-16 14:20 - 2014-04-16 14:21 - 00000000 ____D () C:\Users\Jessi\Documents\CCleaner Sicherungen

2014-04-16 14:02 - 2014-05-07 01:58 - 00000860 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-04-16 14:02 - 2014-05-07 01:58 - 00000000 ____D () C:\Program Files\CCleaner

2014-04-16 14:02 - 2014-04-16 14:02 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-16 14:02 - 2014-04-16 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-04-16 12:35 - 2014-04-16 12:36 - 04787368 _____ (Piriform Ltd) C:\Users\Christian\Downloads\ccsetup412.exe

2014-04-16 10:31 - 2014-04-16 10:31 - 87932539 _____ () C:\Users\Jessi\Desktop\Unbenannt-1.psd

2014-04-15 14:20 - 2014-04-15 14:20 - 00335419 _____ () C:\Users\Jessi\Downloads\minicard_template_us.psd

2014-04-15 01:09 - 2014-04-15 01:09 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\chc

2014-04-15 00:30 - 2014-04-29 19:19 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Systweak

2014-04-14 19:43 - 2011-07-18 13:59 - 05936808 _____ (Adobe Systems Incorporated) C:\Users\Christian\Desktop\Standard MultiPlugin.8BF

2014-04-14 19:27 - 2014-04-14 19:27 - 04419120 _____ (Systweak Inc ) C:\Users\Christian\Downloads\rcpsetup_r.exe

2014-04-14 19:02 - 2014-05-09 23:33 - 00001672 _____ () C:\Windows\system32\ASOROSet.bin

2014-04-14 19:02 - 2014-05-09 23:03 - 00000000 ____D () C:\Windows\system32\config\RCCBakup

2014-04-14 19:01 - 2014-05-09 22:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-04-14 18:51 - 2014-02-26 18:45 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe

2014-04-14 18:36 - 2014-04-14 18:36 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\chc

2014-04-14 16:12 - 2014-05-11 16:34 - 01158923 _____ () C:\Windows\WindowsUpdate.log

2014-04-14 16:03 - 2014-04-14 16:03 - 03704336 _____ (ASCOMP Software GmbH ) C:\Users\Christian\Downloads\csuiteVV.exe

2014-04-11 10:42 - 2014-04-11 10:43 - 00020108 _____ () C:\Users\Jessi\Downloads\qrcode.eps

2014-04-11 09:42 - 2014-04-11 09:42 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\ControlCenter4
 

==================== One Month Modified Files and Folders =======
 

2014-05-11 17:54 - 2014-05-11 17:47 - 00040739 _____ () C:\Users\Christian\Downloads\FRST.txt

2014-05-11 17:54 - 2014-04-29 19:54 - 00000282 _____ () C:\Windows\Tasks\FF Watcher {D665BA04-1404-4D39-800B-3CA6B911E149}.job

2014-05-11 17:49 - 2013-08-27 19:18 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{60E385A9-8176-4701-99EB-10008026103C}

2014-05-11 17:48 - 2009-11-26 20:30 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-11 17:47 - 2014-05-11 17:47 - 00000000 ____D () C:\FRST

2014-05-11 17:47 - 2014-05-11 17:46 - 02066432 _____ (Farbar) C:\Users\Christian\Downloads\FRST64.exe

2014-05-11 17:46 - 2014-04-29 19:18 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Genesis

2014-05-11 17:42 - 2014-05-05 23:37 - 00001280 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-7.job

2014-05-11 17:38 - 2014-05-11 17:38 - 00017570 _____ () C:\Users\Christian\Desktop\get-mirror-server.htm

2014-05-11 17:37 - 2014-05-05 23:37 - 00002128 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-4.job

2014-05-11 17:37 - 2014-05-05 23:37 - 00001452 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-5.job

2014-05-11 17:37 - 2014-05-05 23:37 - 00001346 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-2.job

2014-05-11 17:37 - 2014-05-05 23:37 - 00001344 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-6.job

2014-05-11 17:37 - 2014-05-05 23:37 - 00001342 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-1.job

2014-05-11 17:37 - 2014-05-05 23:36 - 00003118 _____ () C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-3.job

2014-05-11 17:28 - 2007-11-07 15:48 - 00000000 ____D () C:\Users\Christian\Downloads\Systemoptimierung

2014-05-11 17:26 - 2014-05-11 17:26 - 00000000 _____ () C:\Users\Christian\defogger_reenable

2014-05-11 17:26 - 2009-11-03 22:10 - 00000000 ____D () C:\Users\Christian

2014-05-11 17:13 - 2012-08-27 00:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-11 16:40 - 2011-10-22 07:02 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Systweak

2014-05-11 16:39 - 2014-05-11 16:39 - 00000000 ____D () C:\ProgramData\374311380

2014-05-11 16:34 - 2014-04-14 16:12 - 01158923 _____ () C:\Windows\WindowsUpdate.log

2014-05-11 16:31 - 2009-11-05 23:30 - 00000000 ____D () C:\Users\Christian\AppData\Local\CrashDumps

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\ProgramData\Package Cache

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\Program Files\Adblock Plus for IE

2014-05-11 14:43 - 2014-05-11 14:42 - 00000000 ____D () C:\Users\Christian\Downloads\Bedienungsanleitungen

2014-05-11 14:25 - 2014-05-11 14:25 - 00001336 _____ () C:\Windows\IE11_main.log

2014-05-11 14:13 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-11 14:13 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-11 14:07 - 2012-03-05 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Dropbox

2014-05-11 14:06 - 2014-05-11 14:06 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup

2014-05-11 14:04 - 2012-09-07 23:09 - 00000000 ____D () C:\ProgramData\twonkyserver

2014-05-11 14:03 - 2013-07-13 10:03 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240.job

2014-05-11 14:03 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-11 14:02 - 2014-05-10 11:20 - 00000112 _____ () C:\Windows\setupact.log

2014-05-11 14:02 - 2009-09-18 21:39 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-05-10 11:29 - 2009-11-08 16:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\CrashDumps

2014-05-10 11:24 - 2012-01-24 11:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Dropbox

2014-05-10 11:20 - 2014-05-10 11:20 - 00000000 _____ () C:\Windows\setuperr.log

2014-05-10 08:28 - 2012-01-24 12:01 - 00000000 ___RD () C:\Users\Jessi\Dropbox

2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-10 08:12 - 2014-05-10 00:08 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector

2014-05-10 08:12 - 2014-05-05 23:36 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-9.1

2014-05-10 07:50 - 2014-05-09 23:41 - 00000000 ____D () C:\Users\Jessi\AppData\Local\LightsOff

2014-05-10 06:59 - 2013-08-09 08:17 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E4580F7C-853D-40E3-B912-7FF04D2BCC42}

2014-05-10 06:43 - 2014-05-10 06:43 - 00003548 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector

2014-05-10 06:37 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector

2014-05-10 06:37 - 2014-04-29 19:27 - 00000000 ____D () C:\Program Files\002

2014-05-10 06:37 - 2014-04-29 19:18 - 00000000 ____D () C:\Program Files\003

2014-05-10 00:08 - 2014-05-10 00:08 - 00001255 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Nico Mak Computing

2014-05-10 00:07 - 2014-05-10 00:07 - 04892480 _____ (WinZip International LLC ) C:\Users\Jessi\Downloads\wzmp_8.exe

2014-05-09 23:33 - 2014-04-14 19:02 - 00001672 _____ () C:\Windows\system32\ASOROSet.bin

2014-05-09 23:33 - 2009-07-14 04:34 - 92536832 _____ () C:\Windows\system32\config\software.bak

2014-05-09 23:33 - 2009-07-14 04:34 - 18087936 _____ () C:\Windows\system32\config\system.bak

2014-05-09 23:33 - 2009-07-14 04:34 - 00024576 _____ () C:\Windows\system32\config\security.bak

2014-05-09 23:27 - 2009-07-14 04:34 - 00090112 _____ () C:\Windows\system32\config\sam.bak

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup.exe

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup(1).exe

2014-05-09 23:24 - 2014-05-09 23:24 - 02077392 _____ (Microsoft Corporation) C:\Users\Christian\Downloads\IE11-Windows6.1.exe

2014-05-09 23:18 - 2014-05-09 23:08 - 00000000 ____D () C:\Users\Christian\AppData\Local\LightsOff

2014-05-09 23:17 - 2014-05-09 23:17 - 01356664 _____ () C:\Windows\system32\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:17 - 2014-05-09 23:07 - 00000000 ____D () C:\ProgramData\LightsOff

2014-05-09 23:12 - 2014-05-09 23:12 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:12 - 2014-05-09 23:12 - 00000000 ____D () C:\Users\Christian\Documents\Optimizer Pro

2014-05-09 23:09 - 2009-11-09 00:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Move Networks

2014-05-09 23:08 - 2014-05-09 23:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark 0.5.3-git

2014-05-09 23:08 - 2014-05-09 23:08 - 00000000 ____D () C:\Program Files (x86)\Lightspark 0.5.3-git

2014-05-09 23:03 - 2014-04-14 19:02 - 00000000 ____D () C:\Windows\system32\config\RCCBakup

2014-05-09 22:48 - 2014-04-14 19:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-09 22:48 - 2012-05-27 10:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-09 12:35 - 2009-11-05 23:10 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-05-08 23:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-05-08 20:43 - 2013-10-16 16:07 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240

2014-05-08 20:43 - 2009-11-26 20:30 - 00004112 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-05-08 20:29 - 2014-05-08 20:29 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1(1).xpi

2014-05-08 20:28 - 2014-05-08 20:28 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1.xpi

2014-05-08 19:18 - 2011-11-10 16:43 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Akamai

2014-05-08 19:15 - 2009-11-07 02:47 - 00000000 ____D () C:\Program Files (x86)\Preispiraten6

2014-05-08 18:54 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-05-08 18:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Program Files\Realtek

2014-05-08 18:20 - 2014-05-08 18:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\DropboxMaster

2014-05-08 18:20 - 2012-03-05 02:00 - 00001035 _____ () C:\Users\Christian\Desktop\Dropbox.lnk

2014-05-08 18:20 - 2012-03-05 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-08 18:20 - 2009-11-03 22:20 - 00000000 ___RD () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-07 14:12 - 2012-03-05 02:00 - 00000000 ___RD () C:\Users\Christian\Dropbox

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Program Files (x86)\Paragon Software

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\ImageStorage

2014-05-07 09:38 - 2014-05-07 09:38 - 00002472 _____ () C:\Users\Christian\Desktop\Paragon Recovery Media Builder™.lnk

2014-05-07 09:38 - 2014-05-07 09:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Recovery Media Builder

2014-05-07 09:38 - 2014-05-06 01:06 - 00000000 ____D () C:\Program Files\Paragon Software

2014-05-07 09:36 - 2014-05-07 09:36 - 00002483 _____ () C:\Users\Public\Desktop\Paragon Festplatten Manager™ 14 Professional.lnk

2014-05-07 09:36 - 2014-05-07 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:29 - 2014-05-07 09:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_blockmounter_01_09_00.Wdf

2014-05-07 09:26 - 2014-05-07 09:26 - 00003122 _____ () C:\Windows\System32\Tasks\{92236A19-9683-4ACF-92F3-1023691EB6F5}

2014-05-07 09:26 - 2014-04-23 15:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-05-07 09:26 - 2011-04-30 11:21 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-05-07 09:26 - 2011-04-30 11:20 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-05-07 09:26 - 2009-09-18 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-05-07 09:25 - 2014-04-24 01:12 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA Corporation

2014-05-07 09:23 - 2014-05-07 01:56 - 00000000 ____D () C:\Users\Christian\AppData\Local\Lollipop

2014-05-07 09:22 - 2009-09-18 21:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools

2014-05-07 02:57 - 2014-05-07 01:56 - 00002036 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk

2014-05-07 02:10 - 2005-04-06 20:00 - 00000000 ____D () C:\Users\Christian\Documents\Sicherungsdateien

2014-05-07 02:00 - 2009-11-26 20:30 - 00000000 ____D () C:\Users\Christian\AppData\Local\Google

2014-05-07 01:59 - 2014-05-07 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\dlg

2014-05-07 01:58 - 2014-04-16 14:02 - 00000860 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-05-07 01:58 - 2014-04-16 14:02 - 00000000 ____D () C:\Program Files\CCleaner

2014-05-07 01:58 - 2011-02-16 20:52 - 00000000 ____D () C:\ProgramData\Google

2014-05-07 01:56 - 2014-05-07 01:56 - 00000000 ____D () C:\Program Files\Google

2014-05-07 01:56 - 2007-06-22 22:59 - 00000000 ____D () C:\Program Files (x86)\Google

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Security System 2

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\BupSystem

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Program Files (x86)\SparPilotAddon

2014-05-07 01:28 - 2014-05-07 01:28 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Downloaded Installations

2014-05-07 01:09 - 2014-04-29 19:55 - 00000000 ____D () C:\Program Files (x86)\BlockAndSurf-soft

2014-05-07 00:55 - 2014-05-07 00:55 - 00003232 _____ () C:\Windows\System32\Tasks\{CCAEAFB8-B227-4463-B7B4-768C5109CD9B}

2014-05-07 00:54 - 2014-05-07 00:51 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000.exe

2014-05-07 00:48 - 2014-05-07 00:48 - 00003298 _____ () C:\Windows\System32\Tasks\{CB6EC068-6806-42CB-A914-30BCF36B7A95}

2014-05-07 00:45 - 2014-05-07 00:41 - 175107584 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_BMBInstallSNU_10.1.21.471_000.msi

2014-05-07 00:45 - 2010-06-18 17:47 - 00000000 ____D () C:\Users\Christian\AppData\Local\Downloaded Installations

2014-05-07 00:44 - 2014-05-07 00:42 - 54721832 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_RMBInstallx64_10.1.21.471_000.exe

2014-05-07 00:43 - 2014-05-07 00:39 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000(1).exe

2014-05-07 00:35 - 2014-05-07 00:35 - 02113272 _____ (Nexway) C:\Users\Christian\Downloads\Download your order 21308190.exe

2014-05-06 08:08 - 2014-05-06 08:08 - 00024576 _____ (Realtek Semiconductor.) C:\Windows\SetupAfterRebootService.exe

2014-05-06 08:08 - 2014-05-06 08:08 - 00000000 ____D () C:\Users\Christian\AppData\Local\iLivid

2014-05-06 07:30 - 2009-09-18 21:38 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-05-06 07:30 - 2009-09-18 21:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-05-06 07:23 - 2014-05-06 07:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\NVIDIA

2014-05-06 05:56 - 2014-05-06 05:56 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-06 05:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\spool

2014-05-06 01:12 - 2014-05-06 01:12 - 00000000 ____D () C:\ProgramData\redistpart

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\Users\Christian\.kchmviewer

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\ProgramData\chmview

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\launcher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\explauncher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\deletepart

2014-05-06 00:25 - 2014-05-06 00:22 - 00001044 _____ () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk

2014-05-06 00:25 - 2014-05-06 00:22 - 00001036 _____ () C:\Users\Jessi\Desktop\iLivid.lnk

2014-05-06 00:25 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Jessi\AppData\Local\iLivid

2014-05-06 00:24 - 2014-05-06 00:24 - 00000000 ____D () C:\Users\Jessi\AppData\Local\ilividmoviestoolbar20

2014-05-06 00:17 - 2014-05-06 00:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam

2014-05-06 00:17 - 2014-05-06 00:17 - 00000000 ____D () C:\Program Files (x86)\Wajam

2014-05-06 00:05 - 2009-11-03 23:13 - 00000000 ____D () C:\Users\Jessi

2014-05-05 23:37 - 2014-05-05 23:37 - 00005158 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-4

2014-05-05 23:37 - 2014-05-05 23:37 - 00004482 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-5

2014-05-05 23:37 - 2014-05-05 23:37 - 00004376 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-2

2014-05-05 23:37 - 2014-05-05 23:37 - 00004374 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-6

2014-05-05 23:37 - 2014-05-05 23:37 - 00004372 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-1

2014-05-05 23:37 - 2014-05-05 23:37 - 00004308 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-7

2014-05-05 23:37 - 2014-05-05 23:36 - 00006148 _____ () C:\Windows\System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-3

2014-05-05 23:34 - 2012-02-27 19:23 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Conduit

2014-05-05 20:12 - 2009-09-19 07:25 - 00712618 _____ () C:\Windows\system32\perfh007.dat

2014-05-05 20:12 - 2009-09-19 07:25 - 00155654 _____ () C:\Windows\system32\perfc007.dat

2014-05-05 20:12 - 2009-07-14 07:13 - 01656700 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-02 17:16 - 2013-06-01 11:35 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64

2014-05-01 15:33 - 2012-04-28 00:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hager

2014-05-01 15:32 - 2014-04-29 19:54 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\sweet-page

2014-05-01 15:30 - 2014-04-29 19:54 - 00000000 ____D () C:\Program Files (x86)\SupTab

2014-04-30 19:57 - 2014-04-29 19:57 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP2.job

2014-04-30 19:12 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Mobogenie

2014-04-30 19:12 - 2014-04-29 19:25 - 00000000 ____D () C:\Program Files (x86)\Mobogenie

2014-04-29 20:15 - 2014-04-29 20:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\MoboGenie

2014-04-29 20:12 - 2014-04-29 20:12 - 00000000 _____ () C:\Users\Christian\daemonprocess.txt

2014-04-29 20:11 - 2014-04-29 20:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\fst_de_2

2014-04-29 20:10 - 2014-04-29 19:57 - 00000380 _____ () C:\Windows\Tasks\APSnotifierPP1.job

2014-04-29 20:10 - 2014-04-29 19:57 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP3.job

2014-04-29 19:59 - 2014-04-29 19:54 - 00000000 ____D () C:\ProgramData\IePluginService

2014-04-29 19:57 - 2014-04-29 19:57 - 00002830 _____ () C:\Windows\System32\Tasks\APSnotifierPP1

2014-04-29 19:57 - 2014-04-29 19:57 - 00002828 _____ () C:\Windows\System32\Tasks\APSnotifierPP3

2014-04-29 19:57 - 2014-04-29 19:57 - 00002828 _____ () C:\Windows\System32\Tasks\APSnotifierPP2

2014-04-29 19:57 - 2014-04-29 19:56 - 00000318 _____ () C:\Users\Jessi\AppData\Roaming\aps.uninstall.scan.results

2014-04-29 19:54 - 2014-04-29 19:54 - 00003250 _____ () C:\Windows\System32\Tasks\FF Watcher {D665BA04-1404-4D39-800B-3CA6B911E149}

2014-04-29 19:54 - 2014-04-29 19:54 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\SupTab

2014-04-29 19:54 - 2014-04-29 19:54 - 00000000 ____D () C:\ProgramData\WPM

2014-04-29 19:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-04-29 19:30 - 2014-04-29 19:17 - 00511192 _____ (Installer) C:\Users\Jessi\Downloads\Paragon Partition Manager.exe

2014-04-29 19:27 - 2014-04-29 19:27 - 00000000 _____ () C:\Users\Jessi\daemonprocess.txt

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\AppData\Local\cache

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\.android

2014-04-29 19:25 - 2014-04-29 19:25 - 00002539 _____ () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-04-29 19:19 - 2014-04-15 00:30 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Systweak

2014-04-29 19:18 - 2014-04-29 19:18 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\IminentToolbar

2014-04-29 16:01 - 2014-05-02 19:19 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-04-29 15:40 - 2014-05-02 19:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-04-29 14:58 - 2014-04-29 19:53 - 01727816 _____ (AnyProtect.com) C:\Users\Jessi\AppData\Local\AnyProtectScannerSetup.exe

2014-04-29 14:48 - 2014-05-02 19:19 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-04-29 14:34 - 2014-05-02 19:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-04-28 20:13 - 2013-09-24 13:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-04-28 20:13 - 2012-04-03 22:35 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-04-28 20:13 - 2011-05-15 14:31 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-04-25 18:13 - 2014-04-25 18:13 - 00033814 _____ () C:\Users\Christian\Downloads\Speedport_w921v_1.34.000_25.04.14_1813.bin

2014-04-24 23:10 - 2014-04-24 23:10 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.dll

2014-04-24 08:18 - 2014-04-17 14:09 - 00007597 _____ () C:\Users\Christian\AppData\Local\resmon.resmoncfg

2014-04-24 01:11 - 2014-04-24 01:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA

2014-04-23 16:20 - 2013-07-08 20:04 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\WTablet

2014-04-23 16:10 - 2014-04-23 16:10 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\NVIDIA

2014-04-23 16:06 - 2014-04-23 15:19 - 00007656 _____ () C:\Users\Jessi\AppData\Local\resmon.resmoncfg

2014-04-23 15:40 - 2014-04-23 15:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\NVIDIA Corporation

2014-04-23 06:27 - 2010-07-19 18:41 - 00000000 ____D () C:\ProgramData\Recovery

2014-04-22 19:34 - 2009-09-18 21:36 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-04-22 19:24 - 2014-04-22 19:24 - 00002047 _____ () C:\Users\Public\Desktop\Live Update 5.lnk

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\Program Files (x86)\MSI

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieUserList

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieSiteList

2014-04-22 00:13 - 2014-04-22 00:13 - 00000000 ____D () C:\Users\Christian\.android

2014-04-22 00:13 - 2013-07-08 23:27 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\WTablet

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-04-22 00:09 - 2011-06-19 17:47 - 00000000 ____D () C:\Program Files\Tablet

2014-04-22 00:09 - 2009-11-09 00:13 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-04-21 23:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieUserList

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieSiteList

2014-04-19 19:09 - 2009-11-03 22:11 - 00103304 _____ () C:\Users\Christian\AppData\Local\GDIPFONTCACHEV1.DAT

2014-04-19 17:11 - 2009-07-14 06:45 - 05206728 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-04-18 15:25 - 2014-04-18 15:25 - 00003902 _____ () C:\Users\Jessi\Downloads\qrcode (2).eps

2014-04-18 15:18 - 2009-11-06 09:36 - 00103304 _____ () C:\Users\Jessi\AppData\Local\GDIPFONTCACHEV1.DAT

2014-04-17 09:11 - 2010-10-13 13:53 - 00001456 _____ () C:\Users\Jessi\AppData\Local\Adobe Für Web speichern 12.0 Prefs

2014-04-17 08:55 - 2014-04-17 08:55 - 00020108 _____ () C:\Users\Jessi\Downloads\qrcode (1).eps

2014-04-16 14:21 - 2014-04-16 14:20 - 00000000 ____D () C:\Users\Jessi\Documents\CCleaner Sicherungen

2014-04-16 14:20 - 2010-09-12 17:58 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\FileZilla

2014-04-16 14:07 - 2012-07-30 08:04 - 00000000 ____D () C:\Program Files (x86)\PDFCreator

2014-04-16 14:07 - 2009-11-14 15:57 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-04-16 14:07 - 2009-11-05 20:11 - 00000000 ___DC () C:\Users\Christian\AppData\Local\MigWiz

2014-04-16 14:03 - 2009-11-09 02:13 - 00000000 __SHD () C:\Users\Christian\UserData

2014-04-16 14:02 - 2014-04-16 14:02 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-16 14:02 - 2014-04-16 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-04-16 12:36 - 2014-04-16 12:35 - 04787368 _____ (Piriform Ltd) C:\Users\Christian\Downloads\ccsetup412.exe

2014-04-16 10:31 - 2014-04-16 10:31 - 87932539 _____ () C:\Users\Jessi\Desktop\Unbenannt-1.psd

2014-04-16 04:59 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

2014-04-15 14:20 - 2014-04-15 14:20 - 00335419 _____ () C:\Users\Jessi\Downloads\minicard_template_us.psd

2014-04-15 01:09 - 2014-04-15 01:09 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\chc

2014-04-14 19:45 - 2009-11-07 02:38 - 00000000 ____D () C:\Users\Christian\AppData\Local\Adobe

2014-04-14 19:27 - 2014-04-14 19:27 - 04419120 _____ (Systweak Inc ) C:\Users\Christian\Downloads\rcpsetup_r.exe

2014-04-14 18:36 - 2014-04-14 18:36 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\chc

2014-04-14 17:27 - 2009-11-04 18:09 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-04-14 16:44 - 2010-04-26 23:08 - 00000000 ____D () C:\Program Files (x86)\FRITZ!

2014-04-14 16:31 - 2007-06-22 22:50 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-04-14 16:29 - 2009-11-03 22:37 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Adobe

2014-04-14 16:24 - 2014-03-01 18:42 - 00000000 ____D () C:\Program Files (x86)\QuickTime

2014-04-14 16:24 - 2013-03-15 08:56 - 00000000 ____D () C:\Windows\mdappis

2014-04-14 16:24 - 2010-10-03 19:28 - 00000000 ____D () C:\Program Files\Adobe

2014-04-14 16:03 - 2014-04-14 16:03 - 03704336 _____ (ASCOMP Software GmbH ) C:\Users\Christian\Downloads\csuiteVV.exe

2014-04-14 04:24 - 2014-05-06 05:41 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-04-14 04:19 - 2014-05-06 05:41 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-04-11 20:00 - 2009-11-06 22:27 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Adobe

2014-04-11 10:43 - 2014-04-11 10:42 - 00020108 _____ () C:\Users\Jessi\Downloads\qrcode.eps

2014-04-11 09:42 - 2014-04-11 09:42 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\ControlCenter4
 

Some content of TEMP:

====================

C:\Users\Christian\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyswo7w.dll

C:\Users\Christian\AppData\Local\Temp\nse3B65.exe

C:\Users\Christian\AppData\Local\Temp\nsg2D1C.exe

C:\Users\Christian\AppData\Local\Temp\nsj2BA6.exe

C:\Users\Christian\AppData\Local\Temp\nsp2955.exe

C:\Users\Christian\AppData\Local\Temp\nsp36C2.exe

C:\Users\Christian\AppData\Local\Temp\nsu3904.exe

C:\Users\Christian\AppData\Local\Temp\nsz2E27.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-09 00:25
 

==================== End Of Log ============================

--- --- ---

Schramme

13.05.2014 09:59

... die zweite Datei:

Code:



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2014

Ran by Christian at 2014-05-11 17:55:56

Running from C:\Users\Christian\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Norton 360 Online (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Norton 360 Online (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton 360 Online (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0017-0000-0000-0000000FF1CE}_SharePointDesigner_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)

Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}) (Version: 1.1 - Eyeo GmbH)

Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 13.0.0.83 - Adobe Systems Incorporated) Hidden

Adobe Color Common Settings (HKLM-x32\...\Adobe_6c8e2cb4fd241c55406016127a6ab2e) (Version: 1.0.1 - Adobe Systems Incorporated)

Adobe Color Common Settings (x32 Version: 1.0.1 - Adobe Systems Incorporated) Hidden

Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.2.2.660 - Adobe Systems Incorporated)

Adobe Community Help (x32 Version: 3.2.2 - Adobe Systems Incorporated) Hidden

Adobe ExtendScript Toolkit 2 (HKLM-x32\...\Adobe_3e054d2218e7aa282c2369d939e58ff) (Version: 2.0.2 - Adobe Systems Incorporated)

Adobe ExtendScript Toolkit 2 (x32 Version: 2.0.2 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)

Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)

Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden

Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Photoshop Lightroom (HKLM-x32\...\{EED085D5-A3FA-4FB2-BC93-48C1194E6E26}) (Version: 1.10.0000 - Adobe)

Adobe Photoshop Lightroom 3.4.1 64-bit (HKLM\...\{8BBA6F77-4A79-4E90-BD82-E24669ACF221}) (Version: 3.4.2 - Adobe)

Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)

Adobe Setup (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden

Apple Application Support (HKLM-x32\...\{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}) (Version: 3.0 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Ashampoo UnInstaller 3.12 (HKLM-x32\...\Ashampoo UnInstaller 3_is1) (Version: 3.1.2 - ashampoo GmbH & Co. KG)

Ashampoo UnInstaller 4.12 (HKLM-x32\...\Ashampoo UnInstaller 4_is1) (Version: 4.1.2 - ashampoo GmbH & Co. KG)

Ashampoo WinOptimizer 7 v.7.26 (HKLM-x32\...\Ashampoo WinOptimizer 7_is1) (Version: 7.2.6 - Ashampoo GmbH & Co. KG)

Ashampoo WinOptimizer 9 v.9.2.0 (HKLM-x32\...\Ashampoo WinOptimizer 9_is1) (Version: 9.2.0 - Ashampoo GmbH & Co. KG)

Ask Toolbar Updater (HKCU\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.1.23037 - Ask.com) <==== ATTENTION

Audials (HKLM-x32\...\{0889636D-9603-44FB-A06F-94147EE66C30}) (Version: 8.0.32910.1000 - RapidSolution Software AG)

Audials TV (HKLM-x32\...\{24EE4523-711A-4BD1-95EA-F73A8A6950D3}) (Version: 1.3.10803.300 - RapidSolution Software AG)

Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.13 - Audible, Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

BookScan&Whiteboard Suite (HKLM-x32\...\{F4933D9F-89CC-4CA9-B5B0-CF32968890C7}) (Version: 1.0 - Reallusion)

Boot Media Builder for Paragon Festplatten Manager™ 14 Professional (HKLM-x32\...\{F75021D1-0615-53CD-89B5-84EBF785DCB3}) (Version: 1.00.0000 - Paragon Software)

Brother Driver Deployment Wizard (HKLM-x32\...\{0ED38503-B69A-44B4-98BE-21BFF284A9B6}) (Version: 1.09.000 - Brother)

Brother MFL-Pro Suite MFC-J5910DW (HKLM-x32\...\{830F55B6-4398-4B72-A0D8-66397B902C0E}) (Version: 1.1.1.0 - Brother Industries, Ltd.)

BrowserTweaks.com - IE Screenshot Pro toolbar button for IE (HKLM-x32\...\IE Screenshot Pro_is1) (Version:  - )

cadvilla professional (HKLM-x32\...\{E0F331B8-49D4-40a5-9260-C1D813E82CE9}_is1) (Version: 3.0.0.2 - Trixl GmbH)

cadvilla Tutorials (HKLM-x32\...\{0C2A6831-1A0A-4FB9-BC50-48332BDF0CF9}) (Version: 1.1.0.5 - Trixl GmbH)

Canon CanoScan Toolbox 5.0 (HKLM-x32\...\CanoScan Toolbox 5.0) (Version:  - )

Canon Inkjet Printer Driver Add-On Module V2.00 (HKLM\...\CANONIJINBOXADDON200) (Version:  - )

CanoScan LiDE 600F (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4802) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)

CDDRV_Installer (Version: 4.60 - Logitech) Hidden

CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version:  - )

Cleaning Suite (HKLM-x32\...\Cleaning Suite_is1) (Version: 2.1.0.5 - ASCOMP Software GmbH)

Color Efex Pro 4 (HKLM-x32\...\Color Efex Pro 4) (Version: 4.0.0.2 - Nik Software, Inc.)

Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3101 - CyberLink Corp.)

CyberLink DVD Suite Deluxe (x32 Version: 6.0.3101 - CyberLink Corp.) Hidden

CyberLink Power2Go (x32 Version: 6.0.3108a - CyberLink Corp.) Hidden

DDX DWF Support (x32 Version: 2.7.1.0 - Open Design Alliance) Hidden

DDX Field Evaluator (x32 Version: 2.7.1.0 - Open Design Alliance) Hidden

DDXRenderer (x32 Version: 2.7.1.0 - Open Design Alliance) Hidden

DDXSheetSets (x32 Version: 2.7.1.0 - Open Design Alliance) Hidden

DDXViewX (x32 Version: 2.7.1.0 - Open Design Alliance) Hidden

DHL Versandhelfer (HKLM-x32\...\{57CC7E00-249E-4047-938F-641AAD708AB9}) (Version: 1.00.0000 - InfoMantis GmbH)

DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)

DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden

DivX-Setup (HKLM-x32\...\DivX Setup.divx.com) (Version: 2.1.2.2 - DivX, Inc. )

Dropbox (HKCU\...\Dropbox) (Version: 2.6.33 - Dropbox, Inc.)

DWGdirectX Core (x32 Version: 2.7.1.0 - Open Design Alliance) Hidden

eBay Toolbar (HKLM-x32\...\{3DB5FD00-BB93-4AF3-B925-77DAA0E4E2F4}) (Version: 2.50.0000 - )

ElcomPDF (HKLM\...\ElcomPDF) (Version:  - )

erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden

FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version:  - balesio AG)

FileZilla Client 3.5.1 (HKLM-x32\...\FileZilla Client) (Version: 3.5.1 - FileZilla Project)

FPCleaner 3.5.0.0 (HKLM-x32\...\FPCleaner_is1) (Version:  - S. C. Easton)

Free M4a to MP3 Converter 6.0 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)

Genesis (HKCU\...\genesis) (Version:  - ) <==== ATTENTION

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden

Grip points (x32 Version: 2.7.1.0 - Open Design Alliance) Hidden

Hager (HKLM-x32\...\ZPlan21) (Version:  - )

Hager prerequisites (HKLM-x32\...\{EB733D93-1923-4F2E-97D1-125AAA8DD59D}) (Version: 1.00.0000 - hager)

HDR Efex Pro (HKLM-x32\...\HDR Efex Pro) (Version: 1.2.0.3 - Nik Software, Inc.)

Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.3.12286.3436 - Hewlett-Packard)

HP Customer Experience Enhancements (HKLM-x32\...\{5B295588-59C1-4386-9F85-BB4BEDCB0D22}) (Version: 5.7.0.3036 - Hewlett-Packard)

HP MAINSTREAM KEYBOARD (HKLM-x32\...\{B40D7926-AE5F-41EA-8AC6-56C0E2F00E9D}) (Version: 1.4.3.0 - Hewlett-Packard)

HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 3.0.3123 - Hewlett-Packard)

HP MediaSmart DVD (x32 Version: 3.0.3123 - Hewlett-Packard) Hidden

HP MediaSmart Movie Themes (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 3.0.3102 - Hewlett-Packard)

HP MediaSmart Movie Themes (x32 Version: 3.0.3102 - Hewlett-Packard) Hidden

HP MediaSmart Music/Photo/Video (HKLM-x32\...\InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}) (Version: 3.0.3205 - Hewlett-Packard)

HP MediaSmart Music/Photo/Video (x32 Version: 3.0.3205 - Hewlett-Packard) Hidden

HP MediaSmart SmartMenu (HKLM\...\{26280024-DFB7-4967-90DB-7F9C6660D01E}) (Version: 3.0.28.2 - Hewlett-Packard)

HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)

HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)

HP Remote Solution (HKLM-x32\...\HP Remote Solution) (Version: 1.1.9.0 - TopSeed)

HP Remote Solution (x32 Version: 1.1.9.0 - TopSeed) Hidden

HP Setup (HKLM-x32\...\{F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}) (Version: 1.2.3220.3079 - Hewlett-Packard)

HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard)

HP Support Solutions Framework (HKLM-x32\...\{69FD2930-C361-47F6-822E-71B021526778}) (Version: 11.50.0015 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)

IhrPlatz Online Fotoservice (HKLM-x32\...\IhrPlatz Online Fotoservice_is1) (Version:  - )

iLivid (HKCU\...\iLivid) (Version: 5.0.0.4408 - Bandoo Media Inc) <==== ATTENTION

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)

IntelliAddress (HKLM-x32\...\{4967DF41-BDA1-48C7-9CD5-E97570200FAD}) (Version: 2.8 - IntelliAddress GmbH)

Iomega Encryption (HKLM\...\{99B74D51-45D6-41F0-BA5F-5D82305B0E7F}) (Version: 1.03.0002 - Iomega an EMC Company)

Iomega QuikProtect (HKLM\...\Iomega QuikProtect) (Version: 1.3.4.19745 - EMC)

Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216035FF}) (Version: 6.0.370 - Oracle)

KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden

Korean Fonts Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5670-0000-900000000003}) (Version: 9.0.0 - Adobe Systems Incorporated)

LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1901 - CyberLink Corp.)

LabelPrint (x32 Version: 2.5.1901 - CyberLink Corp.) Hidden

LenovoEMC Storage Manager (HKLM\...\LenovoEMC Storage Manager) (Version: 1.4.4.14439 - EMC)

Lights Off (HKLM-x32\...\LightsOff) (Version: 2.6.79 - Coffee and Comfort Apps, LLC) <==== ATTENTION

LightScribe System Software (HKLM-x32\...\{DD6C316A-FE75-4FBB-9D22-4C1920232B72}) (Version: 1.18.5.1 - LightScribe)

Lightspark 0.5.3-git (HKLM-x32\...\Lightspark) (Version: 0.5.3-git - Lightspark Team)

Live Update 5 (HKLM-x32\...\{E8BAA541-D161-4C9B-85BF-01F05A56BD7F}}_is1) (Version: 5.0.115 - MSI)

Logitech SetPoint (HKLM-x32\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.80 - Logitech)

Loxone Config (HKLM-x32\...\LoxPLAN_is1) (Version: 3.0 - Loxone Electronics GmbH)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft IntelliType Pro 7.0 (HKLM\...\{850C7AF6-7376-464D-A69C-E8419EC7ACA7}) (Version: 7.0.260.0 - Microsoft)

Microsoft Office 2000 SR-1 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.9327 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office SharePoint Designer 2007 (HKLM-x32\...\SharePointDesigner) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office SharePoint Designer 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0017-0000-0000-0000000FF1CE}_SharePointDesigner_{4B4DF6E2-5E40-422B-82DD-205FD7E79226}) (Version:  - Microsoft)

Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Standard 2007 (HKLM-x32\...\STANDARDR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Works (HKLM-x32\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden

Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Mietverträge (HKLM-x32\...\ST6UNST #1) (Version:  - )

Mobile Master (x32 Version: 8.5.9 - Jumping Bytes) Hidden

Mobile Master 8.5.9 (HKLM-x32\...\Mobile Master) (Version: 8.5.9 - Jumping Bytes)

MobileMe Control Panel (HKLM\...\{41BC9E31-0D39-462E-8E4C-767B21A3B1C3}) (Version: 3.1.8.0 - Apple Inc.)

Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden

MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden

MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden

MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)

Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden

Nokia Connectivity Cable Driver (HKLM-x32\...\{0906982B-A432-4C06-8F01-C01BE1143779}) (Version: 7.1.92.0 - Nokia)

Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.6.36.0 - Nokia)

Nokia Suite (x32 Version: 3.6.36.0 - Nokia) Hidden

Norton 360 (HKLM-x32\...\N360) (Version: 20.4.0.40 - Symantec Corporation)

Norton Security Scan (HKLM-x32\...\NSS) (Version: 2.7.6.13 - Symantec Corporation)

Nuance PaperPort 12 (HKLM-x32\...\{6C0A559F-8583-4B5A-8B50-20BEE15D8E64}) (Version: 12.1.0000 - Nuance Communications, Inc.)

Nuance PDF Viewer Plus (HKLM-x32\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc)

NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)

NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5936 - NVIDIA Corporation)

NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden

O&O UnErase (HKLM\...\{BD19E69F-0F87-46CD-AD8D-7A93903B01AC}) (Version: 6.0.1857 - O&O Software GmbH)

OnlineControl 1.2 (HKLM-x32\...\OnlineControl_is1) (Version: 1.2.23 - Deutsche Telekom AG T-Com)

PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 1.00.0001 - Nuance Communications, Inc.)

Paragon Festplatten Manager™ 14 Professional (HKLM\...\{1E104AF0-EA49-11DE-AC07-005056C00008}) (Version: 90.00.0003 - Paragon Software)

PC Connectivity Solution (HKLM-x32\...\{BA77F9D2-CD35-41EB-9BC9-769879DFF8A6}) (Version: 12.0.48.0 - Nokia)

PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.4.3 - Frank Heindörfer, Philip Chinery)

PDFExport (x32 Version: 2.7.1.0 - Open Design Alliance) Hidden

PEHA Handsender Configtool (HKLM-x32\...\{4F794C67-B335-4E97-BFF9-78EDE88E1A7E}_is1) (Version: 1.1.0.100 - PEHA Elektro GmbH)

Photo Dose (HKLM-x32\...\Photo Dose_is1) (Version:  - )

PHOTORECOVERY PRO 2011 R2 (HKLM-x32\...\{7E6ED4AC-5EDF-4EFC-A321-08013456CE8C}_is1) (Version: 5.0.1.2 - LC Technology International, Inc.)

PixiePack Codec Pack (HKLM-x32\...\{9C450606-ED24-4958-92BA-B8940C99D441}) (Version: 1.1.400.0 - None)

Plus-HD-9.1 (HKLM-x32\...\Plus-HD-9.1) (Version: 1.34.4.10 - Plus HD) <==== ATTENTION

Polar ProTrainer (HKLM-x32\...\{DF7DBA84-0A55-11D6-A0A6-6A7573736972}) (Version: 5.35.160 - )

Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3101 - CyberLink Corp.)

PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3101 - CyberLink Corp.)

PowerDirector (x32 Version: 7.0.3101 - CyberLink Corp.) Hidden

PowerRecover (x32 Version: 5.5.1923 - CyberLink Corp.) Hidden

Preispiraten (HKLM-x32\...\{5384EA8A-FECA-4D6E-B7B4-3D4D9D47E5DF}) (Version: 6 - metaspinner net GmbH)

Protegere (HKLM-x32\...\Protegere) (Version:  - )

PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6196 - Realtek Semiconductor Corp.)

Recovery Media Builder™ (HKLM\...\{EC1AB719-E98B-532C-95D4-381FB69F5CD2}) (Version: 1.00.0000 - Paragon Software)

RemoteComms External Disk Access (HKLM-x32\...\{04FCD5DE-1662-4F99-BDA9-C57212113EF2}) (Version: 1.25.0003 - PLX Technology)

RescuePRO Deluxe 4.5 (HKLM-x32\...\{988DD2F8-DA33-47C5-BEFF-1FA03A2CB6C9}_is1) (Version:  - LC Technology International, Inc.)

Retrospect Express HD 2.5 (HKLM-x32\...\{BCC57687-98A2-4C4C-B0F8-BC6B6F52D4E3}) (Version: 2.5.113 - EMC)

Safari (HKLM-x32\...\{FA4C2D53-205F-4245-9717-F3761154824D}) (Version: 5.34.57.2 - Apple Inc.)

ScanSoft OmniPage SE 4.0 (HKLM-x32\...\{C1E693A4-B1D5-4DCD-B68D-2087835B7184}) (Version: 15.00.0020 - Nuance Communications, Inc.)

Scansoft PDF Professional (x32 Version:  - ) Hidden

schrankplaner (HKLM-x32\...\schrankplaner3.600) (Version: 3.600 - Schrankplaner GmbH)

Secure Eraser v3.2 (HKLM-x32\...\Secure Eraser_is1) (Version:  - ASCOMP Software GmbH)

Silver Efex Pro 2 (HKLM-x32\...\Silver Efex Pro 2) (Version: 2.0.0.0 - Nik Software, Inc.)

Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)

Spyder3Pro (HKLM-x32\...\Spyder3Pro) (Version:  - )

StarMoney (x32 Version: 1.0 - StarFinanz) Hidden

StarMoney (x32 Version: 2.0 - StarFinanz) Hidden

StarMoney 6.0 S-Edition (HKLM-x32\...\{E5A5D82F-5C7B-49B0-A111-97A10FA9836D}) (Version: 6.0 - StarFinanz GmbH)

StarMoney 7.0 S-Edition (HKLM-x32\...\{01BD5283-9FB2-4FA6-B10E-DD5289B073C5}) (Version: 7.0 - Star Finanz GmbH)

Supreme Auction (HKLM-x32\...\Supreme Auction_is1) (Version:  - )

TheighaX (HKLM-x32\...\{28BD8AAC-2031-4FEE-8826-FA6595AFFBD2}) (Version: 3.3.0 - ODA)

T-Home Dialerschutz-Software (HKLM-x32\...\{E8C5BD56-F5D8-41D3-8A71-273468FE256A}) (Version:  - )

Tunebite (HKLM-x32\...\{93A3F690-CD35-4836-B2DC-FE17ABDA2492}) (Version: 7.0.29523.2300 - RapidSolution Software AG)

Tunebite (HKLM-x32\...\{A747884B-BDAC-4991-B99F-5BE2558C4178}) (Version: 6.0.31714.1100 - RapidSolution Software AG)

Turbo Lister 2 (HKLM-x32\...\InstallShield_{69640730-B830-4C24-BB5C-222DA1260548}) (Version: 2.0.0 - eBay)

Turbo Lister 2 (x32 Version: 2.0.0 - eBay) Hidden

TwonkyMedia (HKLM-x32\...\TwonkyMediaTwonkyMedia) (Version: 6.0.39.0 - PacketVideo)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0017-0000-0000-0000000FF1CE}_SharePointDesigner_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0017-0000-0000-0000000FF1CE}_SharePointDesigner_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0017-0000-0000-0000000FF1CE}_SharePointDesigner_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0017-0000-0000-0000000FF1CE}_SharePointDesigner_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_SharePointDesigner_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_STANDARDR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0017-0000-0000-0000000FF1CE}_SharePointDesigner_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_STANDARDR_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_STANDARDR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_STANDARDR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_STANDARDR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_STANDARDR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

USB 2.0 IrDA Bridge (HKLM-x32\...\{10F5D9BB-E2F2-4B18-A65D-928B73D22E6F}) (Version: 2.00.000 - )

USB-Ir Adapter (HKLM-x32\...\{76AD2AAC-14EE-4CE3-958A-BB3DF65E7F06}) (Version: 1.03.0000 - )

VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden

Versandhelfer (HKLM-x32\...\dpdhl.versandhelfer) (Version: 1.5 - Deutsche Post AG)

Versandhelfer (x32 Version: 1.5 - Deutsche Post AG) Hidden

VistaPrint Electronic Business Card (HKLM-x32\...\{253FCC55-E03D-40D4-A407-3470BE4101C0}) (Version: 1.00.0000 - VistaPrint)

Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.8-3 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.7 - Wacom Technology Corp.)

WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.5 - Wacom Technology Corp.)

Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)

WinRAR (HKLM\...\WinRAR archiver) (Version:  - )

WinZip Malware Protector (HKLM-x32\...\WinZip Malware Protector_is1) (Version: 2.1.1000.10798 - WinZip International LLC)

WISO EÜR & Kasse 2010 (HKLM-x32\...\{52D4013E-3FEC-4C08-AAA8-CC24985A04E1}) (Version: 17.10.6777 - Buhl Data Service GmbH)

WISO EÜR & Kasse 2011 (HKLM-x32\...\{7117C6B9-110A-4667-B4FD-8334ED976492}) (Version: 18.01.6946 - Buhl Data Service GmbH)

WISO EÜR & Kasse 2012 (HKLM-x32\...\{BD2DA092-F254-43D0-9683-DD09840315C4}) (Version: 19.01.7317 - Buhl Data Service GmbH)

WISO Sparbuch 2010 (HKLM-x32\...\{46B70DEB-97B3-4E38-B746-EC16905E6A8F}) (Version: 17.00.6531 - Buhl Data Service GmbH)

WISO Steuer-Sparbuch 2011 (HKLM-x32\...\{02F0B8AE-7501-4333-AFBE-6BAABFEC7637}) (Version: 18.00.6928 - Buhl Data Service GmbH)

Yontoo 1.10.02 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.10.02 - Yontoo LLC) <==== ATTENTION
 

==================== Restore Points  =========================
 

08-05-2014 03:43:23 Windows Update

08-05-2014 12:12:49 Windows Update

08-05-2014 16:38:47 Windows Update

08-05-2014 16:41:22 Windows Update

08-05-2014 16:42:31 Windows Update

08-05-2014 16:46:45 Windows Update

08-05-2014 17:27:56 Windows Update

08-05-2014 18:08:26 Windows Update

09-05-2014 01:00:11 Windows Update

09-05-2014 21:02:41 RegClean Pro Fr, Mai 09, 14  23:02

09-05-2014 21:47:36 RegClean Pro Fr, Mai 09, 14  23:47

10-05-2014 01:00:20 Windows Update

10-05-2014 04:37:05 WinZip Malware Protector

10-05-2014 06:53:14 Windows Update

10-05-2014 11:01:51 Windows Update

11-05-2014 12:41:32 Windows Update

11-05-2014 13:22:38 RegClean Pro So, Mai 11, 14  15:22

11-05-2014 14:05:15 Adblock Plus for IE
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2010-10-03 19:42 - 00000857 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1                                activate.adobe.com
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {03512E67-0C20-4A2C-8A01-D31C02591B6F} - System32\Tasks\CLMLSvc => c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [2009-08-05] (CyberLink)

Task: {056DABD8-C937-46F0-9419-803609048638} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)

Task: {0DD0088F-260A-487B-A05B-B454790D6B27} - System32\Tasks\{CC9E3A72-1707-46F2-976E-F074A7D0D35F} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {0F9F5E9D-28F5-477E-8EAC-C923C5E268B8} - System32\Tasks\HPOSIAPP64 => C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe [2009-02-27] ()

Task: {0FB14F74-C3F2-4F63-B458-3178FFA8F497} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)

Task: {1360DFF2-6760-4B1A-8102-00587A366667} - System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-2 => C:\Program Files (x86)\Plus-HD-9.1\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-2.exe <==== ATTENTION

Task: {1E391896-8D8C-465A-84EA-A6E9289BE28C} - System32\Tasks\DVDAgent => c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe [2009-07-23] (CyberLink Corp.)

Task: {20366279-C053-42EE-A9A2-839D387B3F52} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: {20606056-9FE0-4AA0-8E6A-AFB814A34CEE} - System32\Tasks\Microsoft_Hardware_Launch_rundll32_exe => Rundll32.exe url.dll,OpenURL hxxp://go.microsoft.com/fwlink/?LinkId=116866

Task: {2218A738-8D6C-4C40-8C17-25DA9B0E97FA} - System32\Tasks\{28E98DDD-8A3B-4225-9F17-94BFB466B3C1} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {2222C68D-7336-4175-8C83-352144B19E42} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-07-15] (Nico Mak Computing)

Task: {23EB5409-68FA-4115-BE28-6AD140945D4F} - System32\Tasks\{A723153C-2C77-4A5D-B560-1DB025FDB64E} => C:\Program Files (x86)\Polar\Polar ProTrainer\Polar 32.exe [2013-08-25] (Polar Electro Oy)

Task: {2E24A82F-CF97-4D72-9CA3-11EDFDD2377C} - System32\Tasks\{07581C69-E3CA-45ED-A807-FBC09A4563C5} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {2E3D2366-6BFC-4487-BA9F-42EC13D5B6AB} - System32\Tasks\{607960B0-A5CC-4F42-BF12-57F9FDB2B68F} => C:\Program Files (x86)\iTunes\iTunes.exe

Task: {32C1F53D-1AF9-44FE-A051-40C0E0A6B6DC} - System32\Tasks\{BA3C2628-4216-4BC7-954F-EAB13FCC3C63} => C:\Program Files (x86)\eBay\Turbo Lister2\Tl.exe [2010-03-25] (eBay Inc.)

Task: {3B106A2D-9B87-40F8-BFAF-98D2AD83CF53} - System32\Tasks\{C945681E-D4F5-4029-91F5-81DEB91D452A} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {4B73483C-5CD1-492C-A705-1757AB02FF9B} - System32\Tasks\Symantec\Norton Error Processor 5.1.0.29 => C:\Program Files (x86)\Norton 360\Engine\5.1.0.29\SymErr.exe

Task: {50595D7F-64B5-4B57-B0C6-FC6969C71BCB} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)

Task: {540EC9FC-7964-4910-B976-5BDC7F1AA225} - System32\Tasks\Symantec\Norton Error Analyzer 5.1.0.29 => C:\Program Files (x86)\Norton 360\Engine\5.1.0.29\SymErr.exe

Task: {58FD03F2-9452-426A-9C78-4A330DED6DDD} - System32\Tasks\{2EFD1EE2-DB72-4354-8B42-DABAB9992BA3} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {5938B8DE-F5BA-41D7-94F1-6750B6AC937A} - System32\Tasks\{BC5179C1-5086-4617-9A43-20B314DCAE17} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {59872F01-D099-429C-A093-D82D52B3E3D2} - System32\Tasks\{C33F9E6B-268E-48ED-B840-82B9978FBC98} => C:\Program Files (x86)\Polar\Polar ProTrainer\Polar 32.exe [2013-08-25] (Polar Electro Oy)

Task: {5E5D5664-3C05-4A9F-8CD8-154750061C2C} - System32\Tasks\{1A0C8EE7-FFCD-481F-A9B0-68057F6BF744} => C:\Program Files (x86)\Polar\Polar ProTrainer\Polar 32.exe [2013-08-25] (Polar Electro Oy)

Task: {64DFC68F-53D6-41AB-A565-E94F71755F1C} - System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-4 => C:\Program Files (x86)\Plus-HD-9.1\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-4.exe [2014-05-05] (Plus HD) <==== ATTENTION

Task: {6706AFB3-1C95-4CDD-9120-76B72F92D250} - System32\Tasks\FF Watcher {D665BA04-1404-4D39-800B-3CA6B911E149} => C:\Program Files\V-bates\PrefHelper.exe

Task: {874AB05B-1848-4C43-9F89-08FF268F313B} - System32\Tasks\AdobeAAMUpdater-1.0-Pesch-PC-Jessi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)

Task: {8EAE5CB7-6B5D-4DC1-ABE7-2FAA9EC375CE} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)

Task: {8EFFDFA9-3CD4-45D7-84CF-4D51B396CA08} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\IType.exe [2009-05-28] (Microsoft Corporation)

Task: {8F96C77E-A35C-4EA4-9652-40B69F7F4F0A} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP TCS\RemEngine.exe [2009-07-08] ()

Task: {95034138-C09A-4663-881C-5BAE3B38BBF4} - System32\Tasks\{2163EEDA-66A5-404A-84D1-48BDB866EA1F} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {9759CDA1-5399-4EC0-91D9-4928A40F4E67} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {9AA197FB-00CB-4A69-B197-B68B4C273338} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-28] (Adobe Systems Incorporated)

Task: {A44B10F5-D5D1-4633-995C-860048EDCE9C} - System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-3 => C:\Program Files (x86)\Plus-HD-9.1\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-3.exe [2014-05-05] (Plus HD) <==== ATTENTION

Task: {AD6FD718-EC0A-4DCE-A562-903436F47617} - System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-5 => C:\Program Files (x86)\Plus-HD-9.1\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-5.exe [2014-05-05] (Plus HD) <==== ATTENTION

Task: {AE83CE9A-A607-4CC1-88BA-0509123D1783} - System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-1 => C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-codedownloader.exe <==== ATTENTION

Task: {B16AC54A-56B6-4819-9B29-C290F1A3DF33} - System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-7 => C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-nova.exe [2014-05-05] (Plus HD) <==== ATTENTION

Task: {B47C9F85-5C80-4FBD-8688-70B1B4FD49AA} - System32\Tasks\{2E57537E-D8AB-49BC-AC4E-88A98BD53F92} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {B792A07D-7570-438B-8CB6-BE93B4CC0630} - System32\Tasks\{98D5FD3C-9330-4B78-A0B8-D068CC03E1EE} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {B868FE92-DBF1-486B-8968-527409DC8C91} - System32\Tasks\{B9E12810-DA0D-4461-B57D-D5EB157AA8B3} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {BF4F8BB4-DA6D-41DF-BD48-E1B53AF25CC3} - System32\Tasks\AdobeAAMUpdater-1.0-Pesch-PC-Christian => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)

Task: {C42CC6B1-E713-40E9-9E3C-183198134321} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-06-18] (Google Inc.)

Task: {C648BD74-0AB6-4B64-B6B0-8CE0DB4BB918} - System32\Tasks\{8B88A201-FFA7-4CC0-A816-C00BC36B8CA4} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {C78789F7-A21C-48FC-BA08-D266F48B16A4} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: {C832D283-4BCC-4CDF-9A0E-ED4AE157B463} - System32\Tasks\{104DF88A-1D51-4ADC-BE53-CD43453F4A34} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {CB8E21A9-E862-4F4F-AC60-846E9DF802EA} - System32\Tasks\Symantec\Symantec Error Processor 17.5.0.127 => C:\Program Files (x86)\Norton Internet Security\Engine\17.5.0.127\SymErr.exe

Task: {CBB86CB5-D0B9-4FDC-91E5-8C2654C8993F} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)

Task: {CBF0FFF5-56FA-4A51-99F2-CBDC1CCE8CCA} - System32\Tasks\WinZip Malware Protector => C:\Program Files (x86)\WinZip Malware Protector\AppManager.exe [2013-07-15] (Nico Mak Computing)

Task: {CC53D077-CF1F-48BE-A865-1C3E8A48BD4A} - System32\Tasks\{CD297302-CC2A-4B81-AEA4-0461F0F10A69} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {CEC9C2D0-F86E-4926-904C-E2039910B983} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)

Task: {D6A2D3A6-2373-47CF-B207-9B36818F868E} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: {EB33ABD2-800B-4E14-930E-856746E64B62} - System32\Tasks\{8A5DA2B0-DB7D-409D-A773-DC6C268E6E24} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {EBF7B59D-9B12-44AF-B727-B897268DF0B9} - System32\Tasks\Symantec\Symantec Error Analyzer 17.5.0.127 => C:\Program Files (x86)\Norton Internet Security\Engine\17.5.0.127\SymErr.exe

Task: {F8B50715-A7BD-4F10-9760-30A38BD7A257} - System32\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-06-18] (Google Inc.)

Task: {FB3913BB-0232-4EE6-BBA2-D730DDD27173} - System32\Tasks\{E22D084F-C4AA-437B-9DFD-883142FAB1F2} => C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe [2009-05-28] (Microsoft Corporation)

Task: {FD6549AA-020C-46F8-A541-EC41BC18DE2B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-06-18] (Google Inc.)

Task: {FE7A0A52-3520-4A10-921C-8898DFB8C95C} - System32\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-6 => C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-novainstaller.exe <==== ATTENTION

Task: C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-1.job => C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-codedownloader.exe

Task: C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-2.job => C:\Program Files (x86)\Plus-HD-9.1\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-2.exe

Task: C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-3.job => C:\Program Files (x86)\Plus-HD-9.1\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-3.exe

Task: C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-4.job => C:\Program Files (x86)\Plus-HD-9.1\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-4.exe

Task: C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-5.job => C:\Program Files (x86)\Plus-HD-9.1\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-5.exe

Task: C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-6.job => C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-novainstaller.exe

Task: C:\Windows\Tasks\226e6202-e6a4-48ea-b1b9-2ac765d59fe8-7.job => C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-nova.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\CreateChoiceProcessTask.job => C:\Windows\System32\browserchoice.exe

Task: C:\Windows\Tasks\FF Watcher {D665BA04-1404-4D39-800B-3CA6B911E149}.job => C:\Program Files\V-bates\PrefHelper.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Norton Security Scan for Christian.job => C:\Program Files (x86)\Norton Security Scan\Engine\2.7.6.13\Nss.exe

Task: C:\Windows\Tasks\Scheduled Update for Ask Toolbar.job => C:\Program Files (x86)\Ask.com\UpdateTask.exe

Task: C:\Windows\Tasks\SystweakAdvancedDriverUpdaterRunAtStartup.job => C:\Program Files (x86)\Advanced Driver Updater\adu.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-04-23 15:37 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2012-04-28 00:43 - 2008-07-19 16:26 - 00087040 _____ () C:\Windows\System32\custmon64.dll

2010-04-26 23:10 - 2006-02-23 12:35 - 00020480 _____ () C:\Windows\System32\FritzColorPort64.dll

2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2009-09-18 21:35 - 2009-02-27 19:13 - 00053248 _____ () C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe

2014-04-29 19:55 - 2014-04-29 19:55 - 00143872 _____ () C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe

2014-05-07 01:55 - 2014-05-07 01:55 - 01005056 _____ () C:\Users\Christian\AppData\Roaming\BupSystem\bup.exe

2010-10-19 09:31 - 2010-10-19 09:31 - 00205312 _____ () C:\Program Files\Netzmanager\NMInfraIS2\driver64\SoftplugLib.DLL

2012-09-07 17:38 - 2012-09-07 17:38 - 00458240 _____ () C:\Program Files\Iomega\Quikprotect\QpMonitor.exe

2014-04-10 20:02 - 2005-04-22 06:36 - 00143360 ____R () C:\Windows\system32\BrSNMP64.dll

2012-02-03 15:09 - 2012-02-03 15:09 - 00250696 _____ () C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe

2012-02-27 19:22 - 2012-05-14 12:20 - 00884608 _____ () C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe

2011-06-19 17:47 - 2014-04-04 01:55 - 01356568 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll

2009-07-08 14:35 - 2009-07-08 14:35 - 00610360 _____ () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

2010-07-15 23:33 - 2006-09-20 08:35 - 00020480 _____ () C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe

2010-07-15 23:33 - 2006-09-19 16:05 - 00024576 _____ () C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe

2014-04-29 19:18 - 2014-04-29 19:18 - 03317760 _____ () C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe

2014-05-10 00:08 - 2013-02-28 16:53 - 00886272 _____ () C:\Program Files (x86)\WinZip Malware Protector\System.Data.SQLite.dll

2014-05-10 00:08 - 2013-07-15 16:53 - 01717936 _____ () C:\Program Files (x86)\WinZip Malware Protector\aspsys.dll

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-04-29 19:55 - 2014-04-29 19:55 - 00133120 _____ () C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.dll

2014-05-07 01:55 - 2014-05-07 01:55 - 00374272 _____ () C:\Users\Christian\AppData\Roaming\BupSystem\sub\default.dll

2009-08-05 13:45 - 2009-08-05 13:45 - 00931112 ____N () c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMediaLibrary.dll

2011-08-28 23:19 - 2011-08-28 23:19 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll

2011-11-10 15:55 - 2009-10-06 15:36 - 00205312 _____ () C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\PATCHW32.dll

2013-06-16 17:41 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON 360\ENGINE\20.4.0.40\wincfi39.dll

2014-05-11 14:06 - 2014-05-11 14:07 - 00041984 _____ () C:\Users\Christian\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyswo7w.dll

2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Christian\AppData\Roaming\Dropbox\bin\libcef.dll

2014-04-10 20:02 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll

2014-02-14 12:33 - 2014-02-14 12:33 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\bfd5296be62268bc7a31a424f0d1ad5f\IsdiInterop.ni.dll

2010-07-19 07:45 - 2010-03-03 20:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2013-06-16 17:41 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\wincfi39.dll

2014-04-14 19:01 - 2014-05-09 22:48 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-04-28 20:13 - 2014-04-28 20:13 - 16351920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\Windows:nlsPreferences

AlternateDataStreams: C:\ProgramData\Temp:373E1720

AlternateDataStreams: C:\Users\Christian\Documents\Abwesenheit Dienstreise.eml:OECustomProperty

AlternateDataStreams: C:\Users\Christian\Documents\Abwesenheit Urlaub.eml:OECustomProperty
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== EXE Association (whitelisted) =============
 
 

==================== Disabled items from MSCONFIG ==============
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Audible Download Manager.lnk => C:\Windows\pss\Audible Download Manager.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Iomega Storage Manager.lnk => C:\Windows\pss\Iomega Storage Manager.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Twonky Tray Control.lnk => C:\Windows\pss\Twonky Tray Control.lnk.CommonStartup

MSCONFIG\startupreg: Ashampoo WinOptimizer Live-Tuner => "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTuner.exe" -TRAY

MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

MSCONFIG\startupreg: ISUSPM => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: LiveUpdate 5 => C:\Program Files (x86)\MSI\Live Update 5\BootStartLiveupdate.exe /reminder

MSCONFIG\startupreg: QuiKProtect => C:\Program Files\Iomega\Quikprotect\StartQuikProtect.exe

MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/11/2014 04:31:03 PM) (Source: Application Error) (User: ) (EventID: 1000)

Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0xdbc0

Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0

Pfad der fehlerhaften Anwendung: MobileMeServices.exe1

Pfad des fehlerhaften Moduls: MobileMeServices.exe2

Berichtskennung: MobileMeServices.exe3
 

Error: (05/11/2014 04:30:32 PM) (Source: Application Error) (User: ) (EventID: 1000)

Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0xd7b8

Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0

Pfad der fehlerhaften Anwendung: MobileMeServices.exe1

Pfad des fehlerhaften Moduls: MobileMeServices.exe2

Berichtskennung: MobileMeServices.exe3
 

Error: (05/11/2014 02:28:04 PM) (Source: Application Error) (User: ) (EventID: 1000)

Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0x2934

Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0

Pfad der fehlerhaften Anwendung: MobileMeServices.exe1

Pfad des fehlerhaften Moduls: MobileMeServices.exe2

Berichtskennung: MobileMeServices.exe3
 

Error: (05/11/2014 02:27:28 PM) (Source: Application Error) (User: ) (EventID: 1000)

Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0x27f8

Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0

Pfad der fehlerhaften Anwendung: MobileMeServices.exe1

Pfad des fehlerhaften Moduls: MobileMeServices.exe2

Berichtskennung: MobileMeServices.exe3
 

Error: (05/11/2014 02:20:33 PM) (Source: WTabletServicePro) (User: ) (EventID: 1)

Description: Prefs: Failed to get user path
 

Error: (05/11/2014 02:05:01 PM) (Source: Application Error) (User: ) (EventID: 1000)

Description: Name der fehlerhaften Anwendung: WajamInternetEnhancerService.exe, Version: 2.7.4.8, Zeitstempel: 0x53679cb7

Name des fehlerhaften Moduls: WajamInternetEnhancerService.exe, Version: 2.7.4.8, Zeitstempel: 0x53679cb7

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00005b70

ID des fehlerhaften Prozesses: 0xc40

Startzeit der fehlerhaften Anwendung: 0xWajamInternetEnhancerService.exe0

Pfad der fehlerhaften Anwendung: WajamInternetEnhancerService.exe1

Pfad des fehlerhaften Moduls: WajamInternetEnhancerService.exe2

Berichtskennung: WajamInternetEnhancerService.exe3
 

Error: (05/11/2014 02:04:49 PM) (Source: SetupARService) (User: ) (EventID: 0)

Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.

   bei SetupAfterRebootService.SetupARService.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (05/10/2014 11:28:19 AM) (Source: Application Error) (User: ) (EventID: 1000)

Description: Name der fehlerhaften Anwendung: RegCleanPro.exe, Version: 6.21.65.2881, Zeitstempel: 0x530de8cf

Name des fehlerhaften Moduls: RegCleanPro.exe, Version: 6.21.65.2881, Zeitstempel: 0x530de8cf

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0004bd0e

ID des fehlerhaften Prozesses: 0xb5c

Startzeit der fehlerhaften Anwendung: 0xRegCleanPro.exe0

Pfad der fehlerhaften Anwendung: RegCleanPro.exe1

Pfad des fehlerhaften Moduls: RegCleanPro.exe2

Berichtskennung: RegCleanPro.exe3
 

Error: (05/10/2014 11:24:34 AM) (Source: WTabletServicePro) (User: ) (EventID: 1)

Description: Prefs: Failed to get user path
 

Error: (05/10/2014 11:23:29 AM) (Source: Application Error) (User: ) (EventID: 1000)

Description: Name der fehlerhaften Anwendung: WajamInternetEnhancerService.exe, Version: 2.7.4.8, Zeitstempel: 0x53679cb7

Name des fehlerhaften Moduls: WajamInternetEnhancerService.exe, Version: 2.7.4.8, Zeitstempel: 0x53679cb7

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00005b70

ID des fehlerhaften Prozesses: 0xdc4

Startzeit der fehlerhaften Anwendung: 0xWajamInternetEnhancerService.exe0

Pfad der fehlerhaften Anwendung: WajamInternetEnhancerService.exe1

Pfad des fehlerhaften Moduls: WajamInternetEnhancerService.exe2

Berichtskennung: WajamInternetEnhancerService.exe3
 
 

System errors:

=============

Error: (05/11/2014 05:53:20 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:53:20 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:53:16 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:51:13 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:51:13 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:49:16 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:47:16 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:46:16 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:45:46 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 

Error: (05/11/2014 05:45:30 PM) (Source: Schannel) (User: NT-AUTORITÄT) (EventID: 4119)

Description: Es wurde eine schwerwiegende Warnung empfangen: 48.
 
 

Microsoft Office Sessions:

=========================

Error: (08/21/2013 08:49:11 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2729 seconds with 2640 seconds of active time.  This session ended with a crash.
 

Error: (01/12/2013 02:22:55 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 3696 seconds with 60 seconds of active time.  This session ended with a crash.
 

Error: (05/28/2012 04:10:38 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 65 seconds with 60 seconds of active time.  This session ended with a crash.
 

Error: (03/09/2012 00:04:24 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 419 seconds with 360 seconds of active time.  This session ended with a crash.
 

Error: (03/05/2012 02:04:24 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (11/18/2011 10:29:13 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 137 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (10/25/2011 02:53:52 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 2278 seconds with 240 seconds of active time.  This session ended with a crash.
 

Error: (05/05/2011 06:07:17 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (02/15/2011 01:43:24 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (02/14/2011 11:58:02 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2010-03-07 13:43:56.112

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\MosIrUsb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2010-03-07 13:43:56.104

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\MosIrUsb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2010-03-07 13:36:39.586

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\MosIrUsb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2010-03-07 13:36:39.558

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\MosIrUsb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2010-02-18 22:38:28.498

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\T-Online\Dialerschutz-Software\df64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2010-02-18 21:47:01.936

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\T-Online\Dialerschutz-Software\DFSYS.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2010-02-18 21:47:01.936

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\T-Online\Dialerschutz-Software\DFSYS.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2009-11-06 08:47:25.110

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\T-Online\Dialerschutz-Software\DFSYS.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2009-11-06 08:47:25.100

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\T-Online\Dialerschutz-Software\DFSYS.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2009-11-06 08:28:53.095

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\T-Online\Dialerschutz-Software\DFSYS.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 34%

Total physical RAM: 16375.08 MB

Available physical RAM: 10653.16 MB

Total Pagefile: 32748.35 MB

Available Pagefile: 26148.5 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: (HP) (Fixed) (Total:818.7 GB) (Free:184.85 GB) NTFS

Drive d: (FACTORY_IMAGE) (Fixed) (Total:10.28 GB) (Free:0.04 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive f: (Photoshop) (Fixed) (Total:102.43 GB) (Free:102.4 GB) NTFS

Drive g: (Virtual CD) (CDROM) (Total:0.08 GB) (Free:0 GB) CDFS

Drive h: (Iomega_Ext_Drive) (Fixed) (Total:465.08 GB) (Free:436.32 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 932 GB) (Disk ID: 1549F232)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=819 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=102 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=10 GB) - (Type=07 NTFS)

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 1.
 

==================== End Of Log ============================

Schramme

13.05.2014 10:01

und hier kommt Gmer.txt:

Code:



GMER Logfile:
 

        Code:


        
GMER 2.1.19357 - hxxp://www.gmer.net

Rootkit scan 2014-05-12 06:39:25

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD10 rev.01.0 931,51GB

Running: Gmer-19357.exe; Driver: C:\Users\CHRIST~1\AppData\Local\Temp\fwloapog.sys
 
 

---- Kernel code sections - GMER 2.1 ----
 

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 698                                                                                                                                                                                                 fffff80002fba08a 13 bytes [00, 00, 00, 00, 00, 00, F3, ...]

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 713                                                                                                                                                                                                 fffff80002fba099 28 bytes [00, 00, 00, 00, 00, 00, 00, ...]

.text     C:\Windows\System32\win32k.sys!W32pServiceTable                                                                                                                                                                                                                    fffff96000103f00 7 bytes [00, 98, F3, FF, 01, A6, F0]

.text     C:\Windows\System32\win32k.sys!W32pServiceTable + 8                                                                                                                                                                                                                fffff96000103f08 3 bytes [C0, 06, 02]
 

---- User code sections - GMER 2.1 ----
 

.text     C:\ProgramData\IePluginService\PluginService.exe[1736] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                                     00000000759b1465 2 bytes [9B, 75]

.text     C:\ProgramData\IePluginService\PluginService.exe[1736] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                                    00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe[2624] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                       00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe[2624] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                      00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Users\Christian\AppData\Roaming\BupSystem\bup.exe[2692] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                                 00000000759b1465 2 bytes [9B, 75]

.text     C:\Users\Christian\AppData\Roaming\BupSystem\bup.exe[2692] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                                00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[2876] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                              00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[2876] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                             00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[3012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                           00000000759b1465 2 bytes [9B, 75]

.text     c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[3012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                          00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe[2932] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                                                                                                                             00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe[2932] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                                                                                                                            00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe[904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                    00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe[904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                   00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe[3088] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                                  00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe[3088] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                                 00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancer.exe[3256] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                                                                                                                       00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancer.exe[3256] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                                                                                                                      00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe[4016] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                                                                                                                                        00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe[4016] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                                                                                                                                       00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtTerminateProcess                                                                                                                                                            0000000077adfc90 5 bytes JMP 00000001002a091c

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtWriteVirtualMemory                                                                                                                                                          0000000077adfdf4 5 bytes JMP 00000001002a0048

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtOpenEvent                                                                                                                                                                   0000000077adfe88 5 bytes JMP 00000001002a02ee

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtCreateThread                                                                                                                                                                0000000077adffe4 5 bytes JMP 00000001002a04b2

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory                                                                                                                                                        0000000077ae0018 5 bytes JMP 00000001002a09fe

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtResumeThread                                                                                                                                                                0000000077ae0048 5 bytes JMP 00000001002a0ae0

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtTerminateThread                                                                                                                                                             0000000077ae0064 5 bytes JMP 0000000100020050

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtCreateMutant                                                                                                                                                                0000000077ae077c 5 bytes JMP 00000001002a012a

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtCreateSymbolicLinkObject                                                                                                                                                    0000000077ae086c 5 bytes JMP 00000001002a0758

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtCreateThreadEx                                                                                                                                                              0000000077ae0884 5 bytes JMP 00000001002a0676

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtLoadDriver                                                                                                                                                                  0000000077ae0dd4 5 bytes JMP 00000001002a03d0

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtSetContextThread                                                                                                                                                            0000000077ae1900 5 bytes JMP 00000001002a0594

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtSetSystemInformation                                                                                                                                                        0000000077ae1bc4 5 bytes JMP 00000001002a083a

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\ntdll.dll!NtSuspendThread                                                                                                                                                               0000000077ae1d50 5 bytes JMP 00000001002a020c

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\syswow64\USER32.dll!RecordShutdownReason + 882                                                                                                                                                   00000000755f1492 7 bytes JMP 00000001002b04bc

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!SetServiceObjectSecurity + 206                                                                                                                                              000000007730524f 7 bytes JMP 00000001002a0f52

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfigA + 380                                                                                                                                                  00000000773053d0 7 bytes JMP 00000001002b0210

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 149                                                                                                                                                 0000000077305677 1 byte JMP 00000001002b0048

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 151                                                                                                                                                 0000000077305679 5 bytes {JMP 0xffffffff88faa9d1}

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!CreateServiceA + 542                                                                                                                                                        000000007730589a 7 bytes JMP 00000001002a0ca6

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!CreateServiceW + 382                                                                                                                                                        0000000077305a1d 7 bytes JMP 00000001002b03d8

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!QueryServiceConfigW + 370                                                                                                                                                   0000000077305c9b 7 bytes JMP 00000001002b012c

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!ControlServiceExA + 231                                                                                                                                                     0000000077305d87 7 bytes JMP 00000001002b02f4

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\SysWOW64\sechost.dll!I_ScBroadcastServiceControlMessage + 123                                                                                                                                    0000000077307240 7 bytes JMP 00000001002a0e6e

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                                     00000000759b1465 2 bytes [9B, 75]

.text     C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe[5456] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                                    00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Users\Jessi\AppData\Local\iLivid\iLivid.exe[5592] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                                       00000000759b1465 2 bytes [9B, 75]

.text     C:\Users\Jessi\AppData\Local\iLivid\iLivid.exe[5592] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                                      00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe[5652] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                                                                                                                           00000000759b1465 2 bytes [9B, 75]

.text     C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe[5652] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                                                                                                                          00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe[6116] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                                 00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe[6116] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                                00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Browny02\BrYNSvc.exe[4064] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                                          00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Browny02\BrYNSvc.exe[4064] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                                         00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTBDaemon.exe[15980] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                          00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTBDaemon.exe[15980] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                         00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter                                                                                                                                   0000000076db8791 5 bytes JMP 00000001516953fc

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Windows\syswow64\ole32.dll!OleLoadFromStream                                                                                                                                                0000000076be6143 5 bytes JMP 000000015215f68e

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Windows\syswow64\OLEAUT32.dll!SysFreeString                                                                                                                                                 0000000077503e59 5 bytes JMP 00000001516c10b7

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Windows\syswow64\OLEAUT32.dll!VariantClear                                                                                                                                                  0000000077503eae 5 bytes JMP 00000001516cb0be

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Windows\syswow64\OLEAUT32.dll!SysAllocStringByteLen                                                                                                                                         0000000077504731 5 bytes JMP 00000001516fb5dc

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Windows\syswow64\OLEAUT32.dll!VariantChangeType                                                                                                                                             0000000077505dee 5 bytes JMP 00000001516fc50f

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Program Files (x86)\Common Files\SYSTEM\MSMAPI\1031\MSMAPI32.DLL!HrDispatchNotifications@4 + 112                                                                                            0000000061af1b80 4 bytes [9E, 7F, 94, 3A]

?         C:\Windows\system32\mssprxy.dll [50136] entry point in ".rdata" section                                                                                                                                                                                            00000000723871e6

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                        00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[50136] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                       00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationProcess                                                                                                                                                 0000000077adfb08 5 bytes JMP 0000000107160594

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!CreateEventW + 19                                                                                                                                                    0000000076db181d 4 bytes JMP 000000010716020c

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!VirtualAlloc                                                                                                                                                         0000000076db1822 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!CreateDirectoryW + 257                                                                                                                                               0000000076db4322 4 bytes JMP 00000001071602ee

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!VirtualProtect                                                                                                                                                       0000000076db4327 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!LoadLibraryA + 81                                                                                                                                                    0000000076db49f0 4 bytes JMP 00000001071603d0

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!HeapCreate                                                                                                                                                           0000000076db49f5 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!VirtualFreeEx + 19                                                                                                                                                   0000000076dcd9ab 4 bytes JMP 0000000107160048

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!WriteProcessMemory                                                                                                                                                   0000000076dcd9b0 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!ExpandEnvironmentStringsA + 92                                                                                                                                       0000000076dceb65 4 bytes JMP 000000010716012a

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\kernel32.dll!SetProcessDEPPolicy                                                                                                                                                  0000000076dceb6a 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\KERNELBASE.dll!CreateRemoteThreadEx                                                                                                                                               0000000076ba3e6b 5 bytes JMP 00000001071604b2

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\ole32.dll!CoGetClassObject                                                                                                                                                        0000000076c154ad 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\ole32.dll!CoCreateInstance + 62                                                                                                                                                   0000000076c29d49 4 bytes JMP 0000000107160758

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\ole32.dll!CoCreateInstanceEx                                                                                                                                                      0000000076c29d4e 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\urlmon.dll!URLDownloadToCacheFileA + 322                                                                                                                                          0000000075b5e4df 7 bytes JMP 0000000107160d86

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                               00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[82432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                              00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe[68168] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                               00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe[68168] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                              00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationProcess                                                                                                                                                 0000000077adfb08 5 bytes JMP 0000000105ac0594

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\kernel32.dll!CreateEventW + 19                                                                                                                                                    0000000076db181d 7 bytes JMP 0000000105ac020c

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\kernel32.dll!CreateDirectoryW + 257                                                                                                                                               0000000076db4322 7 bytes JMP 0000000105ac02ee

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\kernel32.dll!LoadLibraryA + 81                                                                                                                                                    0000000076db49f0 7 bytes JMP 0000000105ac03d0

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\kernel32.dll!VirtualFreeEx + 19                                                                                                                                                   0000000076dcd9ab 7 bytes JMP 0000000105ac0048

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\kernel32.dll!ExpandEnvironmentStringsA + 92                                                                                                                                       0000000076dceb65 7 bytes JMP 0000000105ac012a

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\KERNELBASE.dll!CreateRemoteThreadEx                                                                                                                                               0000000076ba3e6b 5 bytes JMP 0000000105ac04b2

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\ole32.dll!CoCreateInstance + 62                                                                                                                                                   0000000076c29d49 7 bytes JMP 0000000105ac0758

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\urlmon.dll!URLDownloadToCacheFileA + 322                                                                                                                                          0000000075b5e4df 7 bytes JMP 0000000105ac0d86

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                               00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[72164] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                              00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationProcess                                                                                                                                                 0000000077adfb08 5 bytes JMP 0000000106510594

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\kernel32.dll!CreateEventW + 19                                                                                                                                                    0000000076db181d 7 bytes JMP 000000010651020c

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\kernel32.dll!CreateDirectoryW + 257                                                                                                                                               0000000076db4322 7 bytes JMP 00000001065102ee

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\kernel32.dll!LoadLibraryA + 81                                                                                                                                                    0000000076db49f0 7 bytes JMP 00000001065103d0

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\kernel32.dll!VirtualFreeEx + 19                                                                                                                                                   0000000076dcd9ab 7 bytes JMP 0000000106510048

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\kernel32.dll!ExpandEnvironmentStringsA + 92                                                                                                                                       0000000076dceb65 7 bytes JMP 000000010651012a

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\KERNELBASE.dll!CreateRemoteThreadEx                                                                                                                                               0000000076ba3e6b 5 bytes JMP 00000001065104b2

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\ole32.dll!CoCreateInstance + 62                                                                                                                                                   0000000076c29d49 7 bytes JMP 0000000106510758

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\urlmon.dll!URLDownloadToCacheFileW                                                                                                                                                0000000075ae71d7 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\urlmon.dll!URLDownloadToFileW                                                                                                                                                     0000000075aec316 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\urlmon.dll!URLDownloadToCacheFileA                                                                                                                                                0000000075b5e39d 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\urlmon.dll!URLDownloadToCacheFileA + 322                                                                                                                                          0000000075b5e4df 4 bytes JMP 0000000106510d86

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\urlmon.dll!URLDownloadToFileA                                                                                                                                                     0000000075b5e4e4 2 bytes {JMP 0xfffffffffffffffb}

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                               00000000759b1465 2 bytes [9B, 75]

.text     C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[68500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                              00000000759b14bb 2 bytes [9B, 75]

.text     ...                                                                                                                                                                                                                                                                * 2

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtTerminateProcess                                                                                                                                                                  0000000077adfc90 5 bytes JMP 00000001002a091c

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtWriteVirtualMemory                                                                                                                                                                0000000077adfdf4 5 bytes JMP 00000001002a0048

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtOpenEvent                                                                                                                                                                         0000000077adfe88 5 bytes JMP 00000001002a02ee

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtCreateThread                                                                                                                                                                      0000000077adffe4 5 bytes JMP 00000001002a04b2

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory                                                                                                                                                              0000000077ae0018 5 bytes JMP 00000001002a09fe

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtResumeThread                                                                                                                                                                      0000000077ae0048 5 bytes JMP 00000001002a0ae0

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtTerminateThread                                                                                                                                                                   0000000077ae0064 5 bytes JMP 0000000100020050

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtCreateMutant                                                                                                                                                                      0000000077ae077c 5 bytes JMP 00000001002a012a

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtCreateSymbolicLinkObject                                                                                                                                                          0000000077ae086c 5 bytes JMP 00000001002a0758

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtCreateThreadEx                                                                                                                                                                    0000000077ae0884 5 bytes JMP 00000001002a0676

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtLoadDriver                                                                                                                                                                        0000000077ae0dd4 5 bytes JMP 00000001002a03d0

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtSetContextThread                                                                                                                                                                  0000000077ae1900 5 bytes JMP 00000001002a0594

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtSetSystemInformation                                                                                                                                                              0000000077ae1bc4 5 bytes JMP 00000001002a083a

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\ntdll.dll!NtSuspendThread                                                                                                                                                                     0000000077ae1d50 5 bytes JMP 00000001002a020c

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!SetServiceObjectSecurity + 206                                                                                                                                                    000000007730524f 7 bytes JMP 00000001002a0f52

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfigA + 380                                                                                                                                                        00000000773053d0 7 bytes JMP 00000001002b0210

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 149                                                                                                                                                       0000000077305677 1 byte JMP 00000001002b0048

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 151                                                                                                                                                       0000000077305679 5 bytes {JMP 0xffffffff88faa9d1}

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!CreateServiceA + 542                                                                                                                                                              000000007730589a 7 bytes JMP 00000001002a0ca6

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!CreateServiceW + 382                                                                                                                                                              0000000077305a1d 7 bytes JMP 00000001002b03d8

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!QueryServiceConfigW + 370                                                                                                                                                         0000000077305c9b 7 bytes JMP 00000001002b012c

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!ControlServiceExA + 231                                                                                                                                                           0000000077305d87 7 bytes JMP 00000001002b02f4

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\SysWOW64\sechost.dll!I_ScBroadcastServiceControlMessage + 123                                                                                                                                          0000000077307240 7 bytes JMP 00000001002a0e6e

.text     C:\Users\Christian\Desktop\Gmer-19357.exe[90616] C:\Windows\syswow64\USER32.dll!RecordShutdownReason + 882                                                                                                                                                         00000000755f1492 7 bytes JMP 00000001002b04bc
 

---- Threads - GMER 2.1 ----
 

Thread    C:\Windows\sysWow64\SearchProtocolHost.exe [66756:86500]                                                                                                                                                                                                           00000000516a2ab2

Thread    C:\Windows\sysWow64\SearchProtocolHost.exe [66756:67652]                                                                                                                                                                                                           00000000516a2ab2

Thread    C:\Windows\sysWow64\SearchProtocolHost.exe [66756:91284]                                                                                                                                                                                                           00000000516a2ab2

Thread    C:\Windows\sysWow64\SearchProtocolHost.exe [66756:92032]                                                                                                                                                                                                           00000000516a2ab2

Thread    C:\Windows\sysWow64\SearchProtocolHost.exe [66756:87860]                                                                                                                                                                                                           0000000058ca801e

Thread    C:\Windows\sysWow64\SearchProtocolHost.exe [66756:88944]                                                                                                                                                                                                           0000000058ca801e

---- Processes - GMER 2.1 ----
 

Process   C:\Users\Christian\AppData\Roaming\BupSystem\bup.exe (*** suspicious ***) @ C:\Users\Christian\AppData\Roaming\BupSystem\bup.exe [2692](2014-05-06 23:55:17)                                                                                                       0000000000400000

Library   C:\Users\Christian\AppData\Roaming\BupSystem\sub\default.dll (*** suspicious ***) @ C:\Users\Christian\AppData\Roaming\BupSystem\bup.exe [2692](2014-05-06 23:55:27)                                                                                               0000000002d50000

Process   C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe (*** suspicious ***) @ C:\Users\Jessi\AppData\Local\Genesis\Genesis.exe [5456](2014-                                                                                                                              0000000000400000

Library   C:\Users\Jessi\AppData\Local\iLivid\imageformats\qico4.dll (*** suspicious ***) @ C:\Users\Jessi\AppData\Local\iLivid\iLivid.exe [5592] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2014-05-05 22:21:38)                        00000000652f0000

Library   C:\Users\Jessi\AppData\Local\iLivid\imageformats\qgif4.dll (*** suspicious ***) @ C:\Users\Jessi\AppData\Local\iLivid\iLivid.exe [5592] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2014-05-05 22:21:38)                        0000000064b30000

Library   C:\Users\Jessi\AppData\Local\iLivid\imageformats\qjpeg4.dll (*** suspicious ***) @ C:\Users\Jessi\AppData\Local\iLivid\iLivid.exe [5592] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2014-05-05 22:21:38)                       0000000061420000

Library   C:\Users\Christian\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe [5652](2014-01-03 00:45:04)                                                                                      0000000003d60000

Library   c:\users\christ~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyswo7w.dll (*** suspicious ***) @ C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe [5652](2014-05-11 12:06:57)                                         0000000004430000

Library   C:\Users\Christian\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe [5652](2013-10-18 23:55:02)                                                                                            000000005b7f0000

Library   C:\Users\Christian\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe [5652] (ICU Data DLL/The ICU Project)(2013-10-18 23:55:00)                                                              000000005dec0000

Library   C:\Users\Christian\AppData\Local\Microsoft\AddIns\MMOutlookAddIn.dll (*** suspicious ***) @ C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE [50136] (Mobile Master AddIn für Outlook 2000, 2002 (XP), 2003, 2007/Jumping Bytes)(2012-11-19 11:47:52)  0000000011000000
 

---- Disk sectors - GMER 2.1 ----
 

Disk      \Device\Harddisk0\DR0                                                                                                                                                                                                                                              unknown MBR code
 

---- EOF - GMER 2.1 ----

 
--- --- ---

schrauber

14.05.2014 08:37

Adware & Co. deinstallieren

Lade Dir bitte von hier http://deeprybka.trojaner-board.de/b...ninstaller.pngRevo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:
http://deeprybka.trojaner-board.de/b.../revo/add1.png
diesen Zusatz haben:
http://deeprybka.trojaner-board.de/b...e/revo/att.PNG
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
http://deeprybka.trojaner-board.de/b.../uninstall.PNG http://deeprybka.trojaner-board.de/b...o/moderat2.PNG
Reste löschen:
Klicke auf http://deeprybka.trojaner-board.de/b.../selectall.PNG dann auf http://deeprybka.trojaner-board.de/b...evo/delete.PNG und dann auf http://deeprybka.trojaner-board.de/b...evo/weiter.PNG.

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Schramme

14.05.2014 17:13

nachfolgend das Ergebnis von combofix:

Code:



Combofix Logfile:
 

        Code:


        
ComboFix 14-05-13.01 - Christian 14.05.2014  17:26:59.1.8 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.16375.12637 [GMT 2:00]

ausgeführt von:: c:\users\Christian\Desktop\ComboFix.exe

AV: Norton 360 Online *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}

FW: Norton 360 Online *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

SP: Norton 360 Online *Disabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}

.
  ADS - Windows: deleted 320 bytes in 1 streams. 

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\374311380

c:\programdata\374311380\BITA1D0.tmp

c:\programdata\IePluginService

c:\programdata\IePluginService\PluginService.exe

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_aaipilfmheplbcghignccoiiebekkdhe_0

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_aaipilfmheplbcghignccoiiebekkdhe_0\2

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\background.html

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\chromeCoreFilesIndex.txt

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\crossriderManifest.json

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\manifest.xml

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins.json

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\1.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\102.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\103.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\104.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\119.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\123.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\13.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\14.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\155.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\17.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\177.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\178.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\179.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\180.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\182.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\183.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\184.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\19.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\190.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\191.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\195.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\207.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\21.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\22.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\220.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\221.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\223.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\231.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\232.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\244.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\246.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\28.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\4.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\47.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\64.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\7.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\72.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\78.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\80.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\9.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\91.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\93.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\97.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\userCode\background.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\userCode\extension.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\icons\actions\1.png

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\icons\icon128.png

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\icons\icon16.png

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\icons\icon48.png

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\chrome.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\cookie.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\message.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\monitor.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\pageAction.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\pageActionBG.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\background.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\app_api.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\bg_app_api.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\consts.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\cookie_store.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\crossriderAPI.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\delegate.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\events.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\extensionDataStore.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\installer.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\logFile.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\logging.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\onBGDocumentLoad.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\popupResource\newPopup.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\popupResource\popup.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\reports.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\storageWrapper.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\updateManager.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\util.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\xhr.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\main.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\platformVersion.js

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\manifest.json

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\popup.html

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaipilfmheplbcghignccoiiebekkdhe

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaipilfmheplbcghignccoiiebekkdhe\000005.ldb

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaipilfmheplbcghignccoiiebekkdhe\000009.log

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaipilfmheplbcghignccoiiebekkdhe\CURRENT

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaipilfmheplbcghignccoiiebekkdhe\LOCK

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaipilfmheplbcghignccoiiebekkdhe\LOG

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaipilfmheplbcghignccoiiebekkdhe\LOG.old

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaipilfmheplbcghignccoiiebekkdhe\MANIFEST-000007

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aaipilfmheplbcghignccoiiebekkdhe_0.localstorage-journal

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aaipilfmheplbcghignccoiiebekkdhe_0.localstorage

c:\users\Christian\AppData\Local\Google\Chrome\User Data\Default\Preferences

c:\users\Christian\AppData\Local\lollipop

c:\users\Christian\AppData\Local\Microsoft\AddIns\MMOutlookAddIn.dll

c:\users\Jessi\AppData\Local\AnyProtectScannerSetup.exe

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_aaipilfmheplbcghignccoiiebekkdhe_0

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_aaipilfmheplbcghignccoiiebekkdhe_0\2

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\background.html

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\chromeCoreFilesIndex.txt

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\crossriderManifest.json

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\manifest.xml

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins.json

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\1.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\102.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\103.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\104.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\119.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\123.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\13.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\14.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\155.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\17.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\177.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\178.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\179.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\180.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\182.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\183.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\184.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\19.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\190.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\191.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\195.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\207.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\21.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\22.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\220.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\221.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\223.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\231.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\232.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\244.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\246.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\28.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\4.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\47.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\64.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\7.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\72.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\78.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\80.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\9.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\91.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\93.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\97.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\userCode\background.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\userCode\extension.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\icons\actions\1.png

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\icons\icon128.png

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\icons\icon16.png

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\icons\icon48.png

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\chrome.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\cookie.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\message.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\monitor.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\pageAction.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\api\pageActionBG.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\background.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\app_api.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\bg_app_api.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\consts.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\cookie_store.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\crossriderAPI.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\delegate.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\events.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\extensionDataStore.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\installer.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\logFile.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\logging.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\onBGDocumentLoad.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\popupResource\newPopup.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\popupResource\popup.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\reports.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\storageWrapper.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\updateManager.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\util.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\lib\xhr.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\main.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\js\platformVersion.js

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\manifest.json

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\popup.html

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aaipilfmheplbcghignccoiiebekkdhe_0.localstorage

c:\users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Preferences

c:\windows\IsUn0407.exe

.

.

(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Service_IePluginService

-------\Service_IePluginService

.

.

(((((((((((((((((((((((   Dateien erstellt von 2014-04-14 bis 2014-05-14  ))))))))))))))))))))))))))))))

.

.

2014-05-14 14:34 . 2014-05-14 14:34        --------        d-----w-        c:\program files (x86)\VS Revo Group

2014-05-12 05:36 . 2014-05-12 05:36        --------        d-----w-        c:\program files (x86)\7-Zip

2014-05-11 15:47 . 2014-05-11 23:09        --------        d-----w-        C:\FRST

2014-05-11 14:05 . 2014-05-11 14:05        --------        d-----w-        c:\program files\Adblock Plus for IE

2014-05-11 14:05 . 2014-05-11 14:05        --------        d-----w-        c:\programdata\Package Cache

2014-05-10 06:20 . 2014-05-10 06:20        --------        d-----w-        c:\users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-09 22:08 . 2014-05-09 22:08        --------        d-----w-        c:\users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-09 22:08 . 2014-05-11 22:08        --------        d-----w-        c:\program files (x86)\WinZip Malware Protector

2014-05-09 22:08 . 2014-05-09 22:08        --------        d-----w-        c:\programdata\Nico Mak Computing

2014-05-09 22:08 . 2013-03-15 15:10        20480        ----a-w-        c:\windows\system32\wsusnative64.exe

2014-05-09 21:41 . 2014-05-13 16:20        --------        d-----w-        c:\users\Jessi\AppData\Local\LightsOff

2014-05-09 21:17 . 2014-05-09 21:17        1356664        ----a-w-        c:\windows\system32\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 21:12 . 2014-05-09 21:12        1161080        ----a-w-        c:\windows\SysWow64\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 21:08 . 2014-05-14 15:04        --------        d-----w-        c:\users\Christian\AppData\Local\LightsOff

2014-05-09 21:08 . 2014-05-09 21:08        --------        d-----w-        c:\program files (x86)\Lightspark 0.5.3-git

2014-05-09 21:07 . 2014-05-14 15:01        --------        d-----w-        c:\programdata\LightsOff

2014-05-08 17:40 . 2014-01-09 02:22        5694464        ----a-w-        c:\windows\SysWow64\mstscax.dll

2014-05-08 17:40 . 2014-01-03 22:44        6574592        ----a-w-        c:\windows\system32\mstscax.dll

2014-05-08 16:47 . 2012-08-23 14:10        19456        ----a-w-        c:\windows\system32\drivers\rdpvideominiport.sys

2014-05-08 16:47 . 2012-08-23 13:24        15360        ----a-w-        c:\windows\system32\RdpGroupPolicyExtension.dll

2014-05-08 16:47 . 2012-08-23 14:13        243200        ----a-w-        c:\windows\system32\rdpudd.dll

2014-05-08 16:47 . 2012-08-23 11:12        192000        ----a-w-        c:\windows\SysWow64\rdpendp_winip.dll

2014-05-08 16:47 . 2012-08-23 10:51        228864        ----a-w-        c:\windows\system32\rdpendp_winip.dll

2014-05-08 16:47 . 2012-08-23 09:51        3174912        ----a-w-        c:\windows\system32\rdpcorets.dll

2014-05-08 16:45 . 2013-09-25 02:23        1030144        ----a-w-        c:\windows\system32\TSWorkspace.dll

2014-05-08 16:45 . 2013-09-25 01:57        792576        ----a-w-        c:\windows\SysWow64\TSWorkspace.dll

2014-05-08 16:45 . 2012-05-04 11:00        366592        ----a-w-        c:\windows\system32\qdvd.dll

2014-05-08 16:45 . 2012-05-04 09:59        514560        ----a-w-        c:\windows\SysWow64\qdvd.dll

2014-05-08 16:20 . 2014-05-08 16:20        --------        d-----w-        c:\users\Christian\AppData\Roaming\DropboxMaster

2014-05-08 11:21 . 2014-05-08 11:21        188272        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll

2014-05-07 07:41 . 2014-05-07 07:41        53248        ----a-r-        c:\users\Christian\AppData\Roaming\Microsoft\Installer\{F75021D1-0615-53CD-89B5-84EBF785DCB3}\NewShortcut1_F3FECDDB618046699EBFBFAD3F0D5BC9.exe

2014-05-07 07:41 . 2014-05-07 07:41        --------        d-----w-        c:\program files (x86)\Paragon Software

2014-05-07 07:41 . 2014-05-07 07:41        --------        d-----w-        C:\ImageStorage

2014-05-06 23:59 . 2014-05-06 23:59        --------        d-----w-        c:\users\Christian\AppData\Roaming\dlg

2014-05-06 23:56 . 2014-05-06 23:56        --------        d-----w-        c:\program files\Google

2014-05-06 23:55 . 2014-05-06 23:55        --------        d-----w-        c:\program files (x86)\SparPilotAddon

2014-05-06 23:55 . 2014-05-06 23:55        --------        d-----w-        c:\users\Christian\AppData\Roaming\BupSystem

2014-05-06 23:55 . 2014-05-06 23:55        --------        d-----w-        c:\users\Christian\AppData\Roaming\Security System 2

2014-05-06 23:28 . 2014-05-06 23:28        --------        d-----w-        c:\users\Jessi\AppData\Local\Downloaded Installations

2014-05-06 06:08 . 2014-05-06 06:08        24576        ----a-w-        c:\windows\SetupAfterRebootService.exe

2014-05-06 05:30 . 2013-11-26 13:49        888536        ----a-w-        c:\windows\system32\drivers\Rt64win7.sys

2014-05-06 05:30 . 2013-11-26 13:49        73800        ----a-w-        c:\windows\system32\RtNicProp64.dll

2014-05-06 05:23 . 2014-05-06 05:23        --------        d-----w-        c:\users\Christian\AppData\Roaming\NVIDIA

2014-05-06 03:56 . 2014-05-06 03:56        --------        d-s---w-        c:\windows\system32\CompatTel

2014-05-06 03:41 . 2014-04-14 02:24        465408        ----a-w-        c:\windows\system32\aepdu.dll

2014-05-06 03:41 . 2014-04-14 02:19        424448        ----a-w-        c:\windows\system32\aeinv.dll

2014-05-06 03:33 . 2014-05-06 03:33        --------        d-----w-        c:\windows\SysWow64\wbem\Logs

2014-05-05 23:12 . 2014-05-05 23:12        --------        d-----w-        c:\programdata\redistpart

2014-05-05 23:11 . 2014-05-05 23:11        --------        d-----w-        c:\users\Christian\.kchmviewer

2014-05-05 23:11 . 2014-05-05 23:11        --------        d-----w-        c:\programdata\chmview

2014-05-05 23:10 . 2014-05-05 23:10        --------        d-----w-        c:\programdata\deletepart

2014-05-05 23:10 . 2014-05-05 23:10        --------        d-----w-        c:\programdata\launcher

2014-05-05 23:10 . 2014-05-05 23:10        --------        d-----w-        c:\programdata\explauncher

2014-05-05 23:06 . 2014-05-07 07:38        --------        d-----w-        c:\program files\Paragon Software

2014-05-05 22:24 . 2014-05-05 22:24        --------        d-----w-        c:\users\Jessi\AppData\Local\ilividmoviestoolbar20

2014-05-05 22:17 . 2014-05-11 22:08        --------        d-----w-        c:\program files (x86)\Wajam

2014-05-02 17:19 . 2014-04-29 14:01        23547904        ----a-w-        c:\windows\system32\mshtml.dll

2014-05-02 17:19 . 2014-04-29 13:40        2724864        ----a-w-        c:\windows\system32\mshtml.tlb

2014-05-02 17:19 . 2014-04-29 12:34        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2014-05-02 15:16 . 2014-05-12 17:32        --------        d-----w-        c:\windows\system32\drivers\N360x64\1405000.01C

2014-04-29 18:11 . 2014-04-29 18:15        --------        d-----w-        c:\users\Christian\AppData\Local\MoboGenie

2014-04-29 18:11 . 2014-04-29 18:11        --------        d-----w-        c:\users\Christian\AppData\Local\fst_de_2

2014-04-29 17:55 . 2014-05-06 23:09        --------        d-----w-        c:\program files (x86)\BlockAndSurf-soft

2014-04-29 17:54 . 2014-04-29 17:54        --------        d-----w-        c:\users\Jessi\AppData\Roaming\SupTab

2014-04-29 17:54 . 2014-05-01 13:30        --------        d-----w-        c:\program files (x86)\SupTab

2014-04-29 17:54 . 2014-04-29 17:54        --------        d-----w-        c:\programdata\WPM

2014-04-29 17:54 . 2014-05-01 13:32        --------        d-----w-        c:\users\Jessi\AppData\Roaming\sweet-page

2014-04-29 17:27 . 2014-05-10 04:37        --------        d-----w-        c:\program files\002

2014-04-29 17:26 . 2014-04-29 17:26        --------        d-----w-        c:\users\Jessi\.android

2014-04-29 17:26 . 2014-04-29 17:26        --------        d-----w-        c:\users\Jessi\AppData\Local\cache

2014-04-29 17:26 . 2014-04-30 17:12        --------        d-----w-        c:\users\Jessi\AppData\Local\Mobogenie

2014-04-29 17:25 . 2014-04-30 17:12        --------        d-----w-        c:\program files (x86)\Mobogenie

2014-04-29 17:18 . 2014-04-29 17:18        --------        d-----w-        c:\users\Jessi\AppData\Roaming\IminentToolbar

2014-04-29 17:18 . 2014-05-10 04:37        --------        d-----w-        c:\program files\003

2014-04-24 21:10 . 2014-04-24 21:10        1161080        ----a-w-        c:\windows\SysWow64\LightsOff.CD920490367F.dll

2014-04-23 23:12 . 2014-05-07 07:25        --------        d-----w-        c:\users\Christian\AppData\Local\NVIDIA Corporation

2014-04-23 23:11 . 2014-04-23 23:11        --------        d-----w-        c:\users\Christian\AppData\Local\NVIDIA

2014-04-23 14:10 . 2014-04-23 14:10        --------        d-----w-        c:\users\Jessi\AppData\Roaming\NVIDIA

2014-04-23 13:40 . 2014-04-23 13:40        --------        d-----w-        c:\users\Jessi\AppData\Local\NVIDIA Corporation

2014-04-23 13:39 . 2010-05-26 09:41        511328        ----a-w-        c:\windows\system32\d3dx10_43.dll

2014-04-23 13:39 . 2010-05-26 09:41        470880        ----a-w-        c:\windows\SysWow64\d3dx10_43.dll

2014-04-23 13:39 . 2010-05-26 09:41        276832        ----a-w-        c:\windows\system32\d3dx11_43.dll

2014-04-23 13:39 . 2010-05-26 09:41        248672        ----a-w-        c:\windows\SysWow64\d3dx11_43.dll

2014-04-23 13:39 . 2010-05-26 09:41        1998168        ----a-w-        c:\windows\SysWow64\D3DX9_43.dll

2014-04-23 13:39 . 2010-05-26 09:41        2401112        ----a-w-        c:\windows\system32\D3DX9_43.dll

2014-04-23 13:38 . 2014-03-04 11:32        599840        ----a-w-        c:\windows\SysWow64\nvStreaming.exe

2014-04-23 13:38 . 2014-05-07 07:26        --------        d-----w-        c:\program files (x86)\NVIDIA Corporation

2014-04-22 17:34 . 2010-06-17 10:02        53248        ----a-w-        c:\windows\SysWow64\CSVer.dll

2014-04-22 17:24 . 2012-08-22 08:19        11832        ----a-w-        c:\windows\acpimof.dll

2014-04-22 17:24 . 2014-04-22 17:24        --------        d-----w-        c:\program files (x86)\MSI

2014-04-22 12:45 . 2014-04-22 12:45        --------        d-sh--w-        c:\users\Jessi\AppData\Local\EmieUserList

2014-04-22 12:45 . 2014-04-22 12:45        --------        d-sh--w-        c:\users\Jessi\AppData\Local\EmieSiteList

2014-04-21 22:13 . 2014-04-21 22:13        --------        d-----w-        c:\users\Christian\.android

2014-04-21 22:09 . 2014-04-21 22:09        --------        d-----w-        c:\program files\TabletPlugins

2014-04-21 22:09 . 2014-03-17 16:13        15160        ----a-w-        c:\windows\system32\drivers\wacomrouterfilter.sys

2014-04-21 22:08 . 2014-03-17 16:13        95032        ----a-w-        c:\windows\system32\drivers\wachidrouter.sys

2014-04-21 22:08 . 2014-03-17 16:13        14136        ----a-w-        c:\windows\system32\drivers\hidkmdf.sys

2014-04-21 22:08 . 2012-12-11 22:12        1721576        ----a-w-        c:\windows\system32\drivers\wdfcoinstaller01009.dll

2014-04-21 22:08 . 2014-04-03 23:55        1922328        ----a-w-        c:\windows\system32\Wacom_Touch_Tablet.dll

2014-04-21 22:08 . 2014-04-03 23:55        1946904        ----a-w-        c:\windows\system32\WacomMT.dll

2014-04-21 22:08 . 2014-04-03 23:55        1556760        ----a-w-        c:\windows\SysWow64\Wacom_Touch_Tablet.dll

2014-04-21 22:08 . 2014-04-03 23:55        1560344        ----a-w-        c:\windows\SysWow64\WacomMT.dll

2014-04-21 12:38 . 2014-04-21 12:38        --------        d-sh--w-        c:\users\Christian\AppData\Local\EmieUserList

2014-04-21 12:38 . 2014-04-21 12:38        --------        d-sh--w-        c:\users\Christian\AppData\Local\EmieSiteList

2014-04-16 12:21 . 2014-04-16 12:21        --------        d-----w-        c:\users\Jessi\AppData\Local\Programs

2014-04-16 12:02 . 2014-05-06 23:58        --------        d-----w-        c:\program files\CCleaner

2014-04-14 23:09 . 2014-04-14 23:09        --------        d-----w-        c:\users\Jessi\AppData\Roaming\chc

2014-04-14 22:30 . 2014-04-29 17:19        --------        d-----w-        c:\users\Jessi\AppData\Roaming\Systweak

2014-04-14 17:02 . 2014-05-09 21:33        1672        ----a-w-        c:\windows\system32\ASOROSet.bin

2014-04-14 16:51 . 2014-02-26 16:45        20312        ----a-w-        c:\windows\system32\roboot64.exe

2014-04-14 16:36 . 2014-04-14 16:36        --------        d-----w-        c:\users\Christian\AppData\Roaming\chc

2014-04-14 16:36 . 2014-04-14 16:36        --------        d-----w-        c:\users\Public\Roaming

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-04-28 18:13 . 2012-04-03 20:35        692400        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2014-04-28 18:13 . 2011-05-15 12:31        70832        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-04-10 04:59 . 2009-11-06 18:54        90655440        ----a-w-        c:\windows\system32\MRT.exe

2014-04-03 23:55 . 2010-05-25 17:29        1796888        ----a-w-        c:\windows\system32\Wintab32.dll

2014-04-03 23:55 . 2010-05-25 17:29        1929496        ----a-w-        c:\windows\system32\Wacom_Tablet.dll

2014-04-03 23:55 . 2010-05-25 17:29        1443096        ----a-w-        c:\windows\SysWow64\Wintab32.dll

2014-04-03 23:55 . 2010-05-25 17:29        1563416        ----a-w-        c:\windows\SysWow64\Wacom_Tablet.dll

2014-03-04 14:35 . 2009-09-18 19:36        18302384        ----a-w-        c:\windows\system32\nvwgf2umx.dll

2014-03-04 13:06 . 2010-08-08 21:12        6714312        ----a-w-        c:\windows\system32\nvcpl.dll

2014-03-04 13:06 . 2010-08-08 21:12        3497816        ----a-w-        c:\windows\system32\nvsvc64.dll

2014-03-04 13:05 . 2010-08-08 21:12        922968        ----a-w-        c:\windows\system32\nvvsvc.exe

2014-03-04 13:05 . 2009-06-26 15:00        64968        ----a-w-        c:\windows\system32\nvshext.dll

2014-03-04 13:05 . 2009-06-26 15:00        2558808        ----a-w-        c:\windows\system32\nvsvcr.dll

2014-03-04 13:05 . 2010-08-08 21:12        386336        ----a-w-        c:\windows\system32\nvmctray.dll

2014-03-04 09:44 . 2014-04-10 04:30        362496        ----a-w-        c:\windows\system32\wow64win.dll

2014-03-04 09:44 . 2014-04-10 04:30        243712        ----a-w-        c:\windows\system32\wow64.dll

2014-03-04 09:44 . 2014-04-10 04:30        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2014-03-04 09:44 . 2014-04-10 04:30        16384        ----a-w-        c:\windows\system32\ntvdm64.dll

2014-03-04 09:44 . 2014-04-10 04:30        1163264        ----a-w-        c:\windows\system32\kernel32.dll

2014-03-04 09:17 . 2014-04-10 04:30        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll

2014-03-04 09:17 . 2014-04-10 04:30        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2014-03-04 09:16 . 2014-04-10 04:30        25600        ----a-w-        c:\windows\SysWow64\setup16.exe

2014-03-04 09:16 . 2014-04-10 04:30        5120        ----a-w-        c:\windows\SysWow64\wow32.dll

2014-03-04 08:09 . 2014-04-10 04:30        7680        ----a-w-        c:\windows\SysWow64\instnm.exe

2014-03-04 08:09 . 2014-04-10 04:30        2048        ----a-w-        c:\windows\SysWow64\user.exe

2014-03-02 13:15 . 2013-03-15 06:55        286720        ------w-        c:\windows\Setup1.exe

2014-03-02 13:15 . 2013-03-15 06:55        74752        ----a-w-        c:\windows\ST6UNST.EXE

2014-02-14 10:12 . 2014-02-14 10:12        937224        ----a-w-        c:\windows\system32\Vim.RWBlock.dll

2014-02-14 10:12 . 2014-02-14 10:12        79112        ----a-w-        c:\windows\system32\vimbase.dll

2014-02-14 10:12 . 2014-02-14 10:12        700424        ----a-w-        c:\windows\system32\drivers\uim_im.sys

2014-02-14 10:12 . 2014-02-14 10:12        556296        ----a-w-        c:\windows\system32\drivers\UimFIO.sys

2014-02-14 10:12 . 2014-02-14 10:12        401672        ----a-w-        c:\windows\system32\drivers\UMDF\blockmounter.dll

2014-02-14 10:12 . 2014-02-14 10:12        25992        ----a-w-        c:\windows\system32\drivers\uim_devim.sys

2014-02-14 10:12 . 2014-02-14 10:12        1720072        ----a-w-        c:\windows\system32\vimsdk.dll

2014-02-14 10:12 . 2014-02-14 10:12        102664        ----a-w-        c:\windows\system32\drivers\UimBus.sys

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UIWatcher"="c:\program files (x86)\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe" [2009-02-23 3508568]

"Akamai NetSession Interface"="c:\users\Jessi\AppData\Local\Akamai\netsession_win.exe" [2014-04-17 4672920]

"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]

"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-11-02 59240]

"IndexSearch"="c:\program files (x86)\Nuance\PaperPort\IndexSearch.exe" [2010-03-08 46368]

"PaperPort PTD"="c:\program files (x86)\Nuance\PaperPort\pptd40nt.exe" [2010-03-08 29984]

"PPort12reminder"="c:\program files (x86)\Nuance\PaperPort\Ereg\Ereg.exe" [2010-02-09 328992]

"ControlCenter4"="c:\program files (x86)\ControlCenter4\BrCcBoot.exe" [2012-09-06 143360]

"BrStsMon00"="c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2012-06-06 3076096]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]

"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]

.

c:\users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 32668056]

Netzmanager.lnk - c:\program files\Netzmanager\netzmanager.exe /Autostart [2014-1-24 14140416]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 1 (0x1)

"NoFileAssociate"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="c:\windows\system32\userinit.exe"

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           wsusnative64\0autocheck autochk *

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 LightsOff;Lights Off;c:\programdata\LightsOff\up\2.6.80\LightsOffService.exe;c:\programdata\LightsOff\up\2.6.80\LightsOffService.exe [x]

R2 SetupARService;SetupARService;c:\program files (x86)\Realtek\Audio\SetupAfterRebootService.exe;c:\program files (x86)\Realtek\Audio\SetupAfterRebootService.exe [x]

R2 xmkysecqun64;xmkysecqun64;c:\program files\003\xmkysecqun64.exe run options=01110010030000000000000000000000 sourceguid=19A6D51C-2D35-44DB-B412-0B01BF8D2D62;c:\program files\003\xmkysecqun64.exe run options=01110010030000000000000000000000 sourceguid=19A6D51C-2D35-44DB-B412-0B01BF8D2D62 [x]

R2 yewimmxqbs64;yewimmxqbs64;c:\program files\002\yewimmxqbs64.exe run options=01100010020000000000000000000000 sourceguid=3A5B3E40-3C96-4F4E-A48D-C161A8B0E1A6;c:\program files\002\yewimmxqbs64.exe run options=01100010020000000000000000000000 sourceguid=3A5B3E40-3C96-4F4E-A48D-C161A8B0E1A6 [x]

R3 BioNTDrv;BioNTDrv;c:\program files\Paragon Software\Festplatten Manager 14 Professional\program\BioNTDrv.SYS;c:\program files\Paragon Software\Festplatten Manager 14 Professional\program\BioNTDrv.SYS [x]

R3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]

R3 DFSYS;T-Home Dialerschutz Hooking Treiber;c:\program files (x86)\T-Online\Dialerschutz-Software\DFSYS64.SYS;c:\program files (x86)\T-Online\Dialerschutz-Software\DFSYS64.SYS [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 MosIrUsb;MosIrUsb.sys;c:\windows\system32\DRIVERS\MosIrUsb.sys;c:\windows\SYSNATIVE\DRIVERS\MosIrUsb.sys [x]

R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsucx64.sys [x]

R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]

R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x]

R3 OXSDIDRV_x64;Oxford Semi eSATA Filter (x64);c:\windows\system32\DRIVERS\OXSDIDRV_x64.sys;c:\windows\SYSNATIVE\DRIVERS\OXSDIDRV_x64.sys [x]

R3 OXUDIDRV;OXUDIDRV;c:\windows\system32\Drivers\OXUDIDRV_X64.sys;c:\windows\SYSNATIVE\Drivers\OXUDIDRV_X64.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 RRNetCap;RRNetCap Service;c:\windows\system32\DRIVERS\rrnetcap.sys;c:\windows\SYSNATIVE\DRIVERS\rrnetcap.sys [x]

R3 Spyder3;Datacolor Spyder3;c:\windows\system32\DRIVERS\Spyder3.sys;c:\windows\SYSNATIVE\DRIVERS\Spyder3.sys [x]

R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]

R3 TelekomNM6;Telekom Netzmanager Packet Filter Driver;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]

R4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]

S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1405000.01C\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1405000.01C\SYMDS64.SYS [x]

S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1405000.01C\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1405000.01C\SYMEFA64.SYS [x]

S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20140409.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20140409.001\BHDrvx64.sys [x]

S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360x64\1405000.01C\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1405000.01C\ccSetx64.sys [x]

S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20140513.002\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20140513.002\IDSvia64.sys [x]

S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1405000.01C\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1405000.01C\Ironx64.SYS [x]

S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1405000.01C\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1405000.01C\SYMNETS.SYS [x]

S1 Uim_DEVIM;UIM Direct Device Image Plugin;c:\windows\system32\DRIVERS\uim_devim.sys;c:\windows\SYSNATIVE\DRIVERS\uim_devim.sys [x]

S2 {55662437-DA8C-40c0-AADA-2C816A897A49};Power Control [2009/09/18 21:43];c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl;c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl [x]

S2 BlockAndSurf;BlockAndSurf;c:\program files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe;c:\program files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe [x]

S2 bupService;BUP Service;c:\users\Christian\AppData\Roaming\BupSystem\bup.exe;c:\users\Christian\AppData\Roaming\BupSystem\bup.exe [x]

S2 DfSdkS;Defragmentation-Service;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 7\DfsdkS.exe;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 7\DfsdkS.exe [x]

S2 DFSVC;T-Home Dialerschutz Dienst;c:\program files (x86)\T-Online\Dialerschutz-Software\DFInject64.exe;c:\program files (x86)\T-Online\Dialerschutz-Software\DFInject64.exe [x]

S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [x]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 LiveTunerPM;Ashampoo LiveTuner ProcessMonitor Driver;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor64.sys;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor64.sys [x]

S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\20.5.0.28\ccSvcHst.exe;c:\program files (x86)\Norton 360\Engine\20.5.0.28\ccSvcHst.exe [x]

S2 Netzmanager Service;Netzmanager Infrastruktur Informationssystem Dienst;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe ;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe  [x]

S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe;c:\windows\SysWOW64\nlssrv32.exe [x]

S2 PCloudd;PCloudd;c:\program files (x86)\LenovoEMC Storage Manager\pCloudd.exe;c:\program files (x86)\LenovoEMC Storage Manager\pCloudd.exe [x]

S2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe;c:\program files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [x]

S2 QPCopyEngine;QPCopyEngine;c:\program files\Iomega\Quikprotect\QpMonitor.exe;c:\program files\Iomega\Quikprotect\QpMonitor.exe [x]

S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [x]

S2 StarMoney 7.0 OnlineUpdate;StarMoney 7.0 OnlineUpdate;c:\program files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S2 TwonkyMedia;TwonkyMedia;c:\program files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe;c:\program files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe [x]

S2 TwonkyWebDav;TwonkyWebDav;c:\program files (x86)\TwonkyMedia\twonkywebdav.exe;c:\program files (x86)\TwonkyMedia\twonkywebdav.exe [x]

S2 Wajam Internet Enhancer Service;Wajam Internet Enhancer Service;c:\program files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe;c:\program files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe [x]

S2 WO_LiveService;Ashampoo LiveTuner Service;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe [x]

S2 WTabletServicePro;Wacom Professional Service;c:\program files\Tablet\Wacom\WTabletServicePro.exe;c:\program files\Tablet\Wacom\WTabletServicePro.exe [x]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]

S3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]

S3 QsFsFltr;QsFsFltr;c:\windows\system32\DRIVERS\QsFsFltr.sys;c:\windows\SYSNATIVE\DRIVERS\QsFsFltr.sys [x]

S3 RRNetCapMP;RRNetCapMP;c:\windows\system32\DRIVERS\rrnetcap.sys;c:\windows\SYSNATIVE\DRIVERS\rrnetcap.sys [x]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

S3 SipIMNDI;T-Home Dialerschutz VoIP Service;c:\windows\system32\DRIVERS\SipIMNDI64.sys;c:\windows\SYSNATIVE\DRIVERS\SipIMNDI64.sys [x]

S3 vNICdrv;Iomega Virtual Miniport;c:\windows\system32\DRIVERS\vNICdrv.sys;c:\windows\SYSNATIVE\DRIVERS\vNICdrv.sys [x]

S3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]

S3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{9C450606-ED24-4958-92BA-B8940C99D441}]

2009-03-04 15:32        8192        ----a-w-        c:\program files (x86)\PixiePack Codec Pack\InstallerHelper.exe

.

Inhalt des "geplante Tasks" Ordners

.

2014-05-14 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 18:13]

.

2014-05-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-06-18 21:27]

.

2014-05-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-06-18 21:27]

.

2013-06-01 c:\windows\Tasks\Norton Security Scan for Christian.job

- c:\program files (x86)\Norton Security Scan\Engine\2.7.6.13\Nss.exe [2013-06-01 09:30]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2009-05-28 2342800]

"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-07-08 610360]

"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2006-09-20 20480]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = https://signin.ebay.de/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=77&ru=http%3A%2F%2Fmy.ebay.de%2Fws%2FeBayISAPI.dll%3FMyEbayBeta%26MyEbay%3D%26ssPageName%3DADME%253AB%253ATB4%253ADE%253A1%26guest%3D1&pageType=3984

uLocal Page = c:\windows\system32\blank.htm

uDefault_Search_URL = hxxp://www.google.com/ie

mDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1398794045&from=cor&uid=WDCXWD10EADS-65M2B0_WD-WCAV5143632136321&q={searchTerms}

mDefault_Page_URL = about:blank

mStart Page = about:blank

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1398794045&from=cor&uid=WDCXWD10EADS-65M2B0_WD-WCAV5143632136321&q={searchTerms}

uInternet Settings,ProxyOverride = <-loopback>

uInternet Settings,ProxyServer = http=127.0.0.1:49180;https=127.0.0.1:49180

uSearchAssistant = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaHp8Pk5fza5XP2LqNOcSHMtbl0vt3xjxqLjH3FfFGrtpLTUpBCystXadzXKHt04nu6I8nTDMYUtupArFZLr6Li5GO991xfN_MkMkDCIqxEGXil0t_3zWGyzR-iuv0Yg9jgMQzdG2sjq5s9_oUqfsK5h8RpgrI9NU-YGexbCP8T3mdzcMY_OVX2AojyAYXNE&q={searchTerms}

IE: &Preispiratensuche nach markiertem Text - c:\\Program Files (x86)\\Preispiraten6\\preispiraten.html

IE: FRITZ!Box Dial

IE: FRITZ!Box Dial\Contexts - 16 (0x10)

IE: FRITZ!Box Dial\Flags

IE: Make Advanced Screenshot - c:\progra~2\BrowserTweaks\IEScreenshotPro\iescreenshotpro.dll/202

IE: Mit FRITZ!Box Anrufen

IE: Mit FRITZ!Box Anrufen\Contexts - 16 (0x10)

IE: Mit FRITZ!Box Anrufen\Flags

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000

IE: Suche - c:\program files (x86)\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html

IE: {{9E029088-432F-4EBF-9537-0171A4C37870} - hxxp://webtip.ch/cgi-bin/amz_track/tracker_de.pl?loc=main&site=home

IE: {{E79005A3-0F92-434B-9F7B-51131FC7168F} - hxxp://www.preispiraten.de/e/tr_ebdestart.pl?hxxp://www.ebay.de

IE: {{75D74791-9D1E-4baf-B4BD-C91976BEBEF6} - {4418313E-BF07-4614-830C-6FF1F3E707CD} - c:\progra~2\BrowserTweaks\IEScreenshotPro\iescreenshotpro.dll

Trusted Zone: t-online.de\email

TCP: DhcpNameServer = 192.168.2.1

DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} - hxxp://www.photodose.de/ips-opdata/operator/69189345/objects/jordan.cab

DPF: {72376E32-8AF2-473F-BE32-E5D0F39C865D} - hxxp://de.cyberlink.com/prog/win7/js/UpdateAdvisor.cab

DPF: {B1953AD6-C50E-11D3-B020-00A0C9251384} - hxxp://www.o2c.de/download/O2CPlayer.CAB

FF - ProfilePath - c:\users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\

FF - prefs.js: browser.search.selectedEngine - Web Search

FF - prefs.js: browser.startup.homepage - hxxp://www.ytong-bausatzhaus.de/

FF - prefs.js: keyword.URL - hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaHp8Pk5fza5XP2LqNOcSHMtbl0vt3xjxqLjH3FfFGrtpLTUpBCystXadzXKHt04nu6I8nTDMYUtupArFZLr6Li5GO991xfN_MkMkDCIqxEGXil0t_3zWGyzR-iuv0Yg9jgMQzdG2sjq5s9_oUqfsK5h8RpgrI9NU-YGexbCP8T3mdzcMY_OVX2AojyAYXNE&q=

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

URLSearchHooks-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)

BHO-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)

Toolbar-10 - (no file)

Wow6432Node-HKCU-Run-GoogleChromeAutoLaunch_F51A6D0EEE39DF9BB15E2444D1233C4B - c:\program files (x86)\Google\Chrome\Application\chrome.exe

BHO-{11111111-1111-1111-1111-110511291116} - c:\program files (x86)\Plus-HD-9.1\Plus-HD-9.1-bho64.dll

Toolbar-10 - (no file)

WebBrowser-{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - (no file)

WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)

WebBrowser-{5786D022-540E-4699-B350-B4BE0AE94B79} - (no file)

WebBrowser-{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - (no file)

AddRemove-Intel® Integrated Performance Primitives 1.1 - c:\windows\system32\UninstIPP.isu

AddRemove-ZPlan21 - c:\windows\IsUn0407.exe

.

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\N360]

"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\20.5.0.28\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\20.5.0.28\diMaster.dll\" /prefetch:1"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\{55662437-DA8C-40c0-AADA-2C816A897A49}]

"ImagePath"="\??\c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.13"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\windows\SysWOW64\brsvc01a.exe

c:\windows\SysWOW64\brss01a.exe

c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe

c:\program files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe

c:\program files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe

c:\program files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe

c:\program files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancer.exe

c:\program files\Tablet\Wacom\WacomHost.exe

c:\program files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe

c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

c:\program files (x86)\NORTON 360\ENGINE\20.5.0.28\cltLMH.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2014-05-14  17:57:33 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2014-05-14 15:57

.

Vor Suchlauf: 33 Verzeichnis(se), 202.217.811.968 Bytes frei

Nach Suchlauf: 47 Verzeichnis(se), 201.557.028.864 Bytes frei

.

- - End Of File - - F0B3250007A5C393BA3FA1235E663C28

 
--- --- ---

Leider war die Ausführung von combofix notwendig, da der "Ask Toolbar Updater" und "Yontoo 1.10.02" mit dem Revo Uninstaller nicht zu finden waren. Insgesamt kann ich nach dem Neustart schon sagen, dass sich das wilde (und ungewollte) Öffnen neuer Seiten merklich entspannt hat!!! Wenn dieses Ergebnis von Dauer sein sollte, dann ist das so schon super!

Bis hierher schon eimal vielen herzlichen Dank!

schrauber

15.05.2014 10:15

das wird noch besser ;)

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Schramme

15.05.2014 19:39

Hallo Schrauber,

ich bin überaus begeistert! Es ist spitze!!!

Mbam:

Code:



Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Update, 15.05.2014 18:02:40, SYSTEM, *****-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1, 

Update, 15.05.2014 18:02:47, SYSTEM, *****-PC, Manual, Malware Database, 2014.3.4.9, 2014.5.15.7, 
 

(end)

Adware:

Code:



# AdwCleaner v3.208 - Bericht erstellt am 15/05/2014 um 19:48:28

# Aktualisiert 11/05/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Christian - *****-PC

# Gestartet von : C:\Users\Christian\Desktop\adwcleaner_3.208.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : bupService

[#] Dienst Gelöscht : Wajam Internet Enhancer Service

[#] Dienst Gelöscht : xmkysecqun64

[#] Dienst Gelöscht : yewimmxqbs64
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\Ask

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\ProgramData\Tarma Installer

Ordner Gelöscht : C:\ProgramData\Uniblue

Ordner Gelöscht : C:\ProgramData\WPM

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark 0.5.3-git

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam

Ordner Gelöscht : C:\Program Files (x86)\BlockAndSurf-soft

Ordner Gelöscht : C:\Program Files (x86)\Lightspark 0.5.3-git

Ordner Gelöscht : C:\Program Files (x86)\Mobogenie

Ordner Gelöscht : C:\Program Files (x86)\SparPilotAddon

Ordner Gelöscht : C:\Program Files (x86)\SupTab

Ordner Gelöscht : C:\Program Files (x86)\Wajam

Ordner Gelöscht : C:\Program Files (x86)\Yontoo

Ordner Gelöscht : C:\Program Files\002

Ordner Gelöscht : C:\Program Files\003

Ordner Gelöscht : C:\Users\Christian\AppData\Local\Mobogenie

Ordner Gelöscht : C:\Users\Christian\AppData\Local\PackageAware

Ordner Gelöscht : C:\Users\Christian\AppData\Local\fst_de_2

Ordner Gelöscht : C:\Users\Christian\AppData\LocalLow\PriceGong

Ordner Gelöscht : C:\Users\Christian\AppData\LocalLow\searchresultstb

Ordner Gelöscht : C:\Users\Christian\AppData\LocalLow\Softonic

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\Babylon

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\BupSystem

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\OpenCandy

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\pdfforge

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\Uniblue

Ordner Gelöscht : C:\Users\Christian\Documents\Optimizer Pro

Ordner Gelöscht : C:\Users\Jessi\AppData\Local\Conduit

Ordner Gelöscht : C:\Users\Jessi\AppData\Local\Mobogenie

Ordner Gelöscht : C:\Users\Jessi\AppData\LocalLow\AskToolbar

Ordner Gelöscht : C:\Users\Jessi\AppData\LocalLow\Conduit

Ordner Gelöscht : C:\Users\Jessi\AppData\LocalLow\ConduitEngine

Ordner Gelöscht : C:\Users\Jessi\AppData\LocalLow\IminentToolbar

Ordner Gelöscht : C:\Users\Jessi\AppData\LocalLow\pdfforge

Ordner Gelöscht : C:\Users\Jessi\AppData\LocalLow\PriceGong

Ordner Gelöscht : C:\Users\Jessi\AppData\LocalLow\Search Settings

Ordner Gelöscht : C:\Users\Jessi\AppData\LocalLow\searchresultstb

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\IminentToolbar

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\pdfforge

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\SupTab

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\sweet-page

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Uniblue

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Conduit

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\ConduitCommon

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\ConduitCommon

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\Smartbar

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\ValueApps

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\CT2481020

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\Extensions\quick_start@gmail.com

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\sparpilot@sparpilot.com

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\Extensions\SupraSavings@jetpack

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\Extensions\{5786d022-540e-4699-b350-b4be0ae94b79}

Ordner Gelöscht : C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com

Ordner Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\Extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com

Ordner Gelöscht : C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpmlnedpdikbgdghljdepnljfpkhccn

Ordner Gelöscht : C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljmibnagodajacnnbifpamhggcohblip

Datei Gelöscht : C:\Windows\System32\roboot64.exe

Datei Gelöscht : C:\Users\Christian\daemonprocess.txt

Datei Gelöscht : C:\Users\Jessi\daemonprocess.txt

Datei Gelöscht : C:\Users\Jessi\AppData\Roaming\aps.uninstall.scan.results

Datei Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\searchplugins\conduit-search.xml

Datei Gelöscht : C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\searchplugins\Web Search.xml

Datei Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\searchplugins\Web Search.xml

Datei Gelöscht : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\user.js

Datei Gelöscht : C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dnpmlnedpdikbgdghljdepnljfpkhccn_0

Datei Gelöscht : C:\Users\Jessi\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dnpmlnedpdikbgdghljdepnljfpkhccn_0

Datei Gelöscht : C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dnpmlnedpdikbgdghljdepnljfpkhccn_0.localstorage

Datei Gelöscht : C:\Users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dnpmlnedpdikbgdghljdepnljfpkhccn_0.localstorage

Datei Gelöscht : C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage

Datei Gelöscht : C:\Users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage

Datei Gelöscht : C:\Users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jbpcjmidkkgldeplajgnbpjkfpmpeepb_0.localstorage
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YontooIEClient.Api

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\chatzum_nt_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\chatzum_nt_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_internet-explorer-9 (1)_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_internet-explorer-9 (1)_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_internet-explorer-9_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_internet-explorer-9_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511291116}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511291116}

Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}

Schlüssel Gelöscht : HKCU\Software\ChatZum Toolbar

Schlüssel Gelöscht : HKCU\Software\lollipop

Schlüssel Gelöscht : HKCU\Software\Microsoft\Babylon

Schlüssel Gelöscht : HKCU\Software\powerpack

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKCU\Software\Tutorials

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\blockAndSurf

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DynConIE

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\MyAshampoo\toolbar

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\Software\Babylon

Schlüssel Gelöscht : HKLM\Software\ChatZum Toolbar

Schlüssel Gelöscht : HKLM\Software\Iminent

Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions

Schlüssel Gelöscht : HKLM\Software\Lightspark Team

Schlüssel Gelöscht : HKLM\Software\Pirrit

Schlüssel Gelöscht : HKLM\Software\SupTab

Schlüssel Gelöscht : HKLM\Software\supWPM

Schlüssel Gelöscht : HKLM\Software\sweet-pageSoftware

Schlüssel Gelöscht : HKLM\Software\systweak

Schlüssel Gelöscht : HKLM\Software\Tutorials

Schlüssel Gelöscht : HKLM\Software\Uniblue

Schlüssel Gelöscht : HKLM\Software\Wajam

Schlüssel Gelöscht : HKLM\Software\Wpm

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lightspark

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\installedbrowserextensions

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\LevelQualityWatcher

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Pirrit

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\RrSavings

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\suprasavings

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17041
 

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
 

-\\ Mozilla Firefox v29.0.1 (de)
 

[ Datei : C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\prefs.js ]
 

Zeile gelöscht : user_pref("CT2475029..clientLogIsEnabled", false);

Zeile gelöscht : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

Zeile gelöscht : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");

Zeile gelöscht : user_pref("CT2475029.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

Zeile gelöscht : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Zeile gelöscht : user_pref("CT2475029.BrowserCompStateIsOpen_129681723868939970", true);

Zeile gelöscht : user_pref("CT2475029.CT2481020.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481024.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481025.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481029.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481031.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481032.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481033.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481034.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481035.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CT2481037.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CTID", "ct2481020");

Zeile gelöscht : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Sun Sep 23 2012 11:26:46 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=ToolbarsInfo&ctids=CT2475029");

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481020", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481024", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481025", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481029", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481031", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481032", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481033", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481034", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481035", 2);

Zeile gelöscht : user_pref("CT2475029.CommunitiesStatus.CT2481037", 2);

Zeile gelöscht : user_pref("CT2475029.CommunityChanged", true);

Zeile gelöscht : user_pref("CT2475029.CurrentServerDate", "23-9-2012");

Zeile gelöscht : user_pref("CT2475029.DialogsAlignMode", "LTR");

Zeile gelöscht : user_pref("CT2475029.DialogsGetterLastCheckTime", "Sat Sep 22 2012 01:03:12 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.DownloadDomainsCheckInterval", "168");

Zeile gelöscht : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Sun Sep 16 2012 12:31:14 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983");

Zeile gelöscht : user_pref("CT2475029.DownloadReferralCookieData", "");

Zeile gelöscht : user_pref("CT2475029.EMailNotifierPollDate", "Sat Feb 05 2011 02:21:35 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076849370150342", "Sat Feb 05 2011 02:06:34 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076850042182211", "Sat Feb 05 2011 02:06:34 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076850596400916", "Sat Feb 05 2011 02:06:34 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076850791868756", "Sat Feb 05 2011 02:06:34 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076852434375419", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076853083906444", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076854010937606", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076855068438037", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076855340312884", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076855597344292", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076855883906472", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076856408281730", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076856723281882", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076856982969262", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076857229219583", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076857478587121", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129076858014837073", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029379", "Fri Jan 28 2011 23:40:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029381", "Fri Jan 28 2011 23:40:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029382", "Fri Jan 28 2011 23:40:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129133095459686870", "Fri Jan 28 2011 23:40:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129133095459686871", "Fri Jan 28 2011 23:40:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687146", "Fri Jan 28 2011 23:40:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687147", "Fri Jan 28 2011 23:40:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687148", "Fri Jan 28 2011 23:40:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214602500", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214602506", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214602512", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214602518", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214602524", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214602530", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603404", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603410", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603416", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603422", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603428", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603434", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603440", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603446", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603452", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603458", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603464", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603470", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603476", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603482", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603488", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214603494", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758786", "Fri Jan 28 2011 23:00:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758792", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758798", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758804", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758810", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758816", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758822", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758828", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758834", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758840", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758846", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758852", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758858", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758864", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758870", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758876", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758882", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758888", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758894", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758900", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758906", "Fri Jan 28 2011 23:00:17 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758912", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758918", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758924", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758930", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758936", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758942", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758948", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758954", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedPollDate129255180214758960", "Fri Jan 28 2011 23:00:18 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.FeedTTL129076850596400916", 5);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129076850791868756", 5);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129076855068438037", 2);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129076856723281882", 5);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129076857229219583", 30);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029379", 40);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029381", 40);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029382", 40);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129133095459686870", 40);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129133095459686871", 40);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687146", 40);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687147", 40);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687148", 40);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214602500", 15);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214602512", 2);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214602518", 5);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214602524", 5);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214603416", 15);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214603428", 60);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214603482", 60);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214603488", 15);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214603494", 2);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758786", 5);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758798", 30);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758804", 30);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758810", 2);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758828", 15);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758840", 15);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758846", 15);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758852", 15);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758870", 1440);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758900", 10);

Zeile gelöscht : user_pref("CT2475029.FeedTTL129255180214758918", 5);

Zeile gelöscht : user_pref("CT2475029.FirstServerDate", "29-1-2011");

Zeile gelöscht : user_pref("CT2475029.FirstTime", true);

Zeile gelöscht : user_pref("CT2475029.FirstTimeFF3", true);

Zeile gelöscht : user_pref("CT2475029.FixPageNotFoundErrors", true);

Zeile gelöscht : user_pref("CT2475029.GroupingLastCheckTime", "Sun Sep 23 2012 10:46:05 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.GroupingLastErrorCode", "");

Zeile gelöscht : user_pref("CT2475029.GroupingLastResponse", false);

Zeile gelöscht : user_pref("CT2475029.GroupingLastServerUpdateTime", "129732818060000000");

Zeile gelöscht : user_pref("CT2475029.GroupingServerCheckInterval", 1440);

Zeile gelöscht : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Zeile gelöscht : user_pref("CT2475029.HasUserGlobalKeys", true);

Zeile gelöscht : user_pref("CT2475029.Initialize", true);

Zeile gelöscht : user_pref("CT2475029.InitializeCommonPrefs", true);

Zeile gelöscht : user_pref("CT2475029.InstallationAndCookieDataSentCount", 3);

Zeile gelöscht : user_pref("CT2475029.InstallationId", "MyAshampoo.exe");

Zeile gelöscht : user_pref("CT2475029.InstallationType", "ConduitIntegration");

Zeile gelöscht : user_pref("CT2475029.InstalledDate", "Fri Jan 28 2011 23:00:13 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.IsAlertDBUpdated", true);

Zeile gelöscht : user_pref("CT2475029.IsGrouping", true);

Zeile gelöscht : user_pref("CT2475029.IsMulticommunity", true);

Zeile gelöscht : user_pref("CT2475029.IsOpenThankYouPage", false);

Zeile gelöscht : user_pref("CT2475029.IsOpenUninstallPage", true);

Zeile gelöscht : user_pref("CT2475029.LanguagePackLastCheckTime", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440);

Zeile gelöscht : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");

Zeile gelöscht : user_pref("CT2475029.LastLogin_3.10.0.1", "Mon Mar 05 2012 00:28:15 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.LastLogin_3.12.2.3", "Thu Jun 14 2012 11:00:46 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.LastLogin_3.13.0.6", "Mon Jul 16 2012 07:43:34 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.LastLogin_3.14.1.0", "Fri Aug 24 2012 09:52:48 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.LastLogin_3.15.1.0", "Sun Sep 23 2012 10:46:08 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.LastLogin_3.2.5.2", "Fri Dec 02 2011 21:30:09 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.LastLogin_3.8.1.0", "Sun Jan 08 2012 11:54:04 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.LastLogin_3.9.0.3", "Tue Feb 21 2012 23:12:54 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.LatestVersion", "3.14.1.0");

Zeile gelöscht : user_pref("CT2475029.Locale", "en");

Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipHeight", "83");

Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipWidth", "295");

Zeile gelöscht : user_pref("CT2475029.MyStuffEnabledAtInstallation", true);

Zeile gelöscht : user_pref("CT2475029.RadioIsPodcast", false);

Zeile gelöscht : user_pref("CT2475029.RadioMediaID", "9962");

Zeile gelöscht : user_pref("CT2475029.RadioMediaType", "Media Player");

Zeile gelöscht : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT24750299962");

Zeile gelöscht : user_pref("CT2475029.RadioStationName", "California%20Rock");

Zeile gelöscht : user_pref("CT2475029.RadioStationURL", "hxxp://feedlive.net/california.asx");

Zeile gelöscht : user_pref("CT2475029.SHRINK_TOOLBAR", 1);

Zeile gelöscht : user_pref("CT2475029.SearchFromAddressBarIsInit", true);

Zeile gelöscht : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&q=");

Zeile gelöscht : user_pref("CT2475029.SearchInNewTabEnabled", true);

Zeile gelöscht : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440);

Zeile gelöscht : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Fri Jan 28 2011 23:00:13 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");

Zeile gelöscht : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");

Zeile gelöscht : user_pref("CT2475029.SearchProtectorToolbarDisabled", true);

Zeile gelöscht : user_pref("CT2475029.ServiceMapLastCheckTime", "Sun Sep 23 2012 11:26:46 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.SettingsLastCheckTime", "Fri Jan 28 2011 23:00:13 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.SettingsLastUpdate", "1295971309");

Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsInterval", 504);

Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Fri Jan 28 2011 23:00:13 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1246790578");

Zeile gelöscht : user_pref("CT2475029.ToolbarDisabled", true);

Zeile gelöscht : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029");

Zeile gelöscht : user_pref("CT2475029.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]

Zeile gelöscht : user_pref("CT2475029.UserID", "UN93356800256623644");

Zeile gelöscht : user_pref("CT2475029.ValidationData_Search", 0);

Zeile gelöscht : user_pref("CT2475029.ValidationData_Toolbar", 2);

Zeile gelöscht : user_pref("CT2475029.WeatherNetwork", "");

Zeile gelöscht : user_pref("CT2475029.WeatherPollDate", "Sat Feb 05 2011 02:06:36 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.WeatherUnit", "C");

Zeile gelöscht : user_pref("CT2475029.alertChannelId", "868510");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D474549484C5952594B335E5356432C45333438334A414C546660576364676F6A5E4B766B6E5B445D4B4C504A6259646C787A2[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462B554A4D4B4749594D33535D4F432C45333439344A414C565B5E6C656E706C7164736D4D786D705D465F4D4E534D645B66705[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e.:2z527", "247E707571777278333228702A7B797B7B7E30273224262A442B564B4E3B243D2F2D2F2F33433A45373838615D61406A644F38514341424545574E594B4B4B767E727D69207B7224787[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e06cg5el8:", "6E6D6F696A6D6C717773");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473756F707372777D79242F4B49474F42357D5D5C3D");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6B60496252505451675[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465F4F4C5451645B66797[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A312833474745445159575B504B504B4D5E545553533A655A5D4A334C3C3B3A3951485367756363677575676B65527D7275624B645453515[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4F524F6259647927252[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37502E4F4747315C5154412A4334313738483F4A635F5A6A645E625A4772676A5740594A474D4D5E55607971246E7778257[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A52404548564F58315C5154412A4335342F37483F4A68646B645D5E626462616D6971726B6C786A517C7174614A6355544F566[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C574C2F48533E27403233433A45665B68505C5E406B6E4F38514343544B56776C79616D6F517C71547873634C6557566[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215642542D584D503D263F2D2E2E2E443B4635645E6669595C6062686F5C7363716F696467764F7A6F725F48614F50504F665D6[...]

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b-0?3g>d", "3B706E3E706D74757A72467975204A76784F25207E23222A555253545627255D2D5E5D5D");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b-0?3g@6:5;", "");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A232E333E58604F6456604F6852645858635E604E376B7167617059");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484776213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b5ba==9cjag", "3D696F6F426B72707A474547764A4B494C7A7D217E");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6F696A6D6C737078717773");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b9643g3/9e", "6A");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b<:222h64<", "393F352F3E");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b=+03eh8h8j?:", "4443");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9b?b0d:8aj62<h", "6D");

Zeile gelöscht : user_pref("CT2475029.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");

Zeile gelöscht : user_pref("CT2475029.backendstorage.10066", "31333135323036303138363935");

Zeile gelöscht : user_pref("CT2475029.backendstorage.10334", "31333134373730323531363133");

Zeile gelöscht : user_pref("CT2475029.backendstorage.14202", "31333231313732393934333230");

Zeile gelöscht : user_pref("CT2475029.backendstorage._fb_dailyactivity", "31323936383434313434323134");

Zeile gelöscht : user_pref("CT2475029.backendstorage._fb_lifetimesent", "54525545");

Zeile gelöscht : user_pref("CT2475029.backendstorage.active", "796573");

Zeile gelöscht : user_pref("CT2475029.backendstorage.ctid", "637432343831303230");

Zeile gelöscht : user_pref("CT2475029.backendstorage.eule_tb_id", "3563303561376237336633326466303461646338626334386261643339313137");

Zeile gelöscht : user_pref("CT2475029.backendstorage.export", "636C6F736564");

Zeile gelöscht : user_pref("CT2475029.backendstorage.fb_dailyactivity", "31333033363839323736303434");

Zeile gelöscht : user_pref("CT2475029.backendstorage.fb_lifetimesent", "54525545");

Zeile gelöscht : user_pref("CT2475029.backendstorage.firstinstall", "796573");

Zeile gelöscht : user_pref("CT2475029.backendstorage.gsdomain", "");

Zeile gelöscht : user_pref("CT2475029.backendstorage.lastexport", "323031312D30352D3137");

Zeile gelöscht : user_pref("CT2475029.backendstorage.lastrun", "31333232333335363431373035");

Zeile gelöscht : user_pref("CT2475029.backendstorage.partner_id", "3937346665643236");

Zeile gelöscht : user_pref("CT2475029.backendstorage.runtoolbar", "323031312D30352D3236");

Zeile gelöscht : user_pref("CT2475029.backendstorage.shoppingapp.gk.exipres", "53756E2046656220323620323031322032333A31323A353520474D542B30313030");

Zeile gelöscht : user_pref("CT2475029.backendstorage.shoppingapp.gk.geolocation", "6765726D616E79");

Zeile gelöscht : user_pref("CT2475029.backendstorage.shopupdate", "323031312D31312D3236");

Zeile gelöscht : user_pref("CT2475029.backendstorage.shopversionv2", "33");

Zeile gelöscht : user_pref("CT2475029.backendstorage.short", "30");

Zeile gelöscht : user_pref("CT2475029.backendstorage.tbready", "74727565");

Zeile gelöscht : user_pref("CT2475029.components.1000034", false);

Zeile gelöscht : user_pref("CT2475029.components.1000082", false);

Zeile gelöscht : user_pref("CT2475029.components.1000234", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.DialogsAlignMode", "LTR");

Zeile gelöscht : user_pref("CT2475029.ct2481020.FeedLastCount129076858299680990", 663);

Zeile gelöscht : user_pref("CT2475029.ct2481020.GroupingInvalidateCache", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.GroupingLastCheckTime", "Sun Sep 23 2012 10:46:05 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.ct2481020.GroupingLastErrorCode", "");

Zeile gelöscht : user_pref("CT2475029.ct2481020.GroupingLastResponse", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.GroupingLastServerUpdateTime", "129732820530000000");

Zeile gelöscht : user_pref("CT2475029.ct2481020.InvalidateCache", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.LanguagePackLastCheckTime", "Sun Sep 23 2012 10:46:08 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.ct2481020.Locale", "de");

Zeile gelöscht : user_pref("CT2475029.ct2481020.RadioLastCheckTime", "0");

Zeile gelöscht : user_pref("CT2475029.ct2481020.RadioLastUpdateIPServer", "0");

Zeile gelöscht : user_pref("CT2475029.ct2481020.RadioLastUpdateServer", "0");

Zeile gelöscht : user_pref("CT2475029.ct2481020.SearchInNewTabLastCheckTime", "Sun Sep 23 2012 10:46:07 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.ct2481020.SettingsLastCheckTime", "Sun Sep 23 2012 10:46:06 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.ct2481020.SettingsLastUpdate", "1347287073");

Zeile gelöscht : user_pref("CT2475029.ct2481020.ThirdPartyComponentsLastCheck", "Tue Feb 21 2012 23:12:51 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.ct2481020.ThirdPartyComponentsLastUpdate", "1255348257");

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129058856483563306", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129058856485125843", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129076858299680990", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129318113484369104", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129391152084062608", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129399099700587847", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129469746101488132", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129469747048519222", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129579570364011957", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129591023557460541", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.129633221356525288", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.components.569326842456662446", false);

Zeile gelöscht : user_pref("CT2475029.ct2481020.globalFirstTimeInfoLastCheckTime", "Tue Feb 21 2012 23:12:54 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.ct2481020.toolbarAppMetaDataLastCheckTime", "Sun Sep 23 2012 10:46:08 GMT+0200");

Zeile gelöscht : user_pref("CT2475029.ct2481020.toolbarContextMenuLastCheckTime", "Tue Feb 21 2012 23:12:54 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]

Zeile gelöscht : user_pref("CT2475029.homepageProtectorEnableByLogin", true);

Zeile gelöscht : user_pref("CT2475029.initDone", true);

Zeile gelöscht : user_pref("CT2475029.isAppTrackingManagerOn", true);

Zeile gelöscht : user_pref("CT2475029.myStuffEnabled", true);

Zeile gelöscht : user_pref("CT2475029.myStuffPublihserMinWidth", 400);

Zeile gelöscht : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

Zeile gelöscht : user_pref("CT2475029.myStuffServiceIntervalMM", 1440);

Zeile gelöscht : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

Zeile gelöscht : user_pref("CT2475029.oldAppsList", "200,129058856464344002,129058856464656507,111,129469746101488132,129391152084062608,129469747048519222,129582129482516486,129399099700587847,129058856485125843,1290[...]

Zeile gelöscht : user_pref("CT2475029.revertSettingsEnabled", true);

Zeile gelöscht : user_pref("CT2475029.searchProtectorDialogDelayInSec", 10);

Zeile gelöscht : user_pref("CT2475029.searchProtectorEnableByLogin", true);

Zeile gelöscht : user_pref("CT2475029.testingCtid", "");

Zeile gelöscht : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Fri Jan 28 2011 23:00:13 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Fri Jan 28 2011 23:00:14 GMT+0100");

Zeile gelöscht : user_pref("CT2475029.usagesFlag", 2);

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2481020/CT2475029", "\"b63fd3f3adb3805790026797304f07072\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", "\"1294298655\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2481020", "\"1323698787\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=de", "oIwsta2spzadhjRgiY1Nhw==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "wVmmvqqOMqrv5xct1cJIHg==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=de", "WiZSpHJzJ/uTUKvfHHyj/w==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "0uSPYx+Kl2jpu8sJZMeHjw==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=de", "9H/gICSaMqbmx+Gd+8W4Sg==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "Dclc8oo4TTv7+mAkSlUSWg==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de", "eJfMrdrGnhGHiiPiYjgAww==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "K4Vqu91uAzWURlxJRdXJOg==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"d229fa25f6c9cc1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0e0a4327275cd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"6a637346d78ccc1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029", "\"f1c77625c0e9bd1c80a2fd6901845fa9\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"189bc05ed9753368aadfb2b80f08021d\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634303635100000000");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/2011 5:25:10 PM", "634335443890000000");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/2011 12:59:49 PM", "634339976460000000");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/2011 6:54:06 PM", "634356118310000000");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=ct2481020&octid=CT2475029", "\"1318848553\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029", "\"1295971309\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2481020/CT2475029", "\"ca6c6a8b3892a7997ef5a85c18184d921\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equalizer_dead.gif", "\"0678fe477ac91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimize.gif", "\"046c7ab477ac91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gif", "\"0484de117c4c91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gif", "\"0e7a152347ac91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif", "\"087c778347ac91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"516530e805c2db92fcd6ab1f8792c9ee\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"6d5625979f8d7932d531cfafc185f12f\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634310612473900000\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"4874e5e09124e181cdb5b1ecfe0477ad\"-gzip");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"03f567674fbf72a94c460b277bb023e5\"-gzip");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"e4f37ede8a5e64fd0104d3c66a1b7e66\"-gzip");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"85cc0e90877f8210e50cd7cdbb648149\"-gzip");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"214d980b3fc8703413fb737e5dc98c99\"-gzip");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"f0442fa1d524a8db19d6e263143b7bb9\"-gzip");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"ab764e126e6243f4e0194749fefc613f\"-gzip");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"c0bfe8cc2a775ec6c7ea0c7271a9e61c\"-gzip");

Zeile gelöscht : user_pref("CommunityToolbar.EngineOwner", "");

Zeile gelöscht : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");

Zeile gelöscht : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo");

Zeile gelöscht : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);

Zeile gelöscht : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Christian\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\cux27v6n.default\\conduitCommon\\modules\\3.10.0.1");

Zeile gelöscht : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.10.0.1");

Zeile gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_2f50d0db", "356x332");

Zeile gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_8b6ce7c6", "356x332");

Zeile gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://s3-eu-west-1.amazonaws.com/tbev2/974fed26-default.html", "402x342");

Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2475029");

Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");

Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "myashampoo");

Zeile gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");

Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2475029");

Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2475029");

Zeile gelöscht : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);

Zeile gelöscht : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri Dec 02 2011 21:30:08 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");

Zeile gelöscht : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);

Zeile gelöscht : user_pref("CommunityToolbar.alert.locale", "en");

Zeile gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);

Zeile gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Dec 02 2011 21:30:08 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");

Zeile gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);

Zeile gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");

Zeile gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false);

Zeile gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);

Zeile gelöscht : user_pref("CommunityToolbar.alert.userId", "3f97d944-f832-4901-a132-e91cb5bac4fe");

Zeile gelöscht : user_pref("CommunityToolbar.globalUserId", "c534f74c-8261-4266-8f06-9aa4d07f800b");

Zeile gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

Zeile gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

Zeile gelöscht : user_pref("CommunityToolbar.killedEngine", true);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue Feb 28 2012 20:55:22 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.locale", "en");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Mar 06 2012 08:14:24 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.showTrayIcon", false);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.userId", "4a60d5f1-224f-426b-9b39-957aa1b69036");

Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Fri Jan 28 2011 23:00:16 GMT+0100");

Zeile gelöscht : user_pref("CommunityToolbar.undefined", "");

Zeile gelöscht : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");

Zeile gelöscht : user_pref("browser.search.defaultengine", "Ask.com");

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.admin", false);

Zeile gelöscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "en");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.excTlbr", false);

Zeile gelöscht : user_pref("extensions.BabylonToolbar.id", "18e13f280000000000004061860dc7e9");

Schramme

15.05.2014 19:40

Teil 2 der Adware:

Code:


 

Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15551");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrId", "base");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q=");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsn", "1.5.29.1");

Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsni", "1.5.29.1");

Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");

Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=111304&tt=3112_2");

Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", true);

Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=111304&tt=3112_2&babsrc=NT_ss&mntrId=18e13f280000000000004061860dc7e9");

Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");

Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.29.18:04:28");

Zeile gelöscht : user_pref("extensions.Softonic.admin", false);

Zeile gelöscht : user_pref("extensions.Softonic.aflt", "SD");

Zeile gelöscht : user_pref("extensions.Softonic.autoRvrt", "false");

Zeile gelöscht : user_pref("extensions.Softonic.cntry", "DE");

Zeile gelöscht : user_pref("extensions.Softonic.cv", "cv5");

Zeile gelöscht : user_pref("extensions.Softonic.dfltLng", "de");

Zeile gelöscht : user_pref("extensions.Softonic.dfltlng", "de");

Zeile gelöscht : user_pref("extensions.Softonic.dfltsrch", "false");

Zeile gelöscht : user_pref("extensions.Softonic.envrmnt", "production");

Zeile gelöscht : user_pref("extensions.Softonic.excTlbr", false);

Zeile gelöscht : user_pref("extensions.Softonic.firsttimeinstallation", "true");

Zeile gelöscht : user_pref("extensions.Softonic.hdrMd5", "F4F536AC6BE63C39E6C8A3DBCD4509CF");

Zeile gelöscht : user_pref("extensions.Softonic.hmpg", false);

Zeile gelöscht : user_pref("extensions.Softonic.hrdid", "18e13f280000000000004061860dc7e9");

Zeile gelöscht : user_pref("extensions.Softonic.id", "18e13f280000000000004061860dc7e9");

Zeile gelöscht : user_pref("extensions.Softonic.instlDay", "15606");

Zeile gelöscht : user_pref("extensions.Softonic.instlRef", "MON00015");

Zeile gelöscht : user_pref("extensions.Softonic.instlday", "15606");

Zeile gelöscht : user_pref("extensions.Softonic.instlref", "MON00015");

Zeile gelöscht : user_pref("extensions.Softonic.isdcmntcmplt", "false");

Zeile gelöscht : user_pref("extensions.Softonic.keywordurl", "");

Zeile gelöscht : user_pref("extensions.Softonic.lastVrsnTs", "1.6.7.410:51:55");

Zeile gelöscht : user_pref("extensions.Softonic.mntrvrsn", "1.3.0");

Zeile gelöscht : user_pref("extensions.Softonic.newTab", false);

Zeile gelöscht : user_pref("extensions.Softonic.newtab", "false");

Zeile gelöscht : user_pref("extensions.Softonic.newtaburl", "");

Zeile gelöscht : user_pref("extensions.Softonic.prdct", "Softonic");

Zeile gelöscht : user_pref("extensions.Softonic.propectorlck", 86952516);

Zeile gelöscht : user_pref("extensions.Softonic.prtnrId", "softonic");

Zeile gelöscht : user_pref("extensions.Softonic.prtnrid", "softonic");

Zeile gelöscht : user_pref("extensions.Softonic.rvrtMsg", "Click Yes to keep current home page and default search settings, Click No to restore original settings");

Zeile gelöscht : user_pref("extensions.Softonic.savedVrsnTs", "1");

Zeile gelöscht : user_pref("extensions.Softonic.sg", "az");

Zeile gelöscht : user_pref("extensions.Softonic.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.Softonic.smplgrp", "none");

Zeile gelöscht : user_pref("extensions.Softonic.srch", "");

Zeile gelöscht : user_pref("extensions.Softonic.srchprvdr", "");

Zeile gelöscht : user_pref("extensions.Softonic.tlbrId", "base");

Zeile gelöscht : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MON00015/tb_v1?SearchSource=1&cc=&q=");

Zeile gelöscht : user_pref("extensions.Softonic.tlbrid", "base");

Zeile gelöscht : user_pref("extensions.Softonic.tlbrsrchurl", "hxxp://search.softonic.com/MON00015/tb_v1?SearchSource=1&cc=&q=");

Zeile gelöscht : user_pref("extensions.Softonic.vrsn", "1.6.7.4");

Zeile gelöscht : user_pref("extensions.Softonic.vrsnTs", "1.6.7.410:51:55");

Zeile gelöscht : user_pref("extensions.Softonic.vrsni", "1.6.7.4");

Zeile gelöscht : user_pref("extensions.Softonic.vrsnts", "1.6.7.410:51:55");

Zeile gelöscht : user_pref("extensions.Softonic_i.newTab", false);

Zeile gelöscht : user_pref("extensions.Softonic_i.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.Softonic_i.vrsnTs", "1.6.7.410:51:55");

Zeile gelöscht : user_pref("extensions.crossrider.bic", "145ce8d0b404f40f64a14d92a50cff55");

Zeile gelöscht : user_pref("extensions.enabledItems", "{9a59cdf5-17d8-d82e-3d51-9f407f60a9d5}:1.0,tunebite-firefox-surf-and-catch-extension@audials.com:1.4.7400.0,{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.74,engine[...]

Zeile gelöscht : user_pref("extentions.y2layers.defaultEnableAppsList", "ezLooker,buzzdock,YontooNewOffers");

Zeile gelöscht : user_pref("extentions.y2layers.installId", "81d6a094-a35c-4570-b9c8-46a28852eb2e");

Zeile gelöscht : user_pref("id_chatzum.firstlaunch", "0");

Zeile gelöscht : user_pref("id_chatzum.guid", "%7B8B2B68E1-1AAC-A2BE-383D-5BA2E797AB2E%7D");

Zeile gelöscht : user_pref("id_chatzum.hiddenvisual", 0);

Zeile gelöscht : user_pref("id_chatzum.openSearchEngineName", "Search%20Safer");

Zeile gelöscht : user_pref("id_chatzum.searchengine", "Google");

Zeile gelöscht : user_pref("id_chatzum_installed_version", "1.0.17");

Zeile gelöscht : user_pref("id_chatzum_tabpage", "hxxp%3A//searchsafer.com/");

Zeile gelöscht : user_pref("iminent.newtabredirect", "true");

Zeile gelöscht : user_pref("iminent.nomsi", "true");

Zeile gelöscht : user_pref("iminent.searchindex", "1");

Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaHp8Pk5fza5XP2LqNOcSHMtbl0vt3xjxqLjH3FfFGrtpLTUpBCystXadzXKHt04nu6I8nTDMYUtupArFZLr6Li5GO991xfN_MkMkDCIqxEGXil0t_3zWGyzR-iuv0Yg9jgMQzdG[...]
 

[ Datei : C:\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\prefs.js ]
 

Zeile gelöscht : user_pref("CT2481020..clientLogIsEnabled", false);

Zeile gelöscht : user_pref("CT2481020..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

Zeile gelöscht : user_pref("CT2481020..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");

Zeile gelöscht : user_pref("CT2481020./9b+7e+x305.from_oldbar.enc", "JH4nQTM0NjN5RTo9KnIseXp+ejEoMztHSVNGLVhNUD0mPy0uMTVEO0ZOT1tWXmlbQm1iZVI7VEJDRklZUFtjfXN7blUhdXhlTmdVVllbbGNudnwmKzB7aTUqLXlie2lqbW4hdyMrNzt0NHxIPSBF[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e,x305.from_oldbar.enc", "JH4oQS8/Pjd5RTo9KnIseXt4fTEoMzxHSEAsV0xPPCU+LC4rL0M6RU5ZUFtXZ2pmQm1iRV5pVD1WREZDRltSXWZxbCFua1h9c2dQaVdZVlhuZXB5MycyfWo2Ky56Y3xqbGlqIngkLUY6PkVGSUxA[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e-x305.from_oldbar.enc", "JH4pMnZBNjk3MzVFOX4/STsvdzF+ICUgNi04QkdKWFFaXFhdUF9ZOWRZXEkySzk6PzlQR1JcQXNoa2llZ3t5b217blUhdXhZJnZoUWpYWV5Xb2ZxezAkMiQ4J205LjFxPi8haSNwcXV4KH4qNDk8[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e/x305.from_oldbar.enc", "JH4rQTU2MnhEOTwpcSt4fHt3MCcyPkxDQ1NOLVhbPCU+LDAuNEM6RVFYYmleZ1pBbGFkUTpTQUVDSFhPWmZte3xxdHJucCF0dFsne35rVG1bX11hcml0IS8nJiY7MXE6KD46QjY+QTR7QDxIeyBN[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e06cg5el8:.from_oldbar.enc", "bm1obGx0cm9udQ==");

Zeile gelöscht : user_pref("CT2481020./9b+7e06cg5el;8i:k.from_oldbar.enc", "JH4tLyJqdHNucnJ6eHV0eyQvS0lHT0I1fV1cPQ==");

Zeile gelöscht : user_pref("CT2481020./9b+7e0x305.from_oldbar.enc", "JH4sQDpAd0M4OyhwKnd8dX0vJjE+QSlVR0hNUVpOWlkyXVJVQitEMjcwN0lAS1heaF5wbm5mdGJuaWtNeG1wXUZfTVJLUWRbZnMje3csKiovJWQwJSh0XXZkaWJne3J9KzZ0OjYyPUBANXxIPUAt[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e1x305.from_oldbar.enc", "JH4tQTE9QDJ5RTo9KnIsend5fjEoM0FHPkVHRUgvWk9SPyhBMC0vM0Y9SFZiZWhca2dfbXBgSHNoa1hBWklGSEtfVmFvfCF9dHR6eCdfKyAjb1hxYF1fYXZteCc3OjYwMio9QXZCNzonbyl3dHZ3[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e2x305.from_oldbar.enc", "JH4uNUIxPT05OntHPD8sdC55IH0yKTRDVlVORy5ZTlEyXk9BKkM1NzIxSD9KWWVfX2JsW3FzaXVpdXRNeG1wUX5rYEliUlBUUWdeaXgoLXx8Yy8kJ3NcdWRmZmh6cXwsO0AwQDx0eDQ9MHxIPUAt[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e31;cj5@~@?@#ncf.from_oldbar.enc", "JH5hOT8jayVwcXR6KiEsbkFPRE0yejRBTCtMS0wvWk9SPzZBJGFWUVlUV1FKM0woLk9GUTRxdGJWP1hJTFtSXUBsbXZiS2RTZl1oenl9KnktfHBZOXl0VyU0KCUzOjl9ZiBqIngkOU[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e31;cjc<=fbj#mm.from_oldbar.enc", "JH5hOT8jayV1dnN6KiEsbkFPRE0yejRPSElSTlYvWVk+NUAjYFVQWFNWUEkySyoqTkVQM19bZXFWP1hKWlFcP3txfiQhdXh2eyR1Ji0pKSMvd3BZcmNmZ2h3bnlcKSozfmchbyN5JTc[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e31;cjc<=fbj#ncf.from_oldbar.enc", "JH5hOT8jayV1dndxKiEsbkFPRE0yejRPSElSTlYvWk9SPzZBJFBMVmJHMEk0S0JNMGxib3RxZmlnbHRmdn15eXMgaGFKY1RXWFloX2pNeXokb1hxYHNqdSgnKzcnOip9ZkYnImQyQT[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e31;cji8a k@c.from_oldbar.enc", "JH5hOT8jayVvdSh+Kmw/TUJLMHgyU0JLKlVKTToxPH5LR1FdQitENkY9SCtnXWpvbGFkYmdvYXF4dHRuemNcRV5QUlNUY1plSHR1fmpTbFtuZXAjIiYyIjUleGFBInwyPy0/OyNrKyZoQ[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e3x305.from_oldbar.enc", "JH4vQT87NjM/R0Y/fUk+QS52MH4iJCE1LDdHS1lXS0pIWFhOXjdiVzpTXkkySzo9PztQR1JibGJddXhtdmp8UXxxdGFKY1JVV1JoX2p6LSYsLCR+LzIuaTUqLXlie2ptb2khdyMzQUEzN0hHRz0/[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e4x305.from_oldbar.enc", "JH4wLEB2Qjc6J28pd3t0di4lMEE+T0lKUitVVTojPCsvKClBOENUUV5dVmFfVmhcQm1iZVI7VENGSUpZUFtsaXp+IXAjcHZZJXl8XSp6bFVuXWBjY3NqdSckMTgxNzI2KHM/NDd3RTInbyl3en18[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e5x305.from_oldbar.enc", "JH4xNkIrd0M4OyhwKnl1encvJjFDSz1JVkpQWS5ZTjFKVUApQjIuMy9HPklbXVlaal5YcHJiZ0l0aWxZQltLR0tRYFdidHwkc3N3JiAkICpiLiMmclt0ZGBkaXlwey42PS4uNDR3Qzh6ND8qcix7[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e6x305.from_oldbar.enc", "JH4yLD4yMjI4RT58SD1ALXUvfnskJDQrNklTVFJZWFpaUFJONmFWWUYvSDg1PTxNRE9ibG1rcnFqd2FNeG1wXUZfT0xUUWRbZnl7Jnh4KX4vKS0yMGczKCt3YHlpZm5qfnUhNDZAQ0Y8PXxIPUAt[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e7x305.from_oldbar.enc", "JH4zPSw/Pj95RTo9KnIse3p5ejEoM0dRP0RVWUJMWjFcUVRBKkMzMjA3SD9KXmhWW1lwYG5sZmFkc0x3bG9cRV5OTUtRY1pleSR6KSN4emEtIiVxWnNjYmBleG96Ly8rODg0PEIwMjQ5QzY0SztJ[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e8x305.from_oldbar.enc", "JH40PT87NTc7PzZ8R0csdC5+eCMyKTRJVlVARy5ZTlE+J0AwMjUzRTxHXFVYY2plbmJebGFrcGhzS3ZrbltEXU1PUk9iWWR5J3ZyKnkoYCwhJHBZcmJkZ2J3bnkvNCs8MXM/NHYwOyZuKHd5fHYt[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e9x305.from_oldbar.enc", "JH41Myw/MnhEOTwpcSt7dXl5MCcySExPT0RQTEdUWFxQSDRfVFdELUY3MTU0S0JNY2tdX19zaWtKdWptWkNcTUdLSWFYY3kib3QlKCR5YCwhJHBZcmNdYGh3bnkwOjorKi50QDU4JW0nd3F0eywj[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e:x305.from_oldbar.enc", "JH42Mzs4MnhEOTwpcSt7dnl6MCcySUhVRUQsV0xPPCU+LyotLUM6RVxnVVteP2pfYk84UUI9QD9WTVhvemh4bHFxVCB0d2RNZldSVVNrYm0lfi16ZjInKnZfeGlkZm59dCA3QjIyMkZENXxHRyx0[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e;x305.from_oldbar.enc", "JH43PzM/NzhCL3tHPD8sdC5+enoiMyo1TUYsV0xPPCU+LysrMUM6RV1jVldcXFpBbGFkUTpTREBARVhPWnJzcXp4bSJWInZ5Zk9oWVVVWW1kbygkLCcqMiEwJ205LjF9ZiBwbGxuJXsnPzpIfklJ[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e<x305.from_oldbar.enc", "JH44NDAwRC9GNkQ3fUk+QS52MCF9JCY1LDdQTEdXUUtPRzRfVFdELUY3NDo6S0JNZl5wW2RlcWNKdWptWkNcTUpQT2FYY3xxeSB1JiFfKyAjb1hxYl9lYnZteDIuMCUsODIydUE2OSZuKHh1e3ct[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e=x305.from_oldbar.enc", "JH45MzY/QUE3OTV8SD1ALXUvIH4gIjQrNlBUWVdMVU9RWzRfVFdELUY3Njc4S0JNZ2twbmBvYWZrY2ZNeG1wXUZfUE9QUGRbZiElfHlzemEtIiVxWnNkY2RjeG96NT0yM0A/Oz8zeEQ5PClxK3t6[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e>x305.from_oldbar.enc", "JH46QTY/MjI4OHtHPD8sdC5+ICF8Myo1UE9TRkgvWk9SPyhBMjM0L0Y9SGNcXWZiakNuY2ZTPFVGR0hCWlFcd3B3cyAjcSFZJXl8aVJrXF1dYXBnci4hLiQ4KDg3Lyo6LnM/NDckbCZ2d3d6KyIt[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e?x305.from_oldbar.enc", "JH47LS8vM0E0QDo6fUlMLXUvICMgfjQrNlJQTFJJVVJWUlw1YFVYRS5HODs4NkxDTmpwb19lY11zb2d1eGhMZXBrVCB0d2RNZldaV1RrYm0qIisvJS5oNCkseGF6a25rZyB2Ij5EQkEzNkE8PiBL[...]

Zeile gelöscht : user_pref("CT2481020./9b+7e@x305.from_oldbar.enc", "JH48QEIrd0M4OyhwKnt2fngvJjFOUlQ9KlVKLUZRPCU+MCszLEM6RWJnVlFiWWVfX0NuY0ZfalU+V0lETERcU157IXR8eCF0WiZ6fWpTbF5ZYGJxaHMxNCkmJm05LjF9ZiBxbHN0JXsnRDY5PT9F[...]

Zeile gelöscht : user_pref("CT2481020./9b+7eax305.from_oldbar.enc", "JH49PTc4d0M4OyhwKnt6dX4vJjFPS1JLREVJS0lIVFBYWVJTX1E4Y1hbSDFKPDs2PU9GUW9rbm1jd21odmZQe3BzYEliVFNOVGdeaSgsdCsrMCZlMSYpdV53aWhjaHxzfj0wLj0yMjg2RHxIPUAt[...]

Zeile gelöscht : user_pref("CT2481020./9b+7ebe3g=;d9n9=d.from_oldbar.enc", "NywtMml1di46PHs6OUNKSUhBQ0smUUZJKWVQRlZJZXFzTTNLVw==");

Zeile gelöscht : user_pref("CT2481020./9b+7ebx305.from_oldbar.enc", "JH4+OTFBMD0zRUA2Mn5KP0IvdzF7fSM1LDdWWUlITk9RUlxOTFVTW1RgWlo+aV5hTjdQOz1BVEtWdXVlbXNneW1tfFUhdXhlTmdSVFdrYm0tIiUuIGczKGokL3lie2ZoaiB2IkEvM3lFOj0qcix2[...]

Zeile gelöscht : user_pref("CT2481020./9b+7ecx305.from_oldbar.enc", "JH4/PTAwQzEuekY7PitzLXsgfjEoM1NRVlVRV1pPWExeM15TVkMsRTQ4NklAS2tZVmxoa0ZxZmlWP1hHS0hcU15+bGlWInZ5Zk9oV1tXbGNuLzEhJjAjNio1LCw6MTlxPTI1ImokcnZxKH4qSkE/[...]

Zeile gelöscht : user_pref("CT2481020./9b+7edx305.from_oldbar.enc", "JH5ANUIqNjh5RTo9KnIsfSAvJjFSR1Q8SEosV1o7JD0vL0A3QmNYZU1ZWz1oXUBkX084UUNCVEtWd2x5YW1vUXluYEliVFJlXGcpJnl9fSB8fDEnL2czKCt3YHlraHxzfkA+NDJEOUZ6Rjs+K3Mt[...]

Zeile gelöscht : user_pref("CT2481020./9b+7etx305.from_oldbar.enc", "JH5uLy47MjNCNXtEOStzLXp7e3wyKTQjUkxUV0dKTlBWXUphUV9dV1JVZD1oXWBNNk89Pj49VEtWRUhqc21pb1J9cnViS2RSU1NRaWBrWnt7dyYueWczKCt3YHlnaGdvfnUhcm01Pjg0OnxIPUAt[...]

Zeile gelöscht : user_pref("CT2481020./9b-0?3g>d.from_oldbar.enc", "OnBuP21CcW96c3ZHdiB3e3sgJSBQfSMqJlRWKilXKS1eMGAw");

Zeile gelöscht : user_pref("CT2481020./9b-0?3g@6:5;.from_oldbar.enc", "AA==");

Zeile gelöscht : user_pref("CT2481020./9b-0?3gfa7ef.from_oldbar.enc", "Ky4sPQ==");

Zeile gelöscht : user_pref("CT2481020./9b-3=3eccja=f>.from_oldbar.enc", "JH4zPSxFL0E1J28pKiEsOT1EMHgyMyo1REhYTDojKC4uMTIzNDU2O0ZgaFdsXmhXcFpsYGBrZmhWP3N5b2l4YQ==");

Zeile gelöscht : user_pref("CT2481020./9b/>01=9a6k6<im;krie@pdawm.from_oldbar.enc", "amlrcnN0dXY=");

Zeile gelöscht : user_pref("CT2481020./9b3=>@44i48?.from_oldbar.enc", "NywtMml1djNCNjNBSEcgPj1HTk1MRUdPKlVKTS1YWFheS1VONmNSVk8=");

Zeile gelöscht : user_pref("CT2481020./9b5ba==9cjag.from_oldbar.enc", "ajxobWtAc3V6cXV1dkZMSktKflB8");

Zeile gelöscht : user_pref("CT2481020./9b6b11g4c56b>f;p;anr@p.from_oldbar.enc", "bm1obGx0cm9udHd1cg==");

Zeile gelöscht : user_pref("CT2481020./9b9643g3/9e.from_oldbar.enc", "ag==");

Zeile gelöscht : user_pref("CT2481020./9b;45>:bi9i7ie.from_oldbar.enc", "Ky4sPQ==");

Zeile gelöscht : user_pref("CT2481020./9b<:222h64<.from_oldbar.enc", "OT81Lz4=");

Zeile gelöscht : user_pref("CT2481020./9b=+03eh8h8j?:.from_oldbar.enc", "REM=");

Zeile gelöscht : user_pref("CT2481020./9b?+e2a52d8.from_oldbar.enc", "NywtMml1di46PHs6OUNKSUhBQ0smUUZJKWVQRlZkcHJ5UVVeXlI=");

Zeile gelöscht : user_pref("CT2481020./9b?b0d:8aj62<h.from_oldbar.enc", "bQ==");

Zeile gelöscht : user_pref("CT2481020./9ba@0<0bi6a7gn:6@l?.from_oldbar.enc", "bA==");

Zeile gelöscht : user_pref("CT2481020.1000082.isPlayDisplay", "true");

Zeile gelöscht : user_pref("CT2481020.1000082.state", "{\"state\":\"stopped\",\"text\":\"Radio 8\",\"description\":\"Radio 8\",\"url\":\"hxxp://stream.radio8.de:8000/live.m3u\"}");

Zeile gelöscht : user_pref("CT2481020.11304.from_oldbar.enc", "MTMzNTExMTMxMzE5Nw==");

Zeile gelöscht : user_pref("CT2481020.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

Zeile gelöscht : user_pref("CT2481020.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/default.aspx");

Zeile gelöscht : user_pref("CT2481020.BrowserCompStateIsOpen_129469746101488132", true);

Zeile gelöscht : user_pref("CT2481020.BrowserCompStateIsOpen_129681723868939970", true);

Zeile gelöscht : user_pref("CT2481020.BrowserCompStateIsOpen_130104333454678661", true);

Zeile gelöscht : user_pref("CT2481020.BrowserCompStateIsOpen_1396366934000", true);

Zeile gelöscht : user_pref("CT2481020.CTID", "CT2481020");

Zeile gelöscht : user_pref("CT2481020.CurrentServerDate", "5-4-2014");

Zeile gelöscht : user_pref("CT2481020.DSChangedManually", false);

Zeile gelöscht : user_pref("CT2481020.DSInstall", true);

Zeile gelöscht : user_pref("CT2481020.DSProtectChoice", true);

Zeile gelöscht : user_pref("CT2481020.DSProtectCount", 2);

Zeile gelöscht : user_pref("CT2481020.DialogsAlignMode", "LTR");

Zeile gelöscht : user_pref("CT2481020.DialogsGetterLastCheckTime", "Sat Apr 05 2014 15:15:55 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.DownloadReferralCookieData", "");

Zeile gelöscht : user_pref("CT2481020.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

Zeile gelöscht : user_pref("CT2481020.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

Zeile gelöscht : user_pref("CT2481020.FeedLastCount129076858299680990", 850);

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076849370150342", "Fri Mar 01 2013 10:59:02 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076850042182211", "Fri Mar 01 2013 10:59:03 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076850596400916", "Fri Mar 01 2013 10:59:15 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076850791868756", "Fri Mar 01 2013 10:59:16 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076852434375419", "Fri Mar 01 2013 10:59:16 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076853083906444", "Fri Mar 01 2013 10:59:16 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076854010937606", "Fri Mar 01 2013 10:59:16 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076855068438037", "Fri Mar 01 2013 10:59:17 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076855340312884", "Fri Mar 01 2013 10:59:17 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076855597344292", "Fri Mar 01 2013 10:59:17 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076855883906472", "Fri Mar 01 2013 10:59:17 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076856408281730", "Fri Mar 01 2013 10:59:17 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076856723281882", "Fri Mar 01 2013 10:59:17 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076856982969262", "Fri Mar 01 2013 10:59:18 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076857229219583", "Fri Mar 01 2013 10:59:18 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076857478587121", "Fri Mar 01 2013 10:59:18 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedPollDate129076858014837073", "Fri Mar 01 2013 10:59:18 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.FeedTTL129076850042182211", 5);

Zeile gelöscht : user_pref("CT2481020.FeedTTL129076850596400916", 5);

Zeile gelöscht : user_pref("CT2481020.FeedTTL129076850791868756", 5);

Zeile gelöscht : user_pref("CT2481020.FeedTTL129076855068438037", 2);

Zeile gelöscht : user_pref("CT2481020.FeedTTL129076856408281730", 2);

Zeile gelöscht : user_pref("CT2481020.FeedTTL129076856723281882", 5);

Zeile gelöscht : user_pref("CT2481020.FeedTTL129076857229219583", 30);

Zeile gelöscht : user_pref("CT2481020.FeedTTL129076858014837073", 2);

Zeile gelöscht : user_pref("CT2481020.FirstServerDate", "27-2-2012");

Zeile gelöscht : user_pref("CT2481020.FirstTime", true);

Zeile gelöscht : user_pref("CT2481020.FirstTimeFF3", true);

Zeile gelöscht : user_pref("CT2481020.FixPageNotFoundErrors", true);

Zeile gelöscht : user_pref("CT2481020.GroupingServerCheckInterval", 1440);

Zeile gelöscht : user_pref("CT2481020.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Zeile gelöscht : user_pref("CT2481020.HPChangedManually", true);

Zeile gelöscht : user_pref("CT2481020.HPInstall", true);

Zeile gelöscht : user_pref("CT2481020.HPProtectChoice", true);

Zeile gelöscht : user_pref("CT2481020.HPProtectCount", 1);

Zeile gelöscht : user_pref("CT2481020.HasUserGlobalKeys", true);

Zeile gelöscht : user_pref("CT2481020.HomePageProtectorEnabled", false);

Zeile gelöscht : user_pref("CT2481020.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2481020&SearchSource=13");

Zeile gelöscht : user_pref("CT2481020.Initialize", true);

Zeile gelöscht : user_pref("CT2481020.InitializeCommonPrefs", true);

Zeile gelöscht : user_pref("CT2481020.InstallationAndCookieDataSentCount", 3);

Zeile gelöscht : user_pref("CT2481020.InstallationId", "ConduitNSISIntegration");

Zeile gelöscht : user_pref("CT2481020.InstallationType", "ConduitXPEIntegration");

Zeile gelöscht : user_pref("CT2481020.InstalledDate", "Mon Feb 27 2012 18:46:18 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.InvalidateCache", false);

Zeile gelöscht : user_pref("CT2481020.IsAlertDBUpdated", true);

Zeile gelöscht : user_pref("CT2481020.IsGrouping", false);

Zeile gelöscht : user_pref("CT2481020.IsInitSetupIni", true);

Zeile gelöscht : user_pref("CT2481020.IsMulticommunity", false);

Zeile gelöscht : user_pref("CT2481020.IsOpenThankYouPage", false);

Zeile gelöscht : user_pref("CT2481020.IsOpenUninstallPage", false);

Zeile gelöscht : user_pref("CT2481020.IsProtectorsInit", true);

Zeile gelöscht : user_pref("CT2481020.LanguagePackLastCheckTime", "Sat Apr 05 2014 15:15:55 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.LanguagePackReloadIntervalMM", 1440);

Zeile gelöscht : user_pref("CT2481020.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");

Zeile gelöscht : user_pref("CT2481020.LastLogin_3.10.0.1", "Wed May 02 2012 13:12:28 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.LastLogin_3.12.2.3", "Thu Jul 05 2012 08:07:53 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.LastLogin_3.13.0.6", "Tue Jul 24 2012 06:30:44 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.LastLogin_3.14.1.0", "Sun Oct 07 2012 18:28:29 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.LastLogin_3.15.1.0", "Mon Dec 03 2012 08:19:53 GMT+0100");

Zeile gelöscht : user_pref("CT2481020.LastLogin_3.16.0.3", "Sat Apr 05 2014 15:15:53 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.LatestVersion", "3.20.0.4");

Zeile gelöscht : user_pref("CT2481020.Locale", "de");

Zeile gelöscht : user_pref("CT2481020.MCDetectTooltipHeight", "83");

Zeile gelöscht : user_pref("CT2481020.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Zeile gelöscht : user_pref("CT2481020.MCDetectTooltipWidth", "295");

Zeile gelöscht : user_pref("CT2481020.MyStuffEnabledAtInstallation", true);

Zeile gelöscht : user_pref("CT2481020.OriginalFirstVersion", "3.10.0.1");

Zeile gelöscht : user_pref("CT2481020.RadioIsPodcast", false);

Zeile gelöscht : user_pref("CT2481020.RadioLastCheckTime", "Sat Apr 05 2014 15:15:51 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.RadioLastUpdateIPServer", "3");

Zeile gelöscht : user_pref("CT2481020.RadioLastUpdateServer", "3");

Zeile gelöscht : user_pref("CT2481020.RadioMediaID", "9962");

Zeile gelöscht : user_pref("CT2481020.RadioMediaType", "Media Player");

Zeile gelöscht : user_pref("CT2481020.RadioMenuSelectedID", "EBRadioMenu_CT24810209962");

Zeile gelöscht : user_pref("CT2481020.RadioShrinkedFromSetup", false);

Zeile gelöscht : user_pref("CT2481020.RadioStationName", "California%20Rock");

Zeile gelöscht : user_pref("CT2481020.RadioStationURL", "hxxp://feedlive.net/california.asx");

Zeile gelöscht : user_pref("CT2481020.RestartDialogFirstTime", "false");

Zeile gelöscht : user_pref("CT2481020.RestartDialogShouldDisplay", "false");

Zeile gelöscht : user_pref("CT2481020.SavedHomepage", "hxxp://www.stern.de/");

Zeile gelöscht : user_pref("CT2481020.SearchAppState.enc", "Mw==");

Zeile gelöscht : user_pref("CT2481020.SearchAppTracking.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.SearchCaption", "Ashampoo DE Customized Web Search");

Zeile gelöscht : user_pref("CT2481020.SearchEngineBeforeUnload", "Ashampoo DE Customized Web Search");

Zeile gelöscht : user_pref("CT2481020.SearchFromAddressBarIsInit", true);

Zeile gelöscht : user_pref("CT2481020.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&q=");

Zeile gelöscht : user_pref("CT2481020.SearchInNewTabEnabled", true);

Zeile gelöscht : user_pref("CT2481020.SearchInNewTabIntervalMM", 1440);

Zeile gelöscht : user_pref("CT2481020.SearchInNewTabLastCheckTime", "Sat Apr 05 2014 15:15:50 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");

Zeile gelöscht : user_pref("CT2481020.SearchProtectorEnabled", false);

Zeile gelöscht : user_pref("CT2481020.SearchProtectorToolbarDisabled", false);

Zeile gelöscht : user_pref("CT2481020.SendProtectorDataViaLogin", true);

Zeile gelöscht : user_pref("CT2481020.ServiceMapLastCheckTime", "Sat Apr 05 2014 15:15:53 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.SettingsLastCheckTime", "Sat Apr 05 2014 15:15:49 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.SettingsLastUpdate", "1396372505");

Zeile gelöscht : user_pref("CT2481020.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2481020&SearchSource=13");

Zeile gelöscht : user_pref("CT2481020.ThirdPartyComponentsInterval", 504);

Zeile gelöscht : user_pref("CT2481020.ThirdPartyComponentsLastCheck", "Sat Apr 05 2014 15:15:49 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.ThirdPartyComponentsLastUpdate", "1331806000");

Zeile gelöscht : user_pref("CT2481020.ToolbarShrinkedFromSetup", false);

Zeile gelöscht : user_pref("CT2481020.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,codefuel.com,tbccint.com,trovi.com,seccint.com,cpccint.com,appstrm.com,OurTool[...]

Zeile gelöscht : user_pref("CT2481020.UserID", "UN68319594454060542");

Zeile gelöscht : user_pref("CT2481020.ValidationData_Toolbar", 2);

Zeile gelöscht : user_pref("CT2481020._9b90e_.3c;7b=?ofb>>rhiqs.from_oldbar.enc", "OT81Lz4=");

Zeile gelöscht : user_pref("CT2481020._9b_7e.:2z527.from_oldbar.enc", "JH5xcT87Pj0zRz18OTcsdC59fXp7JTQrNiknTVpKUllLM09NQitENDQxMzJKQUw/OUNfXVI7VEREQEpDWlFcTlNufHlpIHdZeXxoUWpaW11XYHBncmRmamVkbDgtMHxlfm5vcWtxJXsneHp7fE[...]

Zeile gelöscht : user_pref("CT2481020._9b_7e.x305.from_oldbar.enc", "JH4qQTc3RDQzekY7PitzLXp9fCEyKTQ/VkZUUkxHSllaSFFQXlFSOWRZXEkySzk8Oz5QR1JdbGprb3htaFBqb3FxdCJWInZ5Zk9oVllYWm1kb3p7Mn1oNCkseGF6aGtqayB2Ii1AOjNGQD5HfklJ[...]

Zeile gelöscht : user_pref("CT2481020._key_cl_active.from_oldbar.enc", "ZDdhYWY5NDUtZTI4ZC00ZmUwLWI2YWUtOGVhNWM2OTI1N2Vi");

Zeile gelöscht : user_pref("CT2481020.active.from_oldbar.enc", "eWVz");

Zeile gelöscht : user_pref("CT2481020.addressBarTakeOverEnabledInHidden", "true");

Zeile gelöscht : user_pref("CT2481020.alertChannelId", "874426");

Zeile gelöscht : user_pref("CT2481020.autoDisableScopes", -1);

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474953462D584D503D263F2D2E3135443B464E4F5B565E695B426D6265523B544243464959505B637D737B6E55217578654E675[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e-x305", "247E29327641363937333545397E3F493B2F77317E202520362D3842474A58515A5C585D505F593964595C49324B393A3F395047525C4173686B6965677B796F6D7B6E552175785926766[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e.:2z527", "247E71713F3B3E3D33473D7C39372C742E7D7D7A7B25342B3629274D5A4A52594B334F4D422B4434343133324A414C3F39435F5D523B544444404A435A515C4E536E7C7969207759797[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e06cg5el8:", "6E6D686C6C74726F6E75");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74736E72727A7875747B242F4B49474F42357D5D5C3D");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6B60496252505451675[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e31;cj5@~@?@#ncf", "247E61393F236B257071747A2A212C6E414F444D327A34414C2B4C4B4C2F5A4F523F364124615651595457514A334C282E4F465134717462563F58494C5B525D406C6D76624[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e31;cjc<=fbj#mm", "247E61393F236B257576737A2A212C6E414F444D327A344F4849524E562F59593E3540236055505853565049324B2A2A4E4550335F5B6571563F584A5A515C3F7B717E242175[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e31;cjc<=fbj#ncf", "247E61393F236B25757677712A212C6E414F444D327A344F4849524E562F5A4F523F364124504C5662473049344B424D306C626F74716669676C7466767D7979732068614A6[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e31;cji8a k@c", "247E61393F236B256F75287E2A6C3F4D424B30783253424B2A554A4D3A313C7E4B47515D422B4436463D482B675D6A6F6C616462676F61717874746E7A635C455E50525354635A[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465F4F4C5451645B66797[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513F445559424C5A315C5154412A4333323037483F4A5E68565B5970606E6C666164734C776C6F5C455E4E4D4B51635A6579247[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4F524F6259647927767[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37504C4757514B4F47345F5457442D4637343A3A4B424D665E705B646571634A756A6D5A435C4D4A504F6158637C7179207[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4B524B4445494B49485450585952535F513863585B48314A3C3B363D4F46516F6B6E6D63776D687666507B707360496254534E54675[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C575A3B243D2F2F4037426358654D595B3D685D40645F4F38514342544B56776C79616D6F51796E6049625452655C672[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C32293423524C5457474A4E50565D4A61515F5D575255643D685D604D364F3D3E3E3D544B5645486A736D696F527D7275624B645253535[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b-0?3g>d", "3A706E3F6D42716F7A7376477620777B7B202520507D232A2654562A2957292D5E306030");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b-0?3g@6:5;", "");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B466068576C5E6857705A6C60606B6668563F73796F697861");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b3=>@44i48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b5ba==9cjag", "6A3C686D6B4073757A71757576464C4A4B4A7E507C");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D686C6C74726F6E74777572");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b90e@.3c;7b=?ofb>>rhiqs", "393F352F3E");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b9643g3/9e", "6A");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b<:222h64<", "393F352F3E");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b=+03eh8h8j?:", "4443");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9b?b0d:8aj62<h", "6D");

Zeile gelöscht : user_pref("CT2481020.backendstorage./9ba@0<0bi6a7gn:6@l?", "6C");

Zeile gelöscht : user_pref("CT2481020.backendstorage.11304", "31333335313131333133313937");

Zeile gelöscht : user_pref("CT2481020.backendstorage._key_cl_active", "64376161663934352D653238642D346665302D623661652D386561356336393235376562");

Zeile gelöscht : user_pref("CT2481020.backendstorage.active", "796573");

Zeile gelöscht : user_pref("CT2481020.backendstorage.cb_experience_000", "3234");

Zeile gelöscht : user_pref("CT2481020.backendstorage.cb_firstuse0100", "31");

Zeile gelöscht : user_pref("CT2481020.backendstorage.cb_user_id_000", "43423231373234373436363334355F46697265666F78");

Zeile gelöscht : user_pref("CT2481020.backendstorage.cbcountry_001", "4445");

Zeile gelöscht : user_pref("CT2481020.backendstorage.cbfirsttime", "53756E204F637420323820323031322032333A31343A323420474D542B30313030");

Zeile gelöscht : user_pref("CT2481020.backendstorage.cbopenmamsettings", "30");

Zeile gelöscht : user_pref("CT2481020.backendstorage.ctid", "435432343831303230");

Zeile gelöscht : user_pref("CT2481020.backendstorage.eule_tb_id", "46383833343837343230303938303636395447353633383736393932383835363539316438373335393635313031373832343937776530343030303732333734383535343634363568484B[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage.firstinstall", "796573");

Zeile gelöscht : user_pref("CT2481020.backendstorage.gsdomain", "");

Zeile gelöscht : user_pref("CT2481020.backendstorage.lastrun", "31333338393839303335323031");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appsconfig", "7B2241707073436F6E66696775726174696F6E223A5B7B226964223A22436C61726974795F416374697665222C2275726C223A22687474703A2F2F73746F726167652E636F6E647[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appsdefaultenabled", "66616C7365");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appstate_clarity_active", "6F6E");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appstate_easytobook", "6F6E");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appstate_easytobook_targeted", "6F6E");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appstate_pricegong", "6F6E");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appstate_windowshopper", "6F6E");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_appstatereporttime", "31333936373033373538353730");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_calledsetupservice", "31");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_currentversion", "312E31332E302E3137");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_eventscache", "7B2233376536353735312D383731662D343765662D613237342D323561316661323230613636223A7B22746F706963223A2273656E645573616765222C2264617461223A7B2263[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_existingusersrecoverydone", "31");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_first_time", "31");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_gadgetopen", "30");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_lastlogintime", "31333936373033373539393338");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_localization", "7B226469616C6F674F4B223A7B2254657874223A224F4B227D2C22646D626F7831223A7B2254657874223A22416E6765626F745C6E646573205461676573227D2C22646D626F7[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_mamenabled", "66616C7365");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_new_welcome_experience", "31");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_settings1.13.0.17", "7B22537461747573223A22737563636565646564222C2244617461223A7B2263757272656E7444617465223A223230313430343035222C22696E74657276616C223A3234[...]

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_showwelcomegadget", "74727565");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_stamp", "313130315F30");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_user_approval_interacted", "31");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_userborndate", "4E2F41");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_userid", "33343537363036302D333530652D343562302D386564382D313936373961653139366635");

Zeile gelöscht : user_pref("CT2481020.backendstorage.mam_gk_welcomedialogmode", "30");

Zeile gelöscht : user_pref("CT2481020.backendstorage.partner_id", "3937346665643236");

Zeile gelöscht : user_pref("CT2481020.backendstorage.pg_enable", "74727565");

Zeile gelöscht : user_pref("CT2481020.backendstorage.searchappstate", "31");

Zeile gelöscht : user_pref("CT2481020.backendstorage.searchapptracking", "31");

Zeile gelöscht : user_pref("CT2481020.backendstorage.sf_just_installed", "46414C5345");

Zeile gelöscht : user_pref("CT2481020.backendstorage.sf_status", "454E41424C4544");

Zeile gelöscht : user_pref("CT2481020.backendstorage.sf_user_id", "6369645F353432303134313531363334323137363535");

Zeile gelöscht : user_pref("CT2481020.backendstorage.shoppingapp.gk.exipres", "536174204F637420323020323031322031303A33303A333820474D542B30323030");

Zeile gelöscht : user_pref("CT2481020.backendstorage.shoppingapp.gk.geolocation", "6765726D616E79");

Zeile gelöscht : user_pref("CT2481020.backendstorage.shopupdate", "323031322D30322D3237");

Zeile gelöscht : user_pref("CT2481020.backendstorage.shopversionv2", "33");

Zeile gelöscht : user_pref("CT2481020.backendstorage.short", "30");

Zeile gelöscht : user_pref("CT2481020.backendstorage.tbready", "74727565");

Zeile gelöscht : user_pref("CT2481020.backendstorage.url_history0001", "687474703A2F2F7777772E70657363682D666F746F6772616669652E64652F73747564696F5F332E68746D6C3A3A3A636C69636B68616E646C65723A3A3A313336323133353832323[...]

Zeile gelöscht : user_pref("CT2481020.cb_experience_000.from_oldbar.enc", "MjQ=");

Zeile gelöscht : user_pref("CT2481020.cb_firstuse0100.from_oldbar.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.cb_user_id_000.from_oldbar.enc", "Q0IyMTcyNDc0NjYzNDVfRmlyZWZveA==");

Zeile gelöscht : user_pref("CT2481020.cbcountry_001.from_oldbar.enc", "REU=");

Zeile gelöscht : user_pref("CT2481020.cbfirsttime.from_oldbar.enc", "U3VuIE9jdCAyOCAyMDEyIDIzOjE0OjI0IEdNVCswMTAw");

Zeile gelöscht : user_pref("CT2481020.cbopenmamsettings.from_oldbar.enc", "MA==");

Zeile gelöscht : user_pref("CT2481020.countryCode", "DE");

Zeile gelöscht : user_pref("CT2481020.ctid.from_oldbar.enc", "Q1QyNDgxMDIw");

Zeile gelöscht : user_pref("CT2481020.embeddedsData", "[{\"appId\":\"129058856464656507\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

Zeile gelöscht : user_pref("CT2481020.eule_tb_id.from_oldbar.enc", "Rjg4MzQ4NzQyMDA5ODA2NjlURzU2Mzg3Njk5Mjg4NTY1OTFkODczNTk2NTEwMTc4MjQ5N3dlMDQwMDA3MjM3NDg1NTQ2NDY1aEhLS0o=");

Zeile gelöscht : user_pref("CT2481020.firstTimeDialogOpened", true);

Zeile gelöscht : user_pref("CT2481020.firstinstall.from_oldbar.enc", "eWVz");

Zeile gelöscht : user_pref("CT2481020.fixPageNotFoundErrorByUser", "TRUE");

Zeile gelöscht : user_pref("CT2481020.fixPageNotFoundErrorInHidden", "true");

Zeile gelöscht : user_pref("CT2481020.fullUserID", "UN68319594454060542.UP.20140405165817");

Zeile gelöscht : user_pref("CT2481020.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]

Zeile gelöscht : user_pref("CT2481020.globalFirstTimeInfoLastCheckTime", "Sat Apr 05 2014 15:15:55 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.gsdomain.from_oldbar.enc", "AA==");

Zeile gelöscht : user_pref("CT2481020.homepageProtectorEnableByLogin", true);

Zeile gelöscht : user_pref("CT2481020.homepageuserchanged", true);

Zeile gelöscht : user_pref("CT2481020.initDone", true);

Zeile gelöscht : user_pref("CT2481020.installId", "ConduitNSISIntegration");

Zeile gelöscht : user_pref("CT2481020.installType", "ConduitXPEIntegration");

Zeile gelöscht : user_pref("CT2481020.isAppTrackingManagerOn", true);

Zeile gelöscht : user_pref("CT2481020.isCheckedStartAsHidden", true);

Zeile gelöscht : user_pref("CT2481020.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

Zeile gelöscht : user_pref("CT2481020.isFirstRadioInstallation", false);

Zeile gelöscht : user_pref("CT2481020.isFirstTimeToolbarLoading", "false");

Zeile gelöscht : user_pref("CT2481020.isPerformedSmartBarTransition", "true");

Zeile gelöscht : user_pref("CT2481020.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

Zeile gelöscht : user_pref("CT2481020.keyword", true);

Zeile gelöscht : user_pref("CT2481020.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT2481020&octid=CT2481020&ISID=ISID_ID&SearchSource=15&CUI=UN68319594454060542&Lay=1&[...]

Zeile gelöscht : user_pref("CT2481020.lastVersion", "10.30.1.502");

Zeile gelöscht : user_pref("CT2481020.lastrun.from_oldbar.enc", "MTMzODk4OTAzNTIwMQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appStateReportTime", "%B7%B9%BF%BD%BC%B9%B7%B8%BE%BD%B9%BA%BC");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appStateReportTime.enc", "MTM5NzYzMTI4NzM0Ng==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appState_CouponBuddy", "%F5%F4");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appState_CouponBuddy.enc", "b24=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appState_Easytobook", "%F5%F4");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appState_Easytobook.enc", "b24=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appState_Easytobook_targeted", "%F5%F4");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appState_Easytobook_targeted.enc", "b24=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appState_WindowShopper", "%F5%F4");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appState_WindowShopper.enc", "b24=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJHZXREZWFsIiwidXJsIjpudWxsLCJzY3JpcHRVcmwiOiJodHRwOi8vY2RuLmdldGRtZWRpYS5jb20vd2lkZ2V0L2N1c3RvbS9jb25kdWl0L2NvbmR1aX[...]

Zeile gelöscht : user_pref("CT2481020.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appsdefaultenabled.from_oldbar.enc", "ZmFsc2U=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appstate_clarity_active.from_oldbar.enc", "b24=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_appstate_pricegong.from_oldbar.enc", "b24=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_calledSetupService", "%B7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_calledSetupService.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_currentBadgeValue", "%B7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_currentBadgeValue.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");

Zeile gelöscht : user_pref("CT2481020.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");

Zeile gelöscht : user_pref("CT2481020.mam_gk_currentversion.from_oldbar.enc", "MS4xMy4wLjE3");

Zeile gelöscht : user_pref("CT2481020.mam_gk_eventscache.from_oldbar.enc", "eyIzN2U2NTc1MS04NzFmLTQ3ZWYtYTI3NC0yNWExZmEyMjBhNjYiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXciL[...]

Zeile gelöscht : user_pref("CT2481020.mam_gk_existingUsersRecoveryDone", "%B7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_existingUsersRecoveryDone.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_first_time", "%B7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_first_time.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_gadgetopen.from_oldbar.enc", "MA==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_lastLoginTime", "%B7%B9%BF%BD%BC%B9%B7%B8%BE%BD%BD%BA%BA");

Zeile gelöscht : user_pref("CT2481020.mam_gk_lastLoginTime.enc", "MTM5NzYzMTI4Nzc0NA==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJBbmdlYm90XG5kZXMgVGFnZXMifSwiZG1ib3gyIjp7IlRleHQiOiJLb3N0ZW5sb3NlclxuVmVyc2FuZCJ9LCJkbWJ1bGxl[...]

Zeile gelöscht : user_pref("CT2481020.mam_gk_mamEnabled", "%EC%E7%F2%F9%EB");

Zeile gelöscht : user_pref("CT2481020.mam_gk_mamEnabled.enc", "ZmFsc2U=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_newApps", "%E1%u0101%A8%EF%EA%A8%C0%A8%CD%EB%FA%CA%EB%E7%F2%A8%B2%A8%F4%E7%F3%EB%A8%C0%A8%CD%EB%FA%CA%EB%E7%F2%A8%B2%A8%EA%EB%F9%E9%F8%EF%F6%FA%EF%F5%F4%A8%C0%A8%D4%EB%FC%E[...]

Zeile gelöscht : user_pref("CT2481020.mam_gk_newApps.enc", "W3siaWQiOiJHZXREZWFsIiwibmFtZSI6IkdldERlYWwiLCJkZXNjcmlwdGlvbiI6Ik5ldmVyIG1pc3MgYSBncmVhdCBkZWFsIVxuR2V0RGVhbCBhcHAgZGlzcGxheXMgdm91Y2hlciBjb2RlcyBhbmQgcHJvb[...]

Zeile gelöscht : user_pref("CT2481020.mam_gk_new_welcome_experience", "%B7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_new_welcome_experience.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");

Zeile gelöscht : user_pref("CT2481020.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_settings1.13.0.17", "%u0101%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0%u0101%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]

Zeile gelöscht : user_pref("CT2481020.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNDA0MTYiLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjExMDJfMSIsIlJUSyI6Ikg0c0lBQUFBQUFBRUFPeTl[...]

Zeile gelöscht : user_pref("CT2481020.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");

Zeile gelöscht : user_pref("CT2481020.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");

Zeile gelöscht : user_pref("CT2481020.mam_gk_showwelcomegadget.from_oldbar.enc", "dHJ1ZQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_stamp", "%B7%B7%B6%B8%E5%B7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_stamp.enc", "MTEwMl8x");

Zeile gelöscht : user_pref("CT2481020.mam_gk_userBornDate", "%D4%B5%C7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_userBornDate.enc", "Ti9B");

Zeile gelöscht : user_pref("CT2481020.mam_gk_userId", "%B9%BA%BB%BD%BC%B6%BC%B6%B3%B9%BB%B6%EB%B3%BA%BB%E8%B6%B3%BE%EB%EA%BE%B3%B7%BF%BC%BD%BF%E7%EB%B7%BF%BC%EC%BB");

Zeile gelöscht : user_pref("CT2481020.mam_gk_userId.enc", "MzQ1NzYwNjAtMzUwZS00NWIwLThlZDgtMTk2NzlhZTE5NmY1");

Zeile gelöscht : user_pref("CT2481020.mam_gk_user_approval_interacted", "%B7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_user_approval_interacted.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_userborndate.from_oldbar.enc", "Ti9B");

Zeile gelöscht : user_pref("CT2481020.mam_gk_welcomeDialogMode", "%B7");

Zeile gelöscht : user_pref("CT2481020.mam_gk_welcomeDialogMode.enc", "MQ==");

Zeile gelöscht : user_pref("CT2481020.mam_gk_welcomedialogmode.from_oldbar.enc", "MA==");

Zeile gelöscht : user_pref("CT2481020.myStuffEnabled", true);

Zeile gelöscht : user_pref("CT2481020.myStuffPublihserMinWidth", 400);

Zeile gelöscht : user_pref("CT2481020.myStuffSearchUrl", "hxxp://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

Zeile gelöscht : user_pref("CT2481020.myStuffServiceIntervalMM", 1440);

Zeile gelöscht : user_pref("CT2481020.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

Zeile gelöscht : user_pref("CT2481020.navigateToUrlOnSearch", false);

Zeile gelöscht : user_pref("CT2481020.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.trojaner-board.de%2F153776-windows-7-selbststaendig-oeffnende-internetseiten-sowohl-ie-m[...]

Zeile gelöscht : user_pref("CT2481020.oldAppsList", "129058856464344002,129058856464656507,111,1396366934000,129469746101488132,129582129482516486,129058856485125843,129591023557460541,129058856483563306,1293990997005[...]

Zeile gelöscht : user_pref("CT2481020.originalHomepage", "hxxp://www.stern.de/");

Zeile gelöscht : user_pref("CT2481020.originalSearchAddressUrl", "");

Zeile gelöscht : user_pref("CT2481020.originalSearchEngine", "chrome://browser-region/locale/region.properties");

Zeile gelöscht : user_pref("CT2481020.partner_id.from_oldbar.enc", "OTc0ZmVkMjY=");

Zeile gelöscht : user_pref("CT2481020.performedDomainChangesMigration", "true");

Zeile gelöscht : user_pref("CT2481020.pg_enable.from_oldbar.enc", "dHJ1ZQ==");

Zeile gelöscht : user_pref("CT2481020.revertSettingsEnabled", true);

Zeile gelöscht : user_pref("CT2481020.search.searchAppId", "129058856464656507");

Zeile gelöscht : user_pref("CT2481020.search.searchCount", "0");

Zeile gelöscht : user_pref("CT2481020.searchFromAddressBarEnabledByUser", "true");

Zeile gelöscht : user_pref("CT2481020.searchInNewTabEnabledByUser", "true");

Zeile gelöscht : user_pref("CT2481020.searchInNewTabEnabledInHidden", "true");

Zeile gelöscht : user_pref("CT2481020.searchProtectorDialogDelayInSec", 10);

Zeile gelöscht : user_pref("CT2481020.searchProtectorEnableByLogin", true);

Zeile gelöscht : user_pref("CT2481020.searchSuggestEnabledByUser", "false");

Zeile gelöscht : user_pref("CT2481020.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2481020\"}");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://AshampooDE.OurToolbar.com//xpi\"}");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Ashampoo DE \"}");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_Configuration_lastUpdate", "1400090513893");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1399671957901");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_appsMetadata_lastUpdate", "1400090506925");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1399996000989");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_login_10.20.101.5_lastUpdate", "1397631264477");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_login_10.29.0.520_lastUpdate", "1399314573403");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_login_10.30.1.502_lastUpdate", "1400104905978");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1399996001437");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_searchAPI_lastUpdate", "1400090510544");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_serviceMap_lastUpdate", "1400090506905");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_toolbarContextMenu_lastUpdate", "1400090506933");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_toolbarSettings_lastUpdate", "1400104911462");

Zeile gelöscht : user_pref("CT2481020.serviceLayer_services_translation_lastUpdate", "1400090506894");

Zeile gelöscht : user_pref("CT2481020.settingsINI", true);

Zeile gelöscht : user_pref("CT2481020.sf_just_installed.from_oldbar.enc", "RkFMU0U=");

Zeile gelöscht : user_pref("CT2481020.sf_status.from_oldbar.enc", "RU5BQkxFRA==");

Zeile gelöscht : user_pref("CT2481020.sf_user_id.from_oldbar.enc", "Y2lkXzU0MjAxNDE1MTYzNDIxNzY1NQ==");

Zeile gelöscht : user_pref("CT2481020.shopupdate.from_oldbar.enc", "MjAxMi0wMi0yNw==");

Zeile gelöscht : user_pref("CT2481020.shopversionv2.from_oldbar.enc", "Mw==");

Zeile gelöscht : user_pref("CT2481020.short.from_oldbar.enc", "MA==");

Zeile gelöscht : user_pref("CT2481020.showToolbarPermission", "false");

Zeile gelöscht : user_pref("CT2481020.smartbar.CTID", "CT2481020");

Zeile gelöscht : user_pref("CT2481020.smartbar.Uninstall", "0");

Zeile gelöscht : user_pref("CT2481020.smartbar.homepage", true);

Zeile gelöscht : user_pref("CT2481020.smartbar.toolbarName", "Ashampoo DE ");

Zeile gelöscht : user_pref("CT2481020.tbready.from_oldbar.enc", "dHJ1ZQ==");

Zeile gelöscht : user_pref("CT2481020.testingCtid", "");

Zeile gelöscht : user_pref("CT2481020.toolbarAppMetaDataLastCheckTime", "Sat Apr 05 2014 15:15:55 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.toolbarBornServerTime", "27-2-2012");

Zeile gelöscht : user_pref("CT2481020.toolbarContextMenuLastCheckTime", "Sat Apr 05 2014 15:15:55 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.toolbarCurrentServerTime", "15-5-2014");

Zeile gelöscht : user_pref("CT2481020.toolbarLoginClientTime", "Sat Apr 05 2014 16:58:53 GMT+0200");

Zeile gelöscht : user_pref("CT2481020.upgradeFromOBVersion", true);

Zeile gelöscht : user_pref("CT2481020.url_history0001.from_oldbar.enc", "aHR0cDovL3d3dy5wZXNjaC1mb3RvZ3JhZmllLmRlL3N0dWRpb18zLmh0bWw6OjpjbGlja2hhbmRsZXI6OjoxMzYyMTM1ODIyMzIyLCwsaHR0cDovL3d3dy5wZXNjaC1mb3RvZ3JhZmllLmRl[...]

Zeile gelöscht : user_pref("CT2481020.usagesFlag", 2);

Zeile gelöscht : user_pref("CT2481020_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1400107161452,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

Zeile gelöscht : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2481020&SearchSource=13");

Zeile gelöscht : user_pref("CommunityToolbar.ConduitSearchList", "Ashampoo DE Customized Web Search");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2481020/CT2481020", "\"c6270ef7edfd31ef0b09fb1e3f0d57d53\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/DE", "\"6862b5913ececafd0a11254687dbe24d\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2481020", "\"1396366946\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=de", "xH5gZuB5wgZMFquO1C5Gkg==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=de&ctid=CT2481020", "yQwYB9yhbRPOuNVa8vLx1w==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=de", "BugvtOPAgavik7d5sx09GA==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=de&ctid=CT2481020", "SrNx4wUGYvsKSMfm1+2Bug==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=de", "xSyQ+g7hC2lyUxR9e/hUnA==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=de&ctid=CT2481020", "/ayd+aHQnnsoWiwmBJL7RQ==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de", "2e9rbE8zjLWgB2aTkpsFqA==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de&ctid=CT2481020", "ELZ98WgUZoDNemlnxkMBLA==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de&ctid=CT2481020&UM=UM_UNINSTALL_ID", "ELZ98WgUZoDNemlnxkMBLA==");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"c70353cabc2ce1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"0d648794549cd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"80b45d28468cd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"dfe74040abc2ce1:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2481020", "\"7097fd37277b6a1b754b125bd11d0197\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equalizer_dead.gif", "\"0678fe477ac91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimize.gif", "\"046c7ab477ac91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gif", "\"0484de117c4c91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gif", "\"0e7a152347ac91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif", "\"087c778347ac91:0\"");

Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"1c259e240a643931c0165b0cc12a2a8f\"");

Zeile gelöscht : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Jessi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\f5o8h95g.default\\conduitCommon\\modules\\3.16.0.3");

Zeile gelöscht : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.16.0.3");

Zeile gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_cf19b69b", "356x332");

Zeile gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");

Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2481020");

Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2481020");

Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList4", "CT2481020");

Zeile gelöscht : user_pref("CommunityToolbar.globalUserId", "90c0021f-9dee-4e3f-864a-01a09b49220e");

Zeile gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

Zeile gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

Zeile gelöscht : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2481020");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Apr 05 2014 15:15:55 GMT+0200");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sat Apr 05 2014 15:16:01 GMT+0200");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.locale", "en");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sat Apr 05 2014 15:15:53 GMT+0200");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");

Zeile gelöscht : user_pref("CommunityToolbar.notifications.showTrayIcon", false);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);

Zeile gelöscht : user_pref("CommunityToolbar.notifications.userId", "d3b6b30b-7a51-4f35-87d6-4124c75b64ad");

Zeile gelöscht : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.stern.de/");

Zeile gelöscht : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties");

Zeile gelöscht : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?CUI=UN68319594454060542&ctid=CT2481020&SearchSource=13");

Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");

Zeile gelöscht : user_pref("Smartbar.TBHomepagesList", "hxxp://search.conduit.com/?CUI=UN68319594454060542&ctid=CT2481020&SearchSource=13");

Zeile gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT2481020");

Zeile gelöscht : user_pref("browser.search.defaultengine", "Ask.com");

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");

Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "Ashampoo DE Customized Web Search");

Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=3&q={searchTerms}");

Zeile gelöscht : user_pref("browser.search.order.1", "Ask.com");

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");

Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&q=");

Zeile gelöscht : user_pref("extensions.crossrider.bic", "145cfa79918eb5388b3da5cf5dd0c195");

Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);

Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);

Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);

Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);

Zeile gelöscht : user_pref("extensions.helperbar.backPageCapacity", 3);

Zeile gelöscht : user_pref("extensions.helperbar.backPageCounter", 0);

Zeile gelöscht : user_pref("extensions.helperbar.backPageDay", 29);

Zeile gelöscht : user_pref("extensions.helperbar.backPageLastEvent", "1398621673579");

Zeile gelöscht : user_pref("extensions.helperbar.backPageMinInterval", 15);

Zeile gelöscht : user_pref("extensions.helperbar.barcodeid", "134300");

Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de");

Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "ry_3005_ch");

Zeile gelöscht : user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\\"ExcludeDomains\\\":[\\\"snap.do\\\",\\\"snapdo.com\\\",\\\"www.only-apartments.es\\\",\\\"www.only-apartments.de\\\",\\\"www.only-apar[...]

Zeile gelöscht : user_pref("extensions.helperbar.fromautoupdate", "false");

Zeile gelöscht : user_pref("extensions.helperbar.installationid", "9a59cdf5-17d8-d82e-3d51-9f407f60a9d5");

Zeile gelöscht : user_pref("extensions.helperbar.installdate", "29/04/2014");

Zeile gelöscht : user_pref("extensions.helperbar.keepAliveLastevent", "1398794472");

Zeile gelöscht : user_pref("extensions.helperbar.lastExternalJsUpdate", "1399321507775");

Zeile gelöscht : user_pref("extensions.helperbar.publisher", "shoppinghelper");

Zeile gelöscht : user_pref("id_chatzum.firstlaunch", "0");

Zeile gelöscht : user_pref("id_chatzum.guid", "%7BED468CA6-DF60-3563-3ED2-D6BB89E3C53D%7D");

Zeile gelöscht : user_pref("id_chatzum.hiddenvisual", 0);

Zeile gelöscht : user_pref("id_chatzum.openSearchEngineName", "Google");

Zeile gelöscht : user_pref("id_chatzum.searchengine", "Google");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar1", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar10", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar2", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar3", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar4", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar5", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar6", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar7", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar8", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.SVar9", "%13");

Zeile gelöscht : user_pref("id_chatzum.variables.Var1", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var10", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var2", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var3", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var4", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var5", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var6", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var7", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var8", "0");

Zeile gelöscht : user_pref("id_chatzum.variables.Var9", "0");

Zeile gelöscht : user_pref("id_chatzum_installed_version", "1.0.19");

Zeile gelöscht : user_pref("id_chatzum_tabpage", "hxxp%3A//searchsafer.com/");

Zeile gelöscht : user_pref("iminent.adapters", "{\"www.sweet-page.com\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\":2,\"AdapterKey\":\"default_adapter\",\"v\":true,\"p\":0,\"t\":1,\"th\":0.228,\"expireTime\":\"[...]

Zeile gelöscht : user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"10bb6277-6b2b-413e-8d82-ad9398543254\",\"name\":\"Dealply\",\"addonId\":1,\"url\":\"//i.iminentjs.info/imitin/javascript.js\",\"queryS[...]

Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&octid=CT2481020&CUI=UN68319594454060542&UM=&SearchSource=2&q=");

Zeile gelöscht : user_pref("smartbar.addressBarOwnerCTID", "CT2481020");

Zeile gelöscht : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2481020&SearchSource=13,hxxp://search.conduit.com/?CUI=UN68319594454060542&ctid=CT2481020&SearchSource=13");

Zeile gelöscht : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&CU[...]

Zeile gelöscht : user_pref("smartbar.homePageOwnerCTID", "CT2481020");

Zeile gelöscht : user_pref("smartbar.homepageList", "hxxp://search.conduit.com/?ctid=CT2481020&SearchSource=13,hxxp://search.conduit.com/?CUI=UN68319594454060542&ctid=CT2481020&SearchSource=13");

Zeile gelöscht : user_pref("smartbar.machineId", "JHSHD7FBEIL2OSPE97J4IIC6HOGSTACZZL5PEYBRJOKJF9WMN06SUGIEKVEM5B/PGYJL3JZP11WHLW8YU0ZCQG");

Zeile gelöscht : user_pref("smartbar.searchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&CUI=UN683[...]

Zeile gelöscht : user_pref("valueApps.CT2481020.SF_JUST_INSTALLED", "46414C5345");

Zeile gelöscht : user_pref("valueApps.CT2481020.SF_JUST_INSTALLED.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.SF_STATUS", "454E41424C4544");

Zeile gelöscht : user_pref("valueApps.CT2481020.SF_STATUS.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.SF_USER_ID", "6369645F333532303134323135383938303234353335");

Zeile gelöscht : user_pref("valueApps.CT2481020.SF_USER_ID.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020._key_cl_active", "35613963366238382D636538392D343232652D393665372D326335346265303330393537");

Zeile gelöscht : user_pref("valueApps.CT2481020._key_cl_active.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.cb_experience_000", "32");

Zeile gelöscht : user_pref("valueApps.CT2481020.cb_experience_000.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.cb_firstuse0100", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.cb_firstuse0100.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.cb_user_id_000", "43423138373631343338333235305F313339393731343530363537385F46697265666F78");

Zeile gelöscht : user_pref("valueApps.CT2481020.cb_user_id_000.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.cbfirsttime", "536174204D617920303320323031342032313A35383A303920474D542B30323030");

Zeile gelöscht : user_pref("valueApps.CT2481020.cbfirsttime.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appStateReportTime", "31343030313035353133353932");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appStateReportTime.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_Clarity_Active", "6F6E");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_Clarity_Active.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_CouponBuddy", "6F6E");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_CouponBuddy.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_Easytobook", "6F6E");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_Easytobook.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_Easytobook_targeted", "6F6E");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_Easytobook_targeted.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_PriceGong", "6F6E");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_PriceGong.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_WindowShopper", "6F6E");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appState_WindowShopper.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appsConfig.storedInFile", true);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appsDefaultEnabled", "6E756C6C");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_appsDefaultEnabled.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_calledSetupService", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_calledSetupService.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_currentBadgeValue", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_currentBadgeValue.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_currentVersion", "312E31332E302E3137");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_currentVersion.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_eventsCache", "7B2261613266623735632D656438342D343531622D626366362D613161313765306437303732223A7B22746F706963223A2273656E645573616765222C2264617461223A7B226361746[...]

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_eventsCache.storedInFile", true);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_existingUsersRecoveryDone", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_existingUsersRecoveryDone.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_first_time", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_first_time.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_gadgetOpen", "30");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_gadgetOpen.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_lastLoginTime", "31343030313035353133383536");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_lastLoginTime.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_localization.storedInFile", true);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_mamEnabled", "66616C7365");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_mamEnabled.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_migrated_from_ls", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_migrated_from_ls.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_newApps", "5B5D");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_newApps.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_new_welcome_experience", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_new_welcome_experience.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_settings1.13.0.17.storedInFile", true);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_showWelcomeGadget", "66616C7365");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_showWelcomeGadget.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_stamp", "313130325F31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_stamp.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_userBornDate", "4E2F41");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_userBornDate.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_userId", "37393231643664382D336139622D346266642D386131302D323033623130383834643030");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_userId.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_user_approval_interacted", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_user_approval_interacted.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_welcomeDialogMode", "31");

Zeile gelöscht : user_pref("valueApps.CT2481020.mam_gk_welcomeDialogMode.storedInFile", false);

Zeile gelöscht : user_pref("valueApps.CT2481020.url_history0001.storedInFile", true);

Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.sweet-page.com", "not set");

Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_whiteListSearch", "{\"isearch.babylon.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home.mywebsearch.com\":\"se[...]
 

-\\ Google Chrome v
 

*************************
 

AdwCleaner[R0].txt - [147408 octets] - [15/05/2014 19:46:09]

AdwCleaner[R1].txt - [147497 octets] - [15/05/2014 19:47:16]

AdwCleaner[S0].txt - [363 octets] - [15/05/2014 19:46:51]

AdwCleaner[S1].txt - [145016 octets] - [15/05/2014 19:48:28]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [145078 octets] ##########

Schramme

15.05.2014 19:42

hier die JRT:

Code:



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 7 Home Premium x64

Ran by Christian on 15.05.2014 at 20:05:25,02

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\Users\Christian\appdata\locallow\myashampoo"
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\Christian\AppData\Roaming\mozilla\firefox\profiles\cux27v6n.default\minidumps [84 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 15.05.2014 at 20:11:51,09

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

und zu guter Letzt die neue FRST:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01

Ran by Christian (administrator) on *****-PC on 15-05-2014 20:29:38

Running from C:\Users\Christian\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(brother Industries Ltd) C:\Windows\SysWOW64\BRSS01A.EXE

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(mst software GmbH, Germany) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 7\DfSdkS.exe

(T-Systems International GmbH) C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFInject64.exe

(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe

() C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\ccsvchst.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\ccsvchst.exe

(CyberLink) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe

(LenovoEMC Ltd.) C:\Program Files (x86)\LenovoEMC Storage Manager\pCloudd.exe

(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe

() C:\Program Files\Iomega\Quikprotect\QpMonitor.exe

(EMC Corporation) C:\Program Files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe

(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe

(PacketVideo) C:\Program Files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe

() C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

() C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe

(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe

() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe

() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe

(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

(Dropbox, Inc.) C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe

(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [itype] => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2342800 2009-05-28] (Microsoft Corporation)

HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [610360 2009-07-08] ()

HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)

HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)

HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [PPort12reminder] => C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe [328992 2010-02-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [UIWatcher] => C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [3508568 2009-02-23] (ashampoo GmbH & Co. KG)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jessi\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Policies\Explorer: [NoCDBurning] 1

HKU\SCANNERMAP\...\Run: [Akamai NetSession Interface] => C:\Users\Jessi\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\SCANNERMAP\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-05-07] (Google Inc.)

HKU\SCANNERMAP\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)

HKU\SCANNERMAP\...\Run: [UIWatcher] => C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [3508568 2009-02-23] (ashampoo GmbH & Co. KG)

HKU\SCANNERMAP\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)

HKU\SCANNERMAP\...\Run: [genesis] => "c:\users\jessi\appdata\local\genesis\genesis.exe" /r

HKU\SCANNERMAP\...\Run: [GoogleChromeAutoLaunch_F51A6D0EEE39DF9BB15E2444D1233C4B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

HKU\SCANNERMAP\...\Run: [AdobeBridge] => [X]

HKU\SCANNERMAP\...\Policies\Explorer: [NoCDBurning] 1

HKU\SCANNERMAP\...\MountPoints2: {99e6b394-a973-11de-ad27-806e6f6e6963} - E:\start.exe

Startup: C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk

ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

Startup: C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:13810

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://signin.ebay.de/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=77&ru=http%3A%2F%2Fmy.ebay.de%2Fws%2FeBayISAPI.dll%3FMyEbayBeta%26MyEbay%3D%26ssPageName%3DADME%253AB%253ATB4%253ADE%253A1%26guest%3D1&pageType=3984

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKLM - {134B5A9E-37E4-4B34-93B8-94ED49FF6DDB} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de

SearchScopes: HKLM - {25E3C058-0862-4EA6-9592-A8852FFC76C2} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06

SearchScopes: HKLM - {57948E9B-85E2-4A57-B023-93A71375A317} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {134B5A9E-37E4-4B34-93B8-94ED49FF6DDB} URL = 

SearchScopes: HKCU - {25E3C058-0862-4EA6-9592-A8852FFC76C2} URL = 

SearchScopes: HKCU - {57948E9B-85E2-4A57-B023-93A71375A317} URL = 

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)

BHO-x32: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

BHO-x32: amazon - {84B94901-3645-4D80-A6B7-4D0050B19455} - C:\Program Files (x86)\Preispiraten6\IEButtonAmazonInterface.dll ()

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Tunebite_WebRipPlugin Class - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: eBay - {CD9B7762-DFBC-42B1-BB30-02A78287B456} - C:\Program Files (x86)\Preispiraten6\IEButtonEbayInterface.dll ()

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

BHO-x32: Preispiraten - {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} - C:\Program Files (x86)\Preispiraten6\IEButtonPPInterface.dll ()

BHO-x32: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\coIEPlg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {28B66320-9687-4B13-8757-36F901887AB5} hxxp://www.photodose.de/ips-opdata/operator/69189345/objects/canvasx.cab

DPF: HKLM-x32 {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} hxxp://www.photodose.de/ips-opdata/operator/69189345/objects/jordan.cab

DPF: HKLM-x32 {72376E32-8AF2-473F-BE32-E5D0F39C865D} hxxp://de.cyberlink.com/prog/win7/js/UpdateAdvisor.cab

DPF: HKLM-x32 {B1953AD6-C50E-11D3-B020-00A0C9251384} hxxp://www.o2c.de/download/O2CPlayer.CAB

DPF: HKLM-x32 {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} hxxp://office.microsoft.com/officeupdate/content/opuc4.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

DPF: HKLM-x32 {EDFCB7CB-942C-4822-AF14-F0B687409848} https://www.fotopostonline.de/ImageUploader4.cab

Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File

Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default

FF Homepage: hxxp://www.ytong-bausatzhaus.de/

FF NetworkProxy: "type", 4

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)

FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.5 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\elemhidehelper@adblockplus.org.xpi [2014-05-11]

FF Extension: Adblock Plus - C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-11]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-04-14]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-04-14]

FF HKLM-x32\...\Firefox\Extensions: [tunebite-firefox-surf-and-catch-extension@audials.com] - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\

FF Extension: Tunebite Firefox Surf and Catch Plugin - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ []

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\ []

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFF [2013-10-09]

FF HKLM-x32\...\Thunderbird\Extensions: [{857610fe-b36c-47f2-b4fa-6b7affe0cf5a}] - C:\Program Files (x86)\Mobile Master\ext\1\

FF Extension: Mobile Master Add-In - C:\Program Files (x86)\Mobile Master\ext\1\ []
 

Chrome: 

=======

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

CHR Extension: (No Name) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddkeieaieohnceanbhdeijclgemgjjkf [2014-05-07]

CHR Extension: (No Name) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpmlnedpdikbgdghljdepnljfpkhccn [2012-09-23]

CHR Extension: (No Name) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljmibnagodajacnnbifpamhggcohblip [2014-04-29]

CHR Extension: (Norton Identity Protection) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-01-23]

CHR Extension: (Google Wallet) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-23]

CHR HKLM-x32\...\Chrome\Extension: [bejnhdlplbjhffionohbdnpcbobfejcc] - C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\Exts\Chrome.crx [2014-05-02]
 

==================== Services (Whitelisted) =================
 

S2 Brother XP spl Service; C:\Windows\SysWOW64\brsvc01a.exe [57344 2002-04-12] (brother Industries Ltd)

R2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 7\DfsdkS.exe [544768 2009-08-24] (mst software GmbH, Germany)

R2 DFSVC; C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFInject64.exe [376832 2009-10-21] (T-Systems International GmbH)

S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-04-01] (Hewlett-Packard Company)

S2 Irmon; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)

R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)

R2 PCloudd; C:\Program Files (x86)\LenovoEMC Storage Manager\pCloudd.exe [215040 2013-07-07] (LenovoEMC Ltd.)

R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)

R2 QPCopyEngine; C:\Program Files\Iomega\Quikprotect\QpMonitor.exe [458240 2012-09-07] ()

R2 RetroExpLauncher; C:\Program Files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe [115992 2008-07-16] (EMC Corporation)

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [24576 2014-05-06] (Realtek Semiconductor.)

R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)

R2 TwonkyMedia; C:\Program Files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe [512840 2012-02-03] (PacketVideo)

R2 TwonkyWebDav; C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe [250696 2012-02-03] ()

R2 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe [884608 2012-05-14] ()

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [635160 2014-04-04] (Wacom Technology, Corp.)

S2 LightsOff; "C:\ProgramData\LightsOff\up\2.6.80\LightsOffService.exe" "C:\ProgramData\LightsOff\up\2.6.80\LightsOff.exe"
 

==================== Drivers (Whitelisted) ====================
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20140409.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)

S3 BioNTDrv; C:\Program Files\Paragon Software\Festplatten Manager 14 Professional\program\BioNTDrv.SYS [19720 2014-02-14] (Paragon Software Group)

R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1405000.01C\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)

S3 DFSYS; C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFSYS64.SYS [17952 2009-10-15] (T-Systems International GmbH)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-05-05] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-05-05] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20140514.001\IDSvia64.sys [525016 2014-03-31] (Symantec Corporation)

R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()

S3 MosIrUsb; C:\Windows\System32\DRIVERS\MosIrUsb.sys [27648 2007-10-11] ()

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20140514.034\ENG64.SYS [126040 2014-05-05] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20140514.034\EX64.SYS [2099288 2014-05-05] (Symantec Corporation)

S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)

S3 OXSDIDRV_x64; C:\Windows\System32\DRIVERS\OXSDIDRV_x64.sys [51760 2009-09-28] ()

S3 OXUDIDRV; C:\Windows\system32\Drivers\OXUDIDRV_X64.sys [31280 2010-05-25] ()

S3 PolarUSB; C:\Windows\SysWOW64\DRIVERS\PolarUSB.sys [17343 2001-07-12] (Polar Electro)

R3 QsFsFltr; C:\Windows\System32\DRIVERS\QsFsFltr.sys [22584 2012-08-20] (Windows (R) Win 7 DDK provider)

S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31264 2009-11-03] (RapidSolution Software AG)

R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31264 2009-11-03] (RapidSolution Software AG)

R3 SipIMNDI; C:\Windows\System32\DRIVERS\SipIMNDI64.sys [28192 2009-10-15] (T-Systems International GmbH)

S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()

R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1405000.01C\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1405000.01C\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\N360x64\1405000.01C\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\N360x64\1405000.01C\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\N360x64\1405000.01C\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1405000.01C\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)

R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2014-02-14] ()

R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2014-02-14] ()

R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700424 2014-02-14] ()

R3 vNICdrv; C:\Windows\System32\DRIVERS\vNICdrv.sys [20048 2012-05-11] (Iomega Corporation)

U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; c:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [146928 2009-07-23] (CyberLink Corp.)

S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]

S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]

S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-15 20:11 - 2014-05-15 20:27 - 00001011 _____ () C:\Users\Christian\Desktop\JRT.txt

2014-05-15 20:05 - 2014-05-15 20:05 - 00000000 ____D () C:\Windows\ERUNT

2014-05-15 20:04 - 2014-05-15 20:04 - 01016261 _____ (Thisisu) C:\Users\Christian\Desktop\JRT.exe

2014-05-15 19:48 - 2014-05-15 19:56 - 00145236 _____ () C:\Users\Christian\Desktop\AdwCleaner[S1].txt

2014-05-15 19:46 - 2014-05-15 20:29 - 00000000 ____D () C:\AdwCleaner

2014-05-15 19:43 - 2014-05-15 19:43 - 01325827 _____ () C:\Users\Christian\Desktop\adwcleaner_3.208.exe

2014-05-15 19:32 - 2014-05-15 19:57 - 00000261 _____ () C:\Users\Christian\Desktop\mbam.txt

2014-05-15 18:02 - 2014-05-15 20:01 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-15 18:02 - 2014-05-15 18:02 - 00001138 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-15 18:02 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-05-15 18:02 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-05-15 18:02 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-05-15 00:49 - 2014-05-15 00:50 - 00000000 ____D () C:\Users\TEMP.Pesch-PC.000

2014-05-15 00:49 - 2014-05-15 00:49 - 00000000 ____D () C:\Users\TEMP.Pesch-PC\AppData\Local\VirtualStore

2014-05-15 00:42 - 2014-05-15 00:49 - 00000000 ____D () C:\Users\TEMP.Pesch-PC

2014-05-14 21:18 - 2014-05-14 21:20 - 00066460 _____ () C:\Users\Jessi\Desktop\Addition.txt

2014-05-14 20:19 - 2014-05-14 21:20 - 00102036 _____ () C:\Users\Jessi\Desktop\FRST.txt

2014-05-14 20:19 - 2014-05-14 16:34 - 00001318 _____ () C:\Users\Jessi\Desktop\Revo Uninstaller.lnk

2014-05-14 20:18 - 2014-05-12 01:08 - 02066944 _____ (Farbar) C:\Users\Jessi\Desktop\FRST64.exe

2014-05-14 20:16 - 2014-05-14 20:16 - 00000472 _____ () C:\Users\Jessi\Desktop\defogger_disable.log

2014-05-14 20:16 - 2014-05-14 20:16 - 00000472 _____ () C:\Users\Christian\Desktop\defogger_disable.log

2014-05-14 20:16 - 2014-05-14 20:16 - 00000000 _____ () C:\Users\Jessi\defogger_reenable

2014-05-14 20:16 - 2014-05-11 17:24 - 00050477 _____ () C:\Users\Jessi\Desktop\Defogger.exe

2014-05-14 19:00 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-14 19:00 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-14 19:00 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-14 19:00 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-14 19:00 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-14 19:00 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-14 18:52 - 2014-05-14 18:52 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-14 18:49 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-14 18:49 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-14 18:49 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-05-14 18:49 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-05-14 18:49 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-05-14 18:49 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-05-14 18:49 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-05-14 18:49 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-05-14 18:49 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-05-14 18:49 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-05-14 18:49 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-05-14 18:49 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-14 18:49 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-05-14 18:49 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-05-14 18:49 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-05-14 18:49 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-05-14 18:49 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-14 18:49 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-14 18:49 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-05-14 18:49 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-05-14 18:14 - 2014-05-14 18:14 - 00003270 _____ () C:\Windows\System32\Tasks\{1E8AC37E-D3BB-4DCC-83BE-0C63DB341F68}

2014-05-14 17:57 - 2014-05-14 17:57 - 00068638 _____ () C:\ComboFix.txt

2014-05-14 17:24 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-05-14 17:24 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-05-14 17:24 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-05-14 17:18 - 2014-05-14 17:57 - 00000000 ____D () C:\Qoobox

2014-05-14 17:18 - 2014-05-14 17:55 - 00000000 ____D () C:\Windows\erdnt

2014-05-14 17:09 - 2014-05-14 17:10 - 05200050 _____ (Swearware) C:\Users\Christian\Downloads\ComboFix(1).exe

2014-05-14 17:09 - 2014-05-14 17:09 - 05200050 ____R (Swearware) C:\Users\Christian\Desktop\ComboFix.exe

2014-05-14 16:34 - 2014-05-14 16:34 - 00001318 _____ () C:\Users\Christian\Desktop\Revo Uninstaller.lnk

2014-05-14 16:34 - 2014-05-14 16:34 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-05-14 16:33 - 2014-05-14 16:33 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Christian\Downloads\revosetup95.exe

2014-05-14 16:21 - 2014-05-15 19:57 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup

2014-05-12 19:45 - 2014-05-12 19:45 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360

2014-05-12 18:51 - 2014-05-12 18:51 - 00042450 _____ () C:\Users\Christian\Desktop\Desktop.zip

2014-05-12 18:47 - 2014-05-12 18:47 - 00043386 _____ () C:\Users\Christian\Desktop\logfiles.zip

2014-05-12 17:55 - 2014-05-15 19:51 - 00007216 _____ () C:\Windows\PFRO.log

2014-05-12 07:49 - 2014-05-12 07:49 - 00001262 _____ () C:\Users\Christian\Desktop\trojaner-board.txt

2014-05-12 07:36 - 2014-05-12 07:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2014-05-12 07:36 - 2014-05-12 07:36 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2014-05-12 06:39 - 2014-05-12 06:39 - 00055206 _____ () C:\Users\Christian\Desktop\Gmer.txt

2014-05-12 01:05 - 2014-05-11 18:04 - 00380416 _____ () C:\Users\Christian\Desktop\Gmer-19357.exe

2014-05-12 01:04 - 2014-05-11 17:24 - 00050477 _____ () C:\Users\Christian\Desktop\Defogger.exe

2014-05-12 01:03 - 2014-05-12 01:08 - 02066944 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe

2014-05-11 17:55 - 2014-05-11 17:57 - 00070978 _____ () C:\Users\Christian\Desktop\Addition.txt

2014-05-11 17:47 - 2014-05-15 20:29 - 00030801 _____ () C:\Users\Christian\Desktop\FRST.txt

2014-05-11 17:47 - 2014-05-15 20:29 - 00000000 ____D () C:\FRST

2014-05-11 17:26 - 2014-05-11 17:27 - 00000480 _____ () C:\Users\Christian\Downloads\defogger_disable.log

2014-05-11 17:26 - 2014-05-11 17:26 - 00000000 _____ () C:\Users\Christian\defogger_reenable

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\ProgramData\Package Cache

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\Program Files\Adblock Plus for IE

2014-05-11 14:42 - 2014-05-13 11:06 - 00000000 ____D () C:\Users\Christian\Downloads\Bedienungsanleitungen

2014-05-11 14:25 - 2014-05-11 14:25 - 00001336 _____ () C:\Windows\IE11_main.log

2014-05-10 11:20 - 2014-05-15 19:53 - 00000896 _____ () C:\Windows\setupact.log

2014-05-10 11:20 - 2014-05-10 11:20 - 00000000 _____ () C:\Windows\setuperr.log

2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-10 06:43 - 2014-05-10 06:43 - 00003548 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-15 00:36 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 06:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 00:08 - 00001255 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Nico Mak Computing

2014-05-10 00:08 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe

2014-05-10 00:07 - 2014-05-10 00:07 - 04892480 _____ (WinZip International LLC ) C:\Users\Jessi\Downloads\wzmp_8.exe

2014-05-09 23:41 - 2014-05-13 18:20 - 00000000 ____D () C:\Users\Jessi\AppData\Local\LightsOff

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup.exe

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup(1).exe

2014-05-09 23:24 - 2014-05-09 23:24 - 02077392 _____ (Microsoft Corporation) C:\Users\Christian\Downloads\IE11-Windows6.1.exe

2014-05-09 23:17 - 2014-05-09 23:17 - 01356664 _____ () C:\Windows\system32\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:12 - 2014-05-09 23:12 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:08 - 2014-05-14 17:04 - 00000000 ____D () C:\Users\Christian\AppData\Local\LightsOff

2014-05-09 23:07 - 2014-05-14 17:01 - 00000000 ____D () C:\ProgramData\LightsOff

2014-05-08 20:29 - 2014-05-08 20:29 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1(1).xpi

2014-05-08 20:28 - 2014-05-08 20:28 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1.xpi

2014-05-08 19:40 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-05-08 19:40 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Program Files\Realtek

2014-05-08 18:48 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-05-08 18:48 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-05-08 18:48 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-05-08 18:48 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-05-08 18:48 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-05-08 18:48 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-05-08 18:48 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-05-08 18:48 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-05-08 18:48 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-05-08 18:48 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-05-08 18:48 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-05-08 18:48 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-05-08 18:48 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-05-08 18:48 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-05-08 18:48 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-05-08 18:48 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-05-08 18:47 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-05-08 18:47 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-05-08 18:47 - 2012-08-23 15:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-05-08 18:47 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-05-08 18:47 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-05-08 18:47 - 2012-08-23 11:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-05-08 18:45 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-05-08 18:45 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-05-08 18:45 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2014-05-08 18:45 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2014-05-08 18:20 - 2014-05-08 18:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\DropboxMaster

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Program Files (x86)\Paragon Software

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\ImageStorage

2014-05-07 09:38 - 2014-05-07 09:38 - 00002472 _____ () C:\Users\Christian\Desktop\Paragon Recovery Media Builder™.lnk

2014-05-07 09:38 - 2014-05-07 09:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Recovery Media Builder

2014-05-07 09:36 - 2014-05-07 09:36 - 00002483 _____ () C:\Users\Public\Desktop\Paragon Festplatten Manager™ 14 Professional.lnk

2014-05-07 09:36 - 2014-05-07 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:29 - 2014-05-07 09:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_blockmounter_01_09_00.Wdf

2014-05-07 09:26 - 2014-05-07 09:26 - 00003122 _____ () C:\Windows\System32\Tasks\{92236A19-9683-4ACF-92F3-1023691EB6F5}

2014-05-07 01:59 - 2014-05-07 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\dlg

2014-05-07 01:56 - 2014-05-07 01:56 - 00000000 ____D () C:\Program Files\Google

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Security System 2

2014-05-07 01:28 - 2014-05-07 01:28 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Downloaded Installations

2014-05-07 00:55 - 2014-05-07 00:55 - 00003232 _____ () C:\Windows\System32\Tasks\{CCAEAFB8-B227-4463-B7B4-768C5109CD9B}

2014-05-07 00:51 - 2014-05-07 00:54 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000.exe

2014-05-07 00:48 - 2014-05-07 00:48 - 00003298 _____ () C:\Windows\System32\Tasks\{CB6EC068-6806-42CB-A914-30BCF36B7A95}

2014-05-07 00:42 - 2014-05-07 00:44 - 54721832 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_RMBInstallx64_10.1.21.471_000.exe

2014-05-07 00:41 - 2014-05-07 00:45 - 175107584 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_BMBInstallSNU_10.1.21.471_000.msi

2014-05-07 00:39 - 2014-05-07 00:43 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000(1).exe

2014-05-07 00:35 - 2014-05-07 00:35 - 02113272 _____ (Nexway) C:\Users\Christian\Downloads\Download your order 21308190.exe

2014-05-06 08:08 - 2014-05-06 08:08 - 00024576 _____ (Realtek Semiconductor.) C:\Windows\SetupAfterRebootService.exe

2014-05-06 07:30 - 2013-11-26 15:49 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys

2014-05-06 07:30 - 2013-11-26 15:49 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-05-06 07:23 - 2014-05-06 07:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\NVIDIA

2014-05-06 05:56 - 2014-05-14 19:04 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-06 01:12 - 2014-05-06 01:12 - 00000000 ____D () C:\ProgramData\redistpart

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\Users\Christian\.kchmviewer

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\ProgramData\chmview

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\launcher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\explauncher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\deletepart

2014-05-06 01:06 - 2014-05-07 09:38 - 00000000 ____D () C:\Program Files\Paragon Software

2014-05-06 00:24 - 2014-05-06 00:24 - 00000000 ____D () C:\Users\Jessi\AppData\Local\ilividmoviestoolbar20

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\AppData\Local\cache

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\.android

2014-04-29 19:25 - 2014-04-29 19:25 - 00002539 _____ () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-04-29 19:17 - 2014-04-29 19:30 - 00511192 _____ (Installer) C:\Users\Jessi\Downloads\Paragon Partition Manager.exe

2014-04-25 18:13 - 2014-04-25 18:13 - 00033814 _____ () C:\Users\Christian\Downloads\Speedport_w921v_1.34.000_25.04.14_1813.bin

2014-04-24 23:10 - 2014-04-24 23:10 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.dll

2014-04-24 01:12 - 2014-05-07 09:25 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA Corporation

2014-04-24 01:11 - 2014-04-24 01:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA

2014-04-23 16:10 - 2014-04-23 16:10 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\NVIDIA

2014-04-23 15:40 - 2014-04-23 15:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\NVIDIA Corporation

2014-04-23 15:39 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2014-04-23 15:38 - 2014-05-07 09:26 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-04-23 15:38 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-04-23 15:32 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-04-23 15:32 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-04-23 15:19 - 2014-04-23 16:06 - 00007656 _____ () C:\Users\Jessi\AppData\Local\resmon.resmoncfg

2014-04-22 19:34 - 2010-06-17 12:02 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2014-04-22 19:24 - 2014-04-22 19:24 - 00002047 _____ () C:\Users\Public\Desktop\Live Update 5.lnk

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\Program Files (x86)\MSI

2014-04-22 19:24 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieUserList

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieSiteList

2014-04-22 00:13 - 2014-04-22 00:13 - 00000000 ____D () C:\Users\Christian\.android

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-04-22 00:09 - 2014-03-17 18:13 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys

2014-04-22 00:08 - 2014-04-04 01:55 - 01946904 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01922328 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01560344 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01556760 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll

2014-04-22 00:08 - 2014-03-17 18:13 - 00095032 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys

2014-04-22 00:08 - 2014-03-17 18:13 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys

2014-04-22 00:08 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll

2014-04-21 23:59 - 2010-03-03 13:33 - 03311616 _____ () C:\Users\Christian\Desktop\sp46206.iso

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieUserList

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieSiteList

2014-04-21 14:22 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-04-21 14:22 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-04-21 14:22 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-21 14:22 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-04-21 14:22 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-21 14:22 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-21 14:22 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-04-21 14:22 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-21 14:22 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-21 14:22 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-04-21 14:22 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-04-21 14:22 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-21 14:22 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-21 14:22 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-04-21 14:22 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-04-21 14:22 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-04-21 14:22 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-04-21 14:22 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-04-21 14:22 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-21 14:22 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-04-21 14:22 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-04-21 14:22 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-04-21 14:22 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-04-21 14:22 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-04-21 14:22 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-04-21 14:22 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-04-21 14:22 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-04-21 14:22 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-04-21 14:22 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-04-21 14:22 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-21 14:22 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-04-21 14:22 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-21 14:22 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-04-21 14:22 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-04-21 14:22 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-21 14:22 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-04-21 14:22 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-04-21 14:22 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-04-21 14:22 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-21 14:22 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-21 14:22 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-04-21 14:22 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-04-21 14:22 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-04-21 14:22 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-04-18 15:25 - 2014-04-18 15:25 - 00003902 _____ () C:\Users\Jessi\Downloads\qrcode (2).eps

2014-04-17 14:09 - 2014-04-24 08:18 - 00007597 _____ () C:\Users\Christian\AppData\Local\resmon.resmoncfg

2014-04-17 08:55 - 2014-04-17 08:55 - 00020108 _____ () C:\Users\Jessi\Downloads\qrcode (1).eps

2014-04-16 14:20 - 2014-04-16 14:21 - 00000000 ____D () C:\Users\Jessi\Documents\CCleaner Sicherungen

2014-04-16 14:02 - 2014-05-07 01:58 - 00000860 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-04-16 14:02 - 2014-05-07 01:58 - 00000000 ____D () C:\Program Files\CCleaner

2014-04-16 14:02 - 2014-04-16 14:02 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-16 14:02 - 2014-04-16 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-04-16 12:35 - 2014-04-16 12:36 - 04787368 _____ (Piriform Ltd) C:\Users\Christian\Downloads\ccsetup412.exe

2014-04-16 10:31 - 2014-04-16 10:31 - 87932539 _____ () C:\Users\Jessi\Desktop\Unbenannt-1.psd

2014-04-15 14:20 - 2014-04-15 14:20 - 00335419 _____ () C:\Users\Jessi\Downloads\minicard_template_us.psd

2014-04-15 01:09 - 2014-04-15 01:09 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\chc
 

==================== One Month Modified Files and Folders =======
 

2014-05-15 20:30 - 2014-05-11 17:47 - 00030801 _____ () C:\Users\Christian\Desktop\FRST.txt

2014-05-15 20:29 - 2014-05-15 19:46 - 00000000 ____D () C:\AdwCleaner

2014-05-15 20:29 - 2014-05-11 17:47 - 00000000 ____D () C:\FRST

2014-05-15 20:29 - 2013-08-27 19:18 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{60E385A9-8176-4701-99EB-10008026103C}

2014-05-15 20:27 - 2014-05-15 20:11 - 00001011 _____ () C:\Users\Christian\Desktop\JRT.txt

2014-05-15 20:13 - 2012-08-27 00:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-15 20:05 - 2014-05-15 20:05 - 00000000 ____D () C:\Windows\ERUNT

2014-05-15 20:04 - 2014-05-15 20:04 - 01016261 _____ (Thisisu) C:\Users\Christian\Desktop\JRT.exe

2014-05-15 20:03 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-15 20:03 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-15 20:01 - 2014-05-15 18:02 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-15 20:00 - 2014-04-14 16:12 - 01842380 _____ () C:\Windows\WindowsUpdate.log

2014-05-15 19:57 - 2014-05-15 19:32 - 00000261 _____ () C:\Users\Christian\Desktop\mbam.txt

2014-05-15 19:57 - 2014-05-14 16:21 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup

2014-05-15 19:56 - 2014-05-15 19:48 - 00145236 _____ () C:\Users\Christian\Desktop\AdwCleaner[S1].txt

2014-05-15 19:56 - 2012-03-05 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Dropbox

2014-05-15 19:55 - 2012-09-07 23:09 - 00000000 ____D () C:\ProgramData\twonkyserver

2014-05-15 19:54 - 2013-07-13 10:03 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240.job

2014-05-15 19:53 - 2014-05-10 11:20 - 00000896 _____ () C:\Windows\setupact.log

2014-05-15 19:53 - 2009-09-18 21:39 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-05-15 19:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-15 19:51 - 2014-05-12 17:55 - 00007216 _____ () C:\Windows\PFRO.log

2014-05-15 19:48 - 2009-11-26 20:30 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-15 19:48 - 2009-11-03 23:13 - 00000000 ____D () C:\Users\Jessi

2014-05-15 19:48 - 2009-11-03 22:10 - 00000000 ____D () C:\Users\Christian

2014-05-15 19:46 - 2009-11-05 23:30 - 00000000 ____D () C:\Users\Christian\AppData\Local\CrashDumps

2014-05-15 19:43 - 2014-05-15 19:43 - 01325827 _____ () C:\Users\Christian\Desktop\adwcleaner_3.208.exe

2014-05-15 19:35 - 2007-11-07 15:48 - 00000000 ____D () C:\Users\Christian\Downloads\Systemoptimierung

2014-05-15 18:02 - 2014-05-15 18:02 - 00001138 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-15 06:57 - 2009-11-03 22:20 - 00000000 ___RD () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-15 06:57 - 2009-11-03 22:20 - 00000000 ___RD () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-15 00:50 - 2014-05-15 00:49 - 00000000 ____D () C:\Users\TEMP.Pesch-PC.000

2014-05-15 00:49 - 2014-05-15 00:49 - 00000000 ____D () C:\Users\TEMP.Pesch-PC\AppData\Local\VirtualStore

2014-05-15 00:49 - 2014-05-15 00:42 - 00000000 ____D () C:\Users\TEMP.Pesch-PC

2014-05-15 00:36 - 2014-05-10 00:08 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector

2014-05-14 21:20 - 2014-05-14 21:18 - 00066460 _____ () C:\Users\Jessi\Desktop\Addition.txt

2014-05-14 21:20 - 2014-05-14 20:19 - 00102036 _____ () C:\Users\Jessi\Desktop\FRST.txt

2014-05-14 20:16 - 2014-05-14 20:16 - 00000472 _____ () C:\Users\Jessi\Desktop\defogger_disable.log

2014-05-14 20:16 - 2014-05-14 20:16 - 00000472 _____ () C:\Users\Christian\Desktop\defogger_disable.log

2014-05-14 20:16 - 2014-05-14 20:16 - 00000000 _____ () C:\Users\Jessi\defogger_reenable

2014-05-14 20:13 - 2013-09-24 13:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-05-14 20:13 - 2012-04-03 22:35 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-14 20:13 - 2011-05-15 14:31 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-14 19:16 - 2012-01-24 11:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Dropbox

2014-05-14 19:13 - 2009-11-03 23:14 - 00000000 ___RD () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-14 19:13 - 2009-11-03 23:14 - 00000000 ___RD () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-14 19:04 - 2014-05-06 05:56 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-14 19:00 - 2009-11-04 20:33 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-14 18:59 - 2013-08-16 03:03 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-14 18:54 - 2009-11-06 20:54 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-05-14 18:52 - 2014-05-14 18:52 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-14 18:42 - 2013-08-09 08:17 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E4580F7C-853D-40E3-B912-7FF04D2BCC42}

2014-05-14 18:39 - 2012-01-24 12:01 - 00000000 ___RD () C:\Users\Jessi\Dropbox

2014-05-14 18:14 - 2014-05-14 18:14 - 00003270 _____ () C:\Windows\System32\Tasks\{1E8AC37E-D3BB-4DCC-83BE-0C63DB341F68}

2014-05-14 17:57 - 2014-05-14 17:57 - 00068638 _____ () C:\ComboFix.txt

2014-05-14 17:57 - 2014-05-14 17:18 - 00000000 ____D () C:\Qoobox

2014-05-14 17:57 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-05-14 17:55 - 2014-05-14 17:18 - 00000000 ____D () C:\Windows\erdnt

2014-05-14 17:49 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-05-14 17:45 - 2009-07-14 04:34 - 92536832 _____ () C:\Windows\system32\config\software.bak

2014-05-14 17:45 - 2009-07-14 04:34 - 18612224 _____ () C:\Windows\system32\config\system.bak

2014-05-14 17:45 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\default.bak

2014-05-14 17:45 - 2009-07-14 04:34 - 00090112 _____ () C:\Windows\system32\config\sam.bak

2014-05-14 17:45 - 2009-07-14 04:34 - 00024576 _____ () C:\Windows\system32\config\security.bak

2014-05-14 17:24 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-05-14 17:10 - 2014-05-14 17:09 - 05200050 _____ (Swearware) C:\Users\Christian\Downloads\ComboFix(1).exe

2014-05-14 17:09 - 2014-05-14 17:09 - 05200050 ____R (Swearware) C:\Users\Christian\Desktop\ComboFix.exe

2014-05-14 17:04 - 2014-05-09 23:08 - 00000000 ____D () C:\Users\Christian\AppData\Local\LightsOff

2014-05-14 17:01 - 2014-05-09 23:07 - 00000000 ____D () C:\ProgramData\LightsOff

2014-05-14 16:34 - 2014-05-14 20:19 - 00001318 _____ () C:\Users\Jessi\Desktop\Revo Uninstaller.lnk

2014-05-14 16:34 - 2014-05-14 16:34 - 00001318 _____ () C:\Users\Christian\Desktop\Revo Uninstaller.lnk

2014-05-14 16:34 - 2014-05-14 16:34 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-05-14 16:33 - 2014-05-14 16:33 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Christian\Downloads\revosetup95.exe

2014-05-14 16:25 - 2011-07-08 08:35 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

2014-05-14 16:20 - 2012-03-05 02:00 - 00000000 ___RD () C:\Users\Christian\Dropbox

2014-05-13 19:47 - 2009-09-19 07:25 - 00712618 _____ () C:\Windows\system32\perfh007.dat

2014-05-13 19:47 - 2009-09-19 07:25 - 00155654 _____ () C:\Windows\system32\perfc007.dat

2014-05-13 19:47 - 2009-07-14 07:13 - 01656700 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-13 18:20 - 2014-05-09 23:41 - 00000000 ____D () C:\Users\Jessi\AppData\Local\LightsOff

2014-05-13 11:06 - 2014-05-11 14:42 - 00000000 ____D () C:\Users\Christian\Downloads\Bedienungsanleitungen

2014-05-12 19:45 - 2014-05-12 19:45 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360

2014-05-12 19:39 - 2013-08-08 08:39 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-05-12 19:39 - 2013-06-01 11:35 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64

2014-05-12 19:38 - 2013-06-01 11:35 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360

2014-05-12 18:51 - 2014-05-12 18:51 - 00042450 _____ () C:\Users\Christian\Desktop\Desktop.zip

2014-05-12 18:47 - 2014-05-12 18:47 - 00043386 _____ () C:\Users\Christian\Desktop\logfiles.zip

2014-05-12 18:05 - 2010-04-25 00:14 - 00000000 ____D () C:\Program Files\WinRAR

2014-05-12 07:49 - 2014-05-12 07:49 - 00001262 _____ () C:\Users\Christian\Desktop\trojaner-board.txt

2014-05-12 07:36 - 2014-05-12 07:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2014-05-12 07:36 - 2014-05-12 07:36 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2014-05-12 06:39 - 2014-05-12 06:39 - 00055206 _____ () C:\Users\Christian\Desktop\Gmer.txt

2014-05-12 01:08 - 2014-05-14 20:18 - 02066944 _____ (Farbar) C:\Users\Jessi\Desktop\FRST64.exe

2014-05-12 01:08 - 2014-05-12 01:03 - 02066944 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe

2014-05-12 00:08 - 2007-11-07 15:42 - 00000000 ____D () C:\Users\Christian\Downloads\Windows Vista

2014-05-11 18:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-05-11 18:04 - 2014-05-12 01:05 - 00380416 _____ () C:\Users\Christian\Desktop\Gmer-19357.exe

2014-05-11 17:57 - 2014-05-11 17:55 - 00070978 _____ () C:\Users\Christian\Desktop\Addition.txt

2014-05-11 17:27 - 2014-05-11 17:26 - 00000480 _____ () C:\Users\Christian\Downloads\defogger_disable.log

2014-05-11 17:26 - 2014-05-11 17:26 - 00000000 _____ () C:\Users\Christian\defogger_reenable

2014-05-11 17:24 - 2014-05-14 20:16 - 00050477 _____ () C:\Users\Jessi\Desktop\Defogger.exe

2014-05-11 17:24 - 2014-05-12 01:04 - 00050477 _____ () C:\Users\Christian\Desktop\Defogger.exe

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\ProgramData\Package Cache

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\Program Files\Adblock Plus for IE

2014-05-11 14:25 - 2014-05-11 14:25 - 00001336 _____ () C:\Windows\IE11_main.log

2014-05-10 11:29 - 2009-11-08 16:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\CrashDumps

2014-05-10 11:20 - 2014-05-10 11:20 - 00000000 _____ () C:\Windows\setuperr.log

2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-10 06:43 - 2014-05-10 06:43 - 00003548 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector

2014-05-10 06:37 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 00:08 - 00001255 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Nico Mak Computing

2014-05-10 00:07 - 2014-05-10 00:07 - 04892480 _____ (WinZip International LLC ) C:\Users\Jessi\Downloads\wzmp_8.exe

2014-05-09 23:33 - 2014-04-14 19:02 - 00001672 _____ () C:\Windows\system32\ASOROSet.bin

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup.exe

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup(1).exe

2014-05-09 23:24 - 2014-05-09 23:24 - 02077392 _____ (Microsoft Corporation) C:\Users\Christian\Downloads\IE11-Windows6.1.exe

2014-05-09 23:17 - 2014-05-09 23:17 - 01356664 _____ () C:\Windows\system32\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:12 - 2014-05-09 23:12 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:09 - 2009-11-09 00:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Move Networks

2014-05-09 23:03 - 2014-04-14 19:02 - 00000000 ____D () C:\Windows\system32\config\RCCBakup

2014-05-09 22:48 - 2014-04-14 19:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-09 22:48 - 2012-05-27 10:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-09 12:35 - 2009-11-05 23:10 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-05-09 08:14 - 2014-05-14 18:49 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-09 08:11 - 2014-05-14 18:49 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-08 23:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-05-08 20:43 - 2013-10-16 16:07 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240

2014-05-08 20:43 - 2009-11-26 20:30 - 00004112 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-05-08 20:29 - 2014-05-08 20:29 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1(1).xpi

2014-05-08 20:28 - 2014-05-08 20:28 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1.xpi

2014-05-08 19:18 - 2011-11-10 16:43 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Akamai

2014-05-08 19:15 - 2009-11-07 02:47 - 00000000 ____D () C:\Program Files (x86)\Preispiraten6

2014-05-08 18:54 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-05-08 18:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Program Files\Realtek

2014-05-08 18:20 - 2014-05-08 18:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\DropboxMaster

2014-05-08 18:20 - 2012-03-05 02:00 - 00001035 _____ () C:\Users\Christian\Desktop\Dropbox.lnk

2014-05-08 18:20 - 2012-03-05 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Program Files (x86)\Paragon Software

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\ImageStorage

2014-05-07 09:38 - 2014-05-07 09:38 - 00002472 _____ () C:\Users\Christian\Desktop\Paragon Recovery Media Builder™.lnk

2014-05-07 09:38 - 2014-05-07 09:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Recovery Media Builder

2014-05-07 09:38 - 2014-05-06 01:06 - 00000000 ____D () C:\Program Files\Paragon Software

2014-05-07 09:36 - 2014-05-07 09:36 - 00002483 _____ () C:\Users\Public\Desktop\Paragon Festplatten Manager™ 14 Professional.lnk

2014-05-07 09:36 - 2014-05-07 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:29 - 2014-05-07 09:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_blockmounter_01_09_00.Wdf

2014-05-07 09:26 - 2014-05-07 09:26 - 00003122 _____ () C:\Windows\System32\Tasks\{92236A19-9683-4ACF-92F3-1023691EB6F5}

2014-05-07 09:26 - 2014-04-23 15:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-05-07 09:26 - 2011-04-30 11:21 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-05-07 09:26 - 2011-04-30 11:20 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-05-07 09:26 - 2009-09-18 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-05-07 09:25 - 2014-04-24 01:12 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA Corporation

2014-05-07 09:22 - 2009-09-18 21:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools

2014-05-07 02:10 - 2005-04-06 20:00 - 00000000 ____D () C:\Users\Christian\Documents\Sicherungsdateien

2014-05-07 02:00 - 2009-11-26 20:30 - 00000000 ____D () C:\Users\Christian\AppData\Local\Google

2014-05-07 01:59 - 2014-05-07 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\dlg

2014-05-07 01:58 - 2014-04-16 14:02 - 00000860 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-05-07 01:58 - 2014-04-16 14:02 - 00000000 ____D () C:\Program Files\CCleaner

2014-05-07 01:58 - 2011-02-16 20:52 - 00000000 ____D () C:\ProgramData\Google

2014-05-07 01:56 - 2014-05-07 01:56 - 00000000 ____D () C:\Program Files\Google

2014-05-07 01:56 - 2007-06-22 22:59 - 00000000 ____D () C:\Program Files (x86)\Google

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Security System 2

2014-05-07 01:28 - 2014-05-07 01:28 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Downloaded Installations

2014-05-07 00:55 - 2014-05-07 00:55 - 00003232 _____ () C:\Windows\System32\Tasks\{CCAEAFB8-B227-4463-B7B4-768C5109CD9B}

2014-05-07 00:54 - 2014-05-07 00:51 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000.exe

2014-05-07 00:48 - 2014-05-07 00:48 - 00003298 _____ () C:\Windows\System32\Tasks\{CB6EC068-6806-42CB-A914-30BCF36B7A95}

2014-05-07 00:45 - 2014-05-07 00:41 - 175107584 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_BMBInstallSNU_10.1.21.471_000.msi

2014-05-07 00:45 - 2010-06-18 17:47 - 00000000 ____D () C:\Users\Christian\AppData\Local\Downloaded Installations

2014-05-07 00:44 - 2014-05-07 00:42 - 54721832 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_RMBInstallx64_10.1.21.471_000.exe

2014-05-07 00:43 - 2014-05-07 00:39 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000(1).exe

2014-05-07 00:35 - 2014-05-07 00:35 - 02113272 _____ (Nexway) C:\Users\Christian\Downloads\Download your order 21308190.exe

2014-05-06 08:08 - 2014-05-06 08:08 - 00024576 _____ (Realtek Semiconductor.) C:\Windows\SetupAfterRebootService.exe

2014-05-06 07:30 - 2009-09-18 21:38 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-05-06 07:30 - 2009-09-18 21:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-05-06 07:23 - 2014-05-06 07:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\NVIDIA

2014-05-06 06:40 - 2014-05-14 19:00 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 06:17 - 2014-05-14 19:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 05:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\spool

2014-05-06 05:25 - 2014-05-14 19:00 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-06 05:07 - 2014-05-14 19:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-06 05:00 - 2014-05-14 19:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-06 04:10 - 2014-05-14 19:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-06 01:12 - 2014-05-06 01:12 - 00000000 ____D () C:\ProgramData\redistpart

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\Users\Christian\.kchmviewer

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\ProgramData\chmview

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\launcher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\explauncher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\deletepart

2014-05-06 00:24 - 2014-05-06 00:24 - 00000000 ____D () C:\Users\Jessi\AppData\Local\ilividmoviestoolbar20

2014-05-01 15:33 - 2012-04-28 00:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hager

2014-04-29 19:30 - 2014-04-29 19:17 - 00511192 _____ (Installer) C:\Users\Jessi\Downloads\Paragon Partition Manager.exe

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\AppData\Local\cache

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\.android

2014-04-29 19:25 - 2014-04-29 19:25 - 00002539 _____ () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-04-25 18:13 - 2014-04-25 18:13 - 00033814 _____ () C:\Users\Christian\Downloads\Speedport_w921v_1.34.000_25.04.14_1813.bin

2014-04-24 23:10 - 2014-04-24 23:10 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.dll

2014-04-24 08:18 - 2014-04-17 14:09 - 00007597 _____ () C:\Users\Christian\AppData\Local\resmon.resmoncfg

2014-04-24 01:11 - 2014-04-24 01:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA

2014-04-23 16:20 - 2013-07-08 20:04 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\WTablet

2014-04-23 16:10 - 2014-04-23 16:10 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\NVIDIA

2014-04-23 16:06 - 2014-04-23 15:19 - 00007656 _____ () C:\Users\Jessi\AppData\Local\resmon.resmoncfg

2014-04-23 15:40 - 2014-04-23 15:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\NVIDIA Corporation

2014-04-23 06:27 - 2010-07-19 18:41 - 00000000 ____D () C:\ProgramData\Recovery

2014-04-22 19:34 - 2009-09-18 21:36 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-04-22 19:24 - 2014-04-22 19:24 - 00002047 _____ () C:\Users\Public\Desktop\Live Update 5.lnk

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\Program Files (x86)\MSI

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieUserList

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieSiteList

2014-04-22 00:13 - 2014-04-22 00:13 - 00000000 ____D () C:\Users\Christian\.android

2014-04-22 00:13 - 2013-07-08 23:27 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\WTablet

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-04-22 00:09 - 2011-06-19 17:47 - 00000000 ____D () C:\Program Files\Tablet

2014-04-22 00:09 - 2009-11-09 00:13 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieUserList

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieSiteList

2014-04-19 19:09 - 2009-11-03 22:11 - 00103304 _____ () C:\Users\Christian\AppData\Local\GDIPFONTCACHEV1.DAT

2014-04-19 17:11 - 2009-07-14 06:45 - 05206728 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-04-18 15:25 - 2014-04-18 15:25 - 00003902 _____ () C:\Users\Jessi\Downloads\qrcode (2).eps

2014-04-18 15:18 - 2009-11-06 09:36 - 00103304 _____ () C:\Users\Jessi\AppData\Local\GDIPFONTCACHEV1.DAT

2014-04-17 09:11 - 2010-10-13 13:53 - 00001456 _____ () C:\Users\Jessi\AppData\Local\Adobe Für Web speichern 12.0 Prefs

2014-04-17 08:55 - 2014-04-17 08:55 - 00020108 _____ () C:\Users\Jessi\Downloads\qrcode (1).eps

2014-04-16 14:21 - 2014-04-16 14:20 - 00000000 ____D () C:\Users\Jessi\Documents\CCleaner Sicherungen

2014-04-16 14:20 - 2010-09-12 17:58 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\FileZilla

2014-04-16 14:07 - 2012-07-30 08:04 - 00000000 ____D () C:\Program Files (x86)\PDFCreator

2014-04-16 14:07 - 2009-11-14 15:57 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-04-16 14:07 - 2009-11-05 20:11 - 00000000 ___DC () C:\Users\Christian\AppData\Local\MigWiz

2014-04-16 14:03 - 2009-11-09 02:13 - 00000000 __SHD () C:\Users\Christian\UserData

2014-04-16 14:02 - 2014-04-16 14:02 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-16 14:02 - 2014-04-16 14:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-04-16 12:36 - 2014-04-16 12:35 - 04787368 _____ (Piriform Ltd) C:\Users\Christian\Downloads\ccsetup412.exe

2014-04-16 10:31 - 2014-04-16 10:31 - 87932539 _____ () C:\Users\Jessi\Desktop\Unbenannt-1.psd

2014-04-16 04:59 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

2014-04-15 14:20 - 2014-04-15 14:20 - 00335419 _____ () C:\Users\Jessi\Downloads\minicard_template_us.psd

2014-04-15 01:09 - 2014-04-15 01:09 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\chc
 

Some content of TEMP:

====================

C:\Users\Christian\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkn0r9w.dll

C:\Users\Christian\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe

[2014-05-14 18:49] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
 

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-09 00:25
 

==================== End Of Log ============================

--- --- ---

[/CODE]

schrauber

16.05.2014 11:56

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Schramme

17.05.2014 09:29

Hallo Schrauber,

so, jetzt sind alle Überprüfungen soweit abgeschlossen. Es geht los mit log.txt zu eset:

Code:



ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=8b8817f5e6c32d4f8070861df455d858

# engine=18291

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=false

# utc_time=2014-05-16 09:04:20

# local_time=2014-05-16 11:04:20 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=3592 16777213 100 91 304393 150936756 0 0

# compatibility_mode=5893 16776574 100 94 23872657 151904110 0 0

# scanned=655956

# found=31

# cleaned=0

# scan_time=17606

sh=4E475FD620FBCCBB37453AF2BD0427BDA73109FF ft=1 fh=70875884387ffbdb vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir"

sh=EC7EC5D60C5A578BC9953115D368BECD05BA14B2 ft=1 fh=ecbff00cc7dcc0fd vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir"

sh=9E5037640E13714D8EE739B0E32A4511B35BB01A ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\YontooLayers.crx.vir"

sh=4B0F3C79BAB3B47DAC180CAECB53ED7A294B0B35 ft=1 fh=873e80e27dcd41ab vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll.vir"

sh=B2C09DC8D9F5020A619DA4E5975BD8B5A0C1DB7D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com\extensionData\plugins\91.js.vir"

sh=B2C09DC8D9F5020A619DA4E5975BD8B5A0C1DB7D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Jessi\AppData\Roaming\Mozilla\Firefox\Profiles\f5o8h95g.default\Extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com\extensionData\plugins\91.js.vir"

sh=728F515AB73EB772788F1D8ACF59BF61E57EFD2B ft=1 fh=bfec4c72175eec0e vn="Win32/RegistryBooster evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Jessi\AppData\Roaming\Uniblue\RegistryBooster\_temp\ub.exe.vir"

sh=7560ADB6881D658A46F52AD1DCDF667B615F6EDE ft=1 fh=19f14dde2ee67322 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe"

sh=95D8C7F2851240F836D46EBD0DCB0BBAE3C9C3C8 ft=1 fh=c39b2415a29978f2 vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\IePluginService\PluginService.exe.vir"

sh=B2C09DC8D9F5020A619DA4E5975BD8B5A0C1DB7D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\91.js.vir"

sh=B2C09DC8D9F5020A619DA4E5975BD8B5A0C1DB7D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Jessi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.41_0\extensionData\plugins\91.js.vir"

sh=B6A79A5C350DFC95E745D98DA898D10E80D163A3 ft=1 fh=57403c7ab7dc29f6 vn="Win32/AnyProtect.D evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Jessi\AppData\Local\AnyProtectScannerSetup.exe.vir"

sh=1618471111D8844A6D733ACAFE7E7DE015F5E509 ft=0 fh=0000000000000000 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\AppData\Roaming\Nico Mak Computing\WinZip Malware Protector\Quarantine\pup.optional._qt_"

sh=9C6D5E10448F2D57DF89F710ED71A56F2F711D19 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.Yontoo.A Anwendung" ac=I fn="C:\Users\Christian\AppData\Roaming\Nico Mak Computing\WinZip Malware Protector\Quarantine\trojan.agent._qt_"

sh=1616B1C70B0F61EBEA21F07C8CC58446CFC110F2 ft=1 fh=d6d862cdd4151c07 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\Systemoptimierung\ashampoo_core_tuner_1.21_sm.exe"

sh=D77484B376B37B06BE3744EBCDF142B11376BCC9 ft=1 fh=67cf66f14de8bbd9 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\Systemoptimierung\ashampoo_powerup_3_3.23_sm.exe"

sh=EBC93221229C4F75668C7AED8E388E043487A4E1 ft=1 fh=819ba330986eb922 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\Systemoptimierung\ashampoo_uninstaller_4_4.12_sm.exe"

sh=E4A22680C801446A6B6D1C1F5F93014ED82AFAAE ft=1 fh=7921dd23103a49c3 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\Systemoptimierung\ashampoo_winoptimizer_7_7.20_sm.exe"

sh=879AA1110D88E707AEBC86697FB4F858B7AD1E67 ft=1 fh=6046ee2803ed69e5 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\Systemoptimierung\ashampoo_winoptimizer_7_7.24_sm.exe"

sh=61C240550725DEADBD656A22E24FB11BD3C1D151 ft=1 fh=08840a59d7cb215f vn="Win32/RegistryBooster evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\Systemoptimierung\powersuite.exe"

sh=6CF8A9F031B45F70BE3E66E7ACC7449CDA15FA34 ft=1 fh=2de4b6f517306153 vn="Win32/Toolbar.Widgi evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\weitere Anwendungen\pdf-creator\PDFCreator-1_2_3_setup.exe"

sh=D77484B376B37B06BE3744EBCDF142B11376BCC9 ft=1 fh=67cf66f14de8bbd9 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\ashampoo_powerup_3_3.23_sm.exe"

sh=879AA1110D88E707AEBC86697FB4F858B7AD1E67 ft=1 fh=6046ee2803ed69e5 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\ashampoo_winoptimizer_7_7.24_sm.exe"

sh=9DD1FBEB84FED11B7EE7A374D29A2BEA82C7E170 ft=1 fh=c32ee52a767008b7 vn="Variante von Win32/SoftPulse.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\Setup(1).exe"

sh=E8005ACE31987B24B745F52FD2D76923B9B3055F ft=1 fh=7758f7f0767008b7 vn="Variante von Win32/SoftPulse.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Christian\Downloads\Setup.exe"

sh=7A5B168BB2B8C06B2A9134B656BBF195830D21C2 ft=1 fh=55d4f387d8566cf4 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jessi\AppData\LocalLow\MyAshampoo\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.1.1\bin\PriceGongIE.dll"

sh=BDAA8F0BFF93DE84EE6C13AEDB22DE23CA9D3A76 ft=1 fh=0008457285da1f91 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jessi\Downloads\ashampoo_winoptimizer_9_e9.2.0_sm.exe"

sh=F7B6AAF129A98D5D979347D23BAAF28F07F831F7 ft=1 fh=17cd1bf647b47758 vn="Variante von Win32/FirseriaInstaller.G evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jessi\Downloads\Paragon Partition Manager.exe"

sh=A981E3D6F03D3BD57D1472F33A4093A01533F8A8 ft=1 fh=7aaf7b3d0491af48 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jessi\Downloads\wzmp_8.exe"

sh=FCF1D7966CB07668B0C0C9982416A035BC1FA24D ft=1 fh=ed813f3b385c5653 vn="Variante von MSIL/Adware.PullUpdate.C Anwendung" ac=I fn="C:\Windows\System32\LightsOff.CD920490367F.2.6.80.dll"

sh=FCF1D7966CB07668B0C0C9982416A035BC1FA24D ft=1 fh=ed813f3b385c5653 vn="Variante von MSIL/Adware.PullUpdate.C Anwendung" ac=I fn="C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll"

jetzt folgt checkup:

Code:



 Results of screen317's Security Check version 0.99.82  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Norton 360 Online   

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 Spyder3Pro     

 Spybot - Search & Destroy 

 FPCleaner 3.5.0.0    

 Java(TM) 6 Update 37  

 Java version out of Date! 

 Adobe Flash Player 13.0.0.214  

 Adobe Reader 9 Adobe Reader out of Date! 

 Mozilla Firefox (29.0.1) 
 ````````Process Check: objlist.exe by Laurent````````  

 Norton ccSvcHst.exe 

 Spybot Teatimer.exe is disabled! 

 WinZip Malware Protector WinZipMalwareProtector.exe   

 T-Online Dialerschutz-Software DFInject64.exe  

 StarMoney 7.0 S-Edition ouservice StarMoneyOnlineUpdate.exe  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

und die abschließende FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-05-2014

Ran by Christian (administrator) on *****-PC on 17-05-2014 09:41:02

Running from C:\Users\Christian\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(brother Industries Ltd) C:\Windows\SysWOW64\BRSS01A.EXE

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(mst software GmbH, Germany) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 7\DfSdkS.exe

(T-Systems International GmbH) C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFInject64.exe

(Hewlett-Packard Company) C:\Program Files (x86)\hp\Common\HPSupportSolutionsFrameworkService.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\ccsvchst.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\ccsvchst.exe

() C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe

(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe

(LenovoEMC Ltd.) C:\Program Files (x86)\LenovoEMC Storage Manager\pCloudd.exe

(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe

() C:\Program Files\Iomega\Quikprotect\QpMonitor.exe

(EMC Corporation) C:\Program Files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe

(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe

(PacketVideo) C:\Program Files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe

() C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

() C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

(CyberLink) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe

() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe

() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe

(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

(Dropbox, Inc.) C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe

(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(eBay Inc.) C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTBDaemon.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [itype] => C:\Program Files\Microsoft IntelliType Pro\itype.exe [2342800 2009-05-28] (Microsoft Corporation)

HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [610360 2009-07-08] ()

HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)

HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)

HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [PPort12reminder] => C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe [328992 2010-02-09] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [UIWatcher] => C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [3508568 2009-02-23] (ashampoo GmbH & Co. KG)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jessi\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)

HKU\S-1-5-21-950816296-2605988910-1464841057-1000\...\Policies\Explorer: [NoCDBurning] 1

HKU\SCANNERMAP\...\Run: [Akamai NetSession Interface] => C:\Users\Jessi\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\SCANNERMAP\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-05-07] (Google Inc.)

HKU\SCANNERMAP\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)

HKU\SCANNERMAP\...\Run: [UIWatcher] => C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [3508568 2009-02-23] (ashampoo GmbH & Co. KG)

HKU\SCANNERMAP\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)

HKU\SCANNERMAP\...\Run: [genesis] => "c:\users\jessi\appdata\local\genesis\genesis.exe" /r

HKU\SCANNERMAP\...\Run: [GoogleChromeAutoLaunch_F51A6D0EEE39DF9BB15E2444D1233C4B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

HKU\SCANNERMAP\...\Run: [AdobeBridge] => [X]

HKU\SCANNERMAP\...\Policies\Explorer: [NoCDBurning] 1

HKU\SCANNERMAP\...\MountPoints2: {99e6b394-a973-11de-ad27-806e6f6e6963} - E:\start.exe

Startup: C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk

ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

Startup: C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: http=127.0.0.1:13810

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://signin.ebay.de/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=77&ru=http%3A%2F%2Fmy.ebay.de%2Fws%2FeBayISAPI.dll%3FMyEbayBeta%26MyEbay%3D%26ssPageName%3DADME%253AB%253ATB4%253ADE%253A1%26guest%3D1&pageType=3984

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKLM - {134B5A9E-37E4-4B34-93B8-94ED49FF6DDB} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de

SearchScopes: HKLM - {25E3C058-0862-4EA6-9592-A8852FFC76C2} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06

SearchScopes: HKLM - {57948E9B-85E2-4A57-B023-93A71375A317} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {134B5A9E-37E4-4B34-93B8-94ED49FF6DDB} URL = 

SearchScopes: HKCU - {25E3C058-0862-4EA6-9592-A8852FFC76C2} URL = 

SearchScopes: HKCU - {57948E9B-85E2-4A57-B023-93A71375A317} URL = 

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)

BHO-x32: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)

BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

BHO-x32: amazon - {84B94901-3645-4D80-A6B7-4D0050B19455} - C:\Program Files (x86)\Preispiraten6\IEButtonAmazonInterface.dll ()

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Tunebite_WebRipPlugin Class - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: eBay - {CD9B7762-DFBC-42B1-BB30-02A78287B456} - C:\Program Files (x86)\Preispiraten6\IEButtonEbayInterface.dll ()

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

BHO-x32: Preispiraten - {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} - C:\Program Files (x86)\Preispiraten6\IEButtonPPInterface.dll ()

BHO-x32: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files (x86)\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\coIEPlg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {28B66320-9687-4B13-8757-36F901887AB5} hxxp://www.photodose.de/ips-opdata/operator/69189345/objects/canvasx.cab

DPF: HKLM-x32 {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} hxxp://www.photodose.de/ips-opdata/operator/69189345/objects/jordan.cab

DPF: HKLM-x32 {72376E32-8AF2-473F-BE32-E5D0F39C865D} hxxp://de.cyberlink.com/prog/win7/js/UpdateAdvisor.cab

DPF: HKLM-x32 {B1953AD6-C50E-11D3-B020-00A0C9251384} hxxp://www.o2c.de/download/O2CPlayer.CAB

DPF: HKLM-x32 {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} hxxp://office.microsoft.com/officeupdate/content/opuc4.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

DPF: HKLM-x32 {EDFCB7CB-942C-4822-AF14-F0B687409848} https://www.fotopostonline.de/ImageUploader4.cab

Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File

Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default

FF Homepage: hxxp://www.ytong-bausatzhaus.de/

FF NetworkProxy: "type", 4

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)

FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.5 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\elemhidehelper@adblockplus.org.xpi [2014-05-11]

FF Extension: Adblock Plus - C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\cux27v6n.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-11]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-04-14]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-04-14]

FF HKLM-x32\...\Firefox\Extensions: [tunebite-firefox-surf-and-catch-extension@audials.com] - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\

FF Extension: Tunebite Firefox Surf and Catch Plugin - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ []

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\ []

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFF [2013-10-09]

FF HKLM-x32\...\Thunderbird\Extensions: [{857610fe-b36c-47f2-b4fa-6b7affe0cf5a}] - C:\Program Files (x86)\Mobile Master\ext\1\

FF Extension: Mobile Master Add-In - C:\Program Files (x86)\Mobile Master\ext\1\ []
 

Chrome: 

=======

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

CHR Extension: (No Name) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddkeieaieohnceanbhdeijclgemgjjkf [2014-05-07]

CHR Extension: (No Name) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpmlnedpdikbgdghljdepnljfpkhccn [2012-09-23]

CHR Extension: (No Name) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljmibnagodajacnnbifpamhggcohblip [2014-04-29]

CHR Extension: (Norton Identity Protection) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-01-23]

CHR Extension: (Google Wallet) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-23]

CHR HKLM-x32\...\Chrome\Extension: [bejnhdlplbjhffionohbdnpcbobfejcc] - C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\Exts\Chrome.crx [2014-05-02]
 

==================== Services (Whitelisted) =================
 

S2 Brother XP spl Service; C:\Windows\SysWOW64\brsvc01a.exe [57344 2002-04-12] (brother Industries Ltd)

R2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 7\DfsdkS.exe [544768 2009-08-24] (mst software GmbH, Germany)

R2 DFSVC; C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFInject64.exe [376832 2009-10-21] (T-Systems International GmbH)

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-04-01] (Hewlett-Packard Company)

S2 Irmon; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.5.0.28\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)

R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)

R2 PCloudd; C:\Program Files (x86)\LenovoEMC Storage Manager\pCloudd.exe [215040 2013-07-07] (LenovoEMC Ltd.)

R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)

R2 QPCopyEngine; C:\Program Files\Iomega\Quikprotect\QpMonitor.exe [458240 2012-09-07] ()

R2 RetroExpLauncher; C:\Program Files (x86)\Retrospect\Retrospect Express HD 2.5\retrorun.exe [115992 2008-07-16] (EMC Corporation)

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [24576 2014-05-06] (Realtek Semiconductor.)

R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)

R2 TwonkyMedia; C:\Program Files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe [512840 2012-02-03] (PacketVideo)

R2 TwonkyWebDav; C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe [250696 2012-02-03] ()

R2 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe [884608 2012-05-14] ()

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [635160 2014-04-04] (Wacom Technology, Corp.)

S2 LightsOff; "C:\ProgramData\LightsOff\up\2.6.80\LightsOffService.exe" "C:\ProgramData\LightsOff\up\2.6.80\LightsOff.exe"
 

==================== Drivers (Whitelisted) ====================
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20140409.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)

S3 BioNTDrv; C:\Program Files\Paragon Software\Festplatten Manager 14 Professional\program\BioNTDrv.SYS [19720 2014-02-14] (Paragon Software Group)

R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1405000.01C\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)

S3 DFSYS; C:\Program Files (x86)\T-Online\Dialerschutz-Software\DFSYS64.SYS [17952 2009-10-15] (T-Systems International GmbH)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-05-05] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-05-05] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20140515.001\IDSvia64.sys [525016 2014-03-31] (Symantec Corporation)

R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()

S3 MosIrUsb; C:\Windows\System32\DRIVERS\MosIrUsb.sys [27648 2007-10-11] ()

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20140516.016\ENG64.SYS [126040 2014-05-05] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20140516.016\EX64.SYS [2099288 2014-05-05] (Symantec Corporation)

S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)

R3 OXSDIDRV_x64; C:\Windows\System32\DRIVERS\OXSDIDRV_x64.sys [51760 2009-09-28] ()

S3 OXUDIDRV; C:\Windows\system32\Drivers\OXUDIDRV_X64.sys [31280 2010-05-25] ()

S3 PolarUSB; C:\Windows\SysWOW64\DRIVERS\PolarUSB.sys [17343 2001-07-12] (Polar Electro)

R3 QsFsFltr; C:\Windows\System32\DRIVERS\QsFsFltr.sys [22584 2012-08-20] (Windows (R) Win 7 DDK provider)

S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31264 2009-11-03] (RapidSolution Software AG)

R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31264 2009-11-03] (RapidSolution Software AG)

R3 SipIMNDI; C:\Windows\System32\DRIVERS\SipIMNDI64.sys [28192 2009-10-15] (T-Systems International GmbH)

S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()

R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1405000.01C\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1405000.01C\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\N360x64\1405000.01C\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\N360x64\1405000.01C\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\N360x64\1405000.01C\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1405000.01C\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)

R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2014-02-14] ()

R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2014-02-14] ()

R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700424 2014-02-14] ()

R3 vNICdrv; C:\Windows\System32\DRIVERS\vNICdrv.sys [20048 2012-05-11] (Iomega Corporation)

U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; c:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [146928 2009-07-23] (CyberLink Corp.)

S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]

S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]

S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-17 09:40 - 2014-05-17 09:40 - 00000000 ____D () C:\Users\Christian\Desktop\FRST-OlderVersion

2014-05-17 00:36 - 2014-05-17 00:36 - 00855379 _____ () C:\Users\Christian\Desktop\SecurityCheck.exe

2014-05-16 18:08 - 2014-05-16 18:08 - 02347384 _____ (ESET) C:\Users\Christian\Desktop\esetsmartinstaller_deu.exe

2014-05-15 20:11 - 2014-05-15 20:27 - 00001011 _____ () C:\Users\Christian\Desktop\JRT.txt

2014-05-15 20:05 - 2014-05-15 20:05 - 00000000 ____D () C:\Windows\ERUNT

2014-05-15 20:04 - 2014-05-15 20:04 - 01016261 _____ (Thisisu) C:\Users\Christian\Desktop\JRT.exe

2014-05-15 19:48 - 2014-05-15 19:56 - 00145236 _____ () C:\Users\Christian\Desktop\AdwCleaner[S1].txt

2014-05-15 19:46 - 2014-05-15 20:29 - 00000000 ____D () C:\AdwCleaner

2014-05-15 19:43 - 2014-05-15 19:43 - 01325827 _____ () C:\Users\Christian\Desktop\adwcleaner_3.208.exe

2014-05-15 19:32 - 2014-05-15 19:57 - 00000261 _____ () C:\Users\Christian\Desktop\mbam.txt

2014-05-15 18:02 - 2014-05-15 20:01 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-15 18:02 - 2014-05-15 18:02 - 00001138 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-15 18:02 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-05-15 18:02 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-05-15 18:02 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-05-15 00:49 - 2014-05-15 00:50 - 00000000 ____D () C:\Users\TEMP.Pesch-PC.000

2014-05-15 00:49 - 2014-05-15 00:49 - 00000000 ____D () C:\Users\TEMP.Pesch-PC\AppData\Local\VirtualStore

2014-05-15 00:42 - 2014-05-15 00:49 - 00000000 ____D () C:\Users\TEMP.Pesch-PC

2014-05-14 21:18 - 2014-05-14 21:20 - 00066460 _____ () C:\Users\Jessi\Desktop\Addition.txt

2014-05-14 20:19 - 2014-05-14 21:20 - 00102036 _____ () C:\Users\Jessi\Desktop\FRST.txt

2014-05-14 20:19 - 2014-05-14 16:34 - 00001318 _____ () C:\Users\Jessi\Desktop\Revo Uninstaller.lnk

2014-05-14 20:18 - 2014-05-12 01:08 - 02066944 _____ (Farbar) C:\Users\Jessi\Desktop\FRST64.exe

2014-05-14 20:16 - 2014-05-14 20:16 - 00000472 _____ () C:\Users\Jessi\Desktop\defogger_disable.log

2014-05-14 20:16 - 2014-05-14 20:16 - 00000472 _____ () C:\Users\Christian\Desktop\defogger_disable.log

2014-05-14 20:16 - 2014-05-14 20:16 - 00000000 _____ () C:\Users\Jessi\defogger_reenable

2014-05-14 20:16 - 2014-05-11 17:24 - 00050477 _____ () C:\Users\Jessi\Desktop\Defogger.exe

2014-05-14 19:00 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-14 19:00 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-14 19:00 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-14 19:00 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-14 19:00 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-14 19:00 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-14 18:52 - 2014-05-14 18:52 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-14 18:49 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-14 18:49 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-14 18:49 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-05-14 18:49 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-05-14 18:49 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-05-14 18:49 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-05-14 18:49 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-05-14 18:49 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-05-14 18:49 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-05-14 18:49 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-05-14 18:49 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-05-14 18:49 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-14 18:49 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-05-14 18:49 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-05-14 18:49 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-05-14 18:49 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-05-14 18:49 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-05-14 18:49 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-05-14 18:49 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-14 18:49 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-14 18:49 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-05-14 18:49 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-05-14 18:49 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-05-14 18:14 - 2014-05-14 18:14 - 00003270 _____ () C:\Windows\System32\Tasks\{1E8AC37E-D3BB-4DCC-83BE-0C63DB341F68}

2014-05-14 17:57 - 2014-05-14 17:57 - 00068638 _____ () C:\ComboFix.txt

2014-05-14 17:24 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-05-14 17:24 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-05-14 17:24 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-05-14 17:24 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-05-14 17:18 - 2014-05-14 17:57 - 00000000 ____D () C:\Qoobox

2014-05-14 17:18 - 2014-05-14 17:55 - 00000000 ____D () C:\Windows\erdnt

2014-05-14 17:09 - 2014-05-14 17:10 - 05200050 _____ (Swearware) C:\Users\Christian\Downloads\ComboFix(1).exe

2014-05-14 17:09 - 2014-05-14 17:09 - 05200050 ____R (Swearware) C:\Users\Christian\Desktop\ComboFix.exe

2014-05-14 16:34 - 2014-05-14 16:34 - 00001318 _____ () C:\Users\Christian\Desktop\Revo Uninstaller.lnk

2014-05-14 16:34 - 2014-05-14 16:34 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-05-14 16:33 - 2014-05-14 16:33 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Christian\Downloads\revosetup95.exe

2014-05-14 16:21 - 2014-05-16 17:53 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup

2014-05-12 19:45 - 2014-05-12 19:45 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360

2014-05-12 18:51 - 2014-05-12 18:51 - 00042450 _____ () C:\Users\Christian\Desktop\Desktop.zip

2014-05-12 18:47 - 2014-05-12 18:47 - 00043386 _____ () C:\Users\Christian\Desktop\logfiles.zip

2014-05-12 17:55 - 2014-05-15 19:51 - 00007216 _____ () C:\Windows\PFRO.log

2014-05-12 07:49 - 2014-05-12 07:49 - 00001262 _____ () C:\Users\Christian\Desktop\trojaner-board.txt

2014-05-12 07:36 - 2014-05-12 07:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2014-05-12 07:36 - 2014-05-12 07:36 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2014-05-12 06:39 - 2014-05-12 06:39 - 00055206 _____ () C:\Users\Christian\Desktop\Gmer.txt

2014-05-12 01:05 - 2014-05-11 18:04 - 00380416 _____ () C:\Users\Christian\Desktop\Gmer-19357.exe

2014-05-12 01:04 - 2014-05-11 17:24 - 00050477 _____ () C:\Users\Christian\Desktop\Defogger.exe

2014-05-12 01:03 - 2014-05-17 09:40 - 02067456 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe

2014-05-11 17:55 - 2014-05-11 17:57 - 00070978 _____ () C:\Users\Christian\Desktop\Addition.txt

2014-05-11 17:47 - 2014-05-17 09:41 - 00031313 _____ () C:\Users\Christian\Desktop\FRST.txt

2014-05-11 17:47 - 2014-05-17 09:41 - 00000000 ____D () C:\FRST

2014-05-11 17:26 - 2014-05-11 17:27 - 00000480 _____ () C:\Users\Christian\Downloads\defogger_disable.log

2014-05-11 17:26 - 2014-05-11 17:26 - 00000000 _____ () C:\Users\Christian\defogger_reenable

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\ProgramData\Package Cache

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\Program Files\Adblock Plus for IE

2014-05-11 14:42 - 2014-05-13 11:06 - 00000000 ____D () C:\Users\Christian\Downloads\Bedienungsanleitungen

2014-05-11 14:25 - 2014-05-11 14:25 - 00001336 _____ () C:\Windows\IE11_main.log

2014-05-10 11:20 - 2014-05-16 17:51 - 00001008 _____ () C:\Windows\setupact.log

2014-05-10 11:20 - 2014-05-10 11:20 - 00000000 _____ () C:\Windows\setuperr.log

2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-10 06:43 - 2014-05-10 06:43 - 00003548 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-15 00:36 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 06:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 00:08 - 00001255 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Nico Mak Computing

2014-05-10 00:08 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe

2014-05-10 00:07 - 2014-05-10 00:07 - 04892480 _____ (WinZip International LLC ) C:\Users\Jessi\Downloads\wzmp_8.exe

2014-05-09 23:41 - 2014-05-13 18:20 - 00000000 ____D () C:\Users\Jessi\AppData\Local\LightsOff

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup.exe

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup(1).exe

2014-05-09 23:24 - 2014-05-09 23:24 - 02077392 _____ (Microsoft Corporation) C:\Users\Christian\Downloads\IE11-Windows6.1.exe

2014-05-09 23:17 - 2014-05-09 23:17 - 01356664 _____ () C:\Windows\system32\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:12 - 2014-05-09 23:12 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:08 - 2014-05-14 17:04 - 00000000 ____D () C:\Users\Christian\AppData\Local\LightsOff

2014-05-09 23:07 - 2014-05-14 17:01 - 00000000 ____D () C:\ProgramData\LightsOff

2014-05-08 20:29 - 2014-05-08 20:29 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1(1).xpi

2014-05-08 20:28 - 2014-05-08 20:28 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1.xpi

2014-05-08 19:40 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-05-08 19:40 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Program Files\Realtek

2014-05-08 18:48 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-05-08 18:48 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-05-08 18:48 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-05-08 18:48 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-05-08 18:48 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-05-08 18:48 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-05-08 18:48 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-05-08 18:48 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-05-08 18:48 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-05-08 18:48 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-05-08 18:48 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-05-08 18:48 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-05-08 18:48 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-05-08 18:48 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-05-08 18:48 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-05-08 18:48 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-05-08 18:47 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-05-08 18:47 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-05-08 18:47 - 2012-08-23 15:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-05-08 18:47 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-05-08 18:47 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-05-08 18:47 - 2012-08-23 11:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-05-08 18:45 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-05-08 18:45 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-05-08 18:45 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2014-05-08 18:45 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2014-05-08 18:20 - 2014-05-08 18:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\DropboxMaster

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Program Files (x86)\Paragon Software

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\ImageStorage

2014-05-07 09:38 - 2014-05-07 09:38 - 00002472 _____ () C:\Users\Christian\Desktop\Paragon Recovery Media Builder™.lnk

2014-05-07 09:38 - 2014-05-07 09:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Recovery Media Builder

2014-05-07 09:36 - 2014-05-07 09:36 - 00002483 _____ () C:\Users\Public\Desktop\Paragon Festplatten Manager™ 14 Professional.lnk

2014-05-07 09:36 - 2014-05-07 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:29 - 2014-05-07 09:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_blockmounter_01_09_00.Wdf

2014-05-07 09:26 - 2014-05-07 09:26 - 00003122 _____ () C:\Windows\System32\Tasks\{92236A19-9683-4ACF-92F3-1023691EB6F5}

2014-05-07 01:59 - 2014-05-07 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\dlg

2014-05-07 01:56 - 2014-05-07 01:56 - 00000000 ____D () C:\Program Files\Google

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Security System 2

2014-05-07 01:28 - 2014-05-07 01:28 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Downloaded Installations

2014-05-07 00:55 - 2014-05-07 00:55 - 00003232 _____ () C:\Windows\System32\Tasks\{CCAEAFB8-B227-4463-B7B4-768C5109CD9B}

2014-05-07 00:51 - 2014-05-07 00:54 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000.exe

2014-05-07 00:48 - 2014-05-07 00:48 - 00003298 _____ () C:\Windows\System32\Tasks\{CB6EC068-6806-42CB-A914-30BCF36B7A95}

2014-05-07 00:42 - 2014-05-07 00:44 - 54721832 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_RMBInstallx64_10.1.21.471_000.exe

2014-05-07 00:41 - 2014-05-07 00:45 - 175107584 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_BMBInstallSNU_10.1.21.471_000.msi

2014-05-07 00:39 - 2014-05-07 00:43 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000(1).exe

2014-05-07 00:35 - 2014-05-07 00:35 - 02113272 _____ (Nexway) C:\Users\Christian\Downloads\Download your order 21308190.exe

2014-05-06 08:08 - 2014-05-06 08:08 - 00024576 _____ (Realtek Semiconductor.) C:\Windows\SetupAfterRebootService.exe

2014-05-06 07:30 - 2013-11-26 15:49 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys

2014-05-06 07:30 - 2013-11-26 15:49 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-05-06 07:23 - 2014-05-06 07:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\NVIDIA

2014-05-06 05:56 - 2014-05-14 19:04 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-06 01:12 - 2014-05-06 01:12 - 00000000 ____D () C:\ProgramData\redistpart

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\Users\Christian\.kchmviewer

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\ProgramData\chmview

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\launcher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\explauncher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\deletepart

2014-05-06 01:06 - 2014-05-07 09:38 - 00000000 ____D () C:\Program Files\Paragon Software

2014-05-06 00:24 - 2014-05-06 00:24 - 00000000 ____D () C:\Users\Jessi\AppData\Local\ilividmoviestoolbar20

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\AppData\Local\cache

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\.android

2014-04-29 19:25 - 2014-04-29 19:25 - 00002539 _____ () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-04-29 19:17 - 2014-04-29 19:30 - 00511192 _____ (Installer) C:\Users\Jessi\Downloads\Paragon Partition Manager.exe

2014-04-25 18:13 - 2014-04-25 18:13 - 00033814 _____ () C:\Users\Christian\Downloads\Speedport_w921v_1.34.000_25.04.14_1813.bin

2014-04-24 01:12 - 2014-05-07 09:25 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA Corporation

2014-04-24 01:11 - 2014-04-24 01:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA

2014-04-23 16:10 - 2014-04-23 16:10 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\NVIDIA

2014-04-23 15:40 - 2014-04-23 15:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\NVIDIA Corporation

2014-04-23 15:39 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-04-23 15:39 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2014-04-23 15:38 - 2014-05-07 09:26 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-04-23 15:38 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-04-23 15:32 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-04-23 15:32 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-04-23 15:32 - 2014-03-04 16:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-04-23 15:19 - 2014-04-23 16:06 - 00007656 _____ () C:\Users\Jessi\AppData\Local\resmon.resmoncfg

2014-04-22 19:34 - 2010-06-17 12:02 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2014-04-22 19:24 - 2014-04-22 19:24 - 00002047 _____ () C:\Users\Public\Desktop\Live Update 5.lnk

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\Program Files (x86)\MSI

2014-04-22 19:24 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieUserList

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieSiteList

2014-04-22 00:13 - 2014-04-22 00:13 - 00000000 ____D () C:\Users\Christian\.android

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-04-22 00:09 - 2014-03-17 18:13 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys

2014-04-22 00:08 - 2014-04-04 01:55 - 01946904 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01922328 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01560344 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll

2014-04-22 00:08 - 2014-04-04 01:55 - 01556760 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll

2014-04-22 00:08 - 2014-03-17 18:13 - 00095032 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys

2014-04-22 00:08 - 2014-03-17 18:13 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys

2014-04-22 00:08 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll

2014-04-21 23:59 - 2010-03-03 13:33 - 03311616 _____ () C:\Users\Christian\Desktop\sp46206.iso

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieUserList

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieSiteList

2014-04-21 14:22 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-04-21 14:22 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-04-21 14:22 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-21 14:22 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-04-21 14:22 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-21 14:22 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-21 14:22 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-04-21 14:22 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-21 14:22 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-21 14:22 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-04-21 14:22 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-04-21 14:22 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-21 14:22 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-21 14:22 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-04-21 14:22 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-04-21 14:22 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-04-21 14:22 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-04-21 14:22 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-04-21 14:22 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-21 14:22 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-04-21 14:22 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-04-21 14:22 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-04-21 14:22 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-04-21 14:22 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-04-21 14:22 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-04-21 14:22 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-04-21 14:22 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-04-21 14:22 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-04-21 14:22 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-04-21 14:22 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-21 14:22 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-04-21 14:22 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-21 14:22 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-04-21 14:22 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-04-21 14:22 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-21 14:22 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-04-21 14:22 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-04-21 14:22 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-04-21 14:22 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-21 14:22 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-21 14:22 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-04-21 14:22 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-04-21 14:22 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-04-21 14:22 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-04-18 15:25 - 2014-04-18 15:25 - 00003902 _____ () C:\Users\Jessi\Downloads\qrcode (2).eps

2014-04-17 14:09 - 2014-04-24 08:18 - 00007597 _____ () C:\Users\Christian\AppData\Local\resmon.resmoncfg

2014-04-17 08:55 - 2014-04-17 08:55 - 00020108 _____ () C:\Users\Jessi\Downloads\qrcode (1).eps
 

==================== One Month Modified Files and Folders =======
 

2014-05-17 09:42 - 2014-05-11 17:47 - 00031313 _____ () C:\Users\Christian\Desktop\FRST.txt

2014-05-17 09:41 - 2014-05-11 17:47 - 00000000 ____D () C:\FRST

2014-05-17 09:41 - 2013-08-27 19:18 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{60E385A9-8176-4701-99EB-10008026103C}

2014-05-17 09:40 - 2014-05-17 09:40 - 00000000 ____D () C:\Users\Christian\Desktop\FRST-OlderVersion

2014-05-17 09:40 - 2014-05-12 01:03 - 02067456 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe

2014-05-17 09:13 - 2012-08-27 00:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-17 08:48 - 2009-11-26 20:30 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-17 03:00 - 2014-04-14 16:12 - 01101307 _____ () C:\Windows\WindowsUpdate.log

2014-05-17 00:36 - 2014-05-17 00:36 - 00855379 _____ () C:\Users\Christian\Desktop\SecurityCheck.exe

2014-05-16 20:52 - 2013-07-13 10:03 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240.job

2014-05-16 19:17 - 2009-11-05 23:30 - 00000000 ____D () C:\Users\Christian\AppData\Local\CrashDumps

2014-05-16 18:08 - 2014-05-16 18:08 - 02347384 _____ (ESET) C:\Users\Christian\Desktop\esetsmartinstaller_deu.exe

2014-05-16 18:01 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-16 18:01 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-16 17:53 - 2014-05-14 16:21 - 00003116 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup

2014-05-16 17:53 - 2012-03-05 02:00 - 00000000 ___RD () C:\Users\Christian\Dropbox

2014-05-16 17:53 - 2012-03-05 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Dropbox

2014-05-16 17:52 - 2012-09-07 23:09 - 00000000 ____D () C:\ProgramData\twonkyserver

2014-05-16 17:51 - 2014-05-10 11:20 - 00001008 _____ () C:\Windows\setupact.log

2014-05-16 17:51 - 2009-09-18 21:39 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-05-16 17:51 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-15 23:06 - 2012-01-24 12:01 - 00000000 ___RD () C:\Users\Jessi\Dropbox

2014-05-15 23:06 - 2012-01-24 11:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Dropbox

2014-05-15 23:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-05-15 21:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-05-15 20:29 - 2014-05-15 19:46 - 00000000 ____D () C:\AdwCleaner

2014-05-15 20:27 - 2014-05-15 20:11 - 00001011 _____ () C:\Users\Christian\Desktop\JRT.txt

2014-05-15 20:05 - 2014-05-15 20:05 - 00000000 ____D () C:\Windows\ERUNT

2014-05-15 20:04 - 2014-05-15 20:04 - 01016261 _____ (Thisisu) C:\Users\Christian\Desktop\JRT.exe

2014-05-15 20:01 - 2014-05-15 18:02 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-15 19:57 - 2014-05-15 19:32 - 00000261 _____ () C:\Users\Christian\Desktop\mbam.txt

2014-05-15 19:56 - 2014-05-15 19:48 - 00145236 _____ () C:\Users\Christian\Desktop\AdwCleaner[S1].txt

2014-05-15 19:51 - 2014-05-12 17:55 - 00007216 _____ () C:\Windows\PFRO.log

2014-05-15 19:48 - 2009-11-03 23:13 - 00000000 ____D () C:\Users\Jessi

2014-05-15 19:48 - 2009-11-03 22:10 - 00000000 ____D () C:\Users\Christian

2014-05-15 19:43 - 2014-05-15 19:43 - 01325827 _____ () C:\Users\Christian\Desktop\adwcleaner_3.208.exe

2014-05-15 19:35 - 2007-11-07 15:48 - 00000000 ____D () C:\Users\Christian\Downloads\Systemoptimierung

2014-05-15 18:02 - 2014-05-15 18:02 - 00001138 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-15 18:02 - 2014-05-15 18:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-15 06:57 - 2009-11-03 22:20 - 00000000 ___RD () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-15 06:57 - 2009-11-03 22:20 - 00000000 ___RD () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-15 00:50 - 2014-05-15 00:49 - 00000000 ____D () C:\Users\TEMP.Pesch-PC.000

2014-05-15 00:49 - 2014-05-15 00:49 - 00000000 ____D () C:\Users\TEMP.Pesch-PC\AppData\Local\VirtualStore

2014-05-15 00:49 - 2014-05-15 00:42 - 00000000 ____D () C:\Users\TEMP.Pesch-PC

2014-05-15 00:36 - 2014-05-10 00:08 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector

2014-05-14 21:20 - 2014-05-14 21:18 - 00066460 _____ () C:\Users\Jessi\Desktop\Addition.txt

2014-05-14 21:20 - 2014-05-14 20:19 - 00102036 _____ () C:\Users\Jessi\Desktop\FRST.txt

2014-05-14 20:16 - 2014-05-14 20:16 - 00000472 _____ () C:\Users\Jessi\Desktop\defogger_disable.log

2014-05-14 20:16 - 2014-05-14 20:16 - 00000472 _____ () C:\Users\Christian\Desktop\defogger_disable.log

2014-05-14 20:16 - 2014-05-14 20:16 - 00000000 _____ () C:\Users\Jessi\defogger_reenable

2014-05-14 20:13 - 2013-09-24 13:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-05-14 20:13 - 2012-04-03 22:35 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-14 20:13 - 2011-05-15 14:31 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-14 19:13 - 2009-11-03 23:14 - 00000000 ___RD () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-14 19:13 - 2009-11-03 23:14 - 00000000 ___RD () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-14 19:04 - 2014-05-06 05:56 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-14 19:00 - 2009-11-04 20:33 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-14 18:59 - 2013-08-16 03:03 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-14 18:54 - 2009-11-06 20:54 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-05-14 18:52 - 2014-05-14 18:52 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-14 18:42 - 2013-08-09 08:17 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E4580F7C-853D-40E3-B912-7FF04D2BCC42}

2014-05-14 18:14 - 2014-05-14 18:14 - 00003270 _____ () C:\Windows\System32\Tasks\{1E8AC37E-D3BB-4DCC-83BE-0C63DB341F68}

2014-05-14 17:57 - 2014-05-14 17:57 - 00068638 _____ () C:\ComboFix.txt

2014-05-14 17:57 - 2014-05-14 17:18 - 00000000 ____D () C:\Qoobox

2014-05-14 17:57 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-05-14 17:55 - 2014-05-14 17:18 - 00000000 ____D () C:\Windows\erdnt

2014-05-14 17:49 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-05-14 17:45 - 2009-07-14 04:34 - 92536832 _____ () C:\Windows\system32\config\software.bak

2014-05-14 17:45 - 2009-07-14 04:34 - 18612224 _____ () C:\Windows\system32\config\system.bak

2014-05-14 17:45 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\default.bak

2014-05-14 17:45 - 2009-07-14 04:34 - 00090112 _____ () C:\Windows\system32\config\sam.bak

2014-05-14 17:45 - 2009-07-14 04:34 - 00024576 _____ () C:\Windows\system32\config\security.bak

2014-05-14 17:24 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-05-14 17:10 - 2014-05-14 17:09 - 05200050 _____ (Swearware) C:\Users\Christian\Downloads\ComboFix(1).exe

2014-05-14 17:09 - 2014-05-14 17:09 - 05200050 ____R (Swearware) C:\Users\Christian\Desktop\ComboFix.exe

2014-05-14 17:04 - 2014-05-09 23:08 - 00000000 ____D () C:\Users\Christian\AppData\Local\LightsOff

2014-05-14 17:01 - 2014-05-09 23:07 - 00000000 ____D () C:\ProgramData\LightsOff

2014-05-14 16:34 - 2014-05-14 20:19 - 00001318 _____ () C:\Users\Jessi\Desktop\Revo Uninstaller.lnk

2014-05-14 16:34 - 2014-05-14 16:34 - 00001318 _____ () C:\Users\Christian\Desktop\Revo Uninstaller.lnk

2014-05-14 16:34 - 2014-05-14 16:34 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-05-14 16:33 - 2014-05-14 16:33 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Christian\Downloads\revosetup95.exe

2014-05-14 16:25 - 2011-07-08 08:35 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

2014-05-13 19:47 - 2009-09-19 07:25 - 00712618 _____ () C:\Windows\system32\perfh007.dat

2014-05-13 19:47 - 2009-09-19 07:25 - 00155654 _____ () C:\Windows\system32\perfc007.dat

2014-05-13 19:47 - 2009-07-14 07:13 - 01656700 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-13 18:20 - 2014-05-09 23:41 - 00000000 ____D () C:\Users\Jessi\AppData\Local\LightsOff

2014-05-13 11:06 - 2014-05-11 14:42 - 00000000 ____D () C:\Users\Christian\Downloads\Bedienungsanleitungen

2014-05-12 19:45 - 2014-05-12 19:45 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360

2014-05-12 19:39 - 2013-08-08 08:39 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-05-12 19:39 - 2013-06-01 11:35 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64

2014-05-12 19:38 - 2013-06-01 11:35 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360

2014-05-12 18:51 - 2014-05-12 18:51 - 00042450 _____ () C:\Users\Christian\Desktop\Desktop.zip

2014-05-12 18:47 - 2014-05-12 18:47 - 00043386 _____ () C:\Users\Christian\Desktop\logfiles.zip

2014-05-12 18:05 - 2010-04-25 00:14 - 00000000 ____D () C:\Program Files\WinRAR

2014-05-12 07:49 - 2014-05-12 07:49 - 00001262 _____ () C:\Users\Christian\Desktop\trojaner-board.txt

2014-05-12 07:36 - 2014-05-12 07:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2014-05-12 07:36 - 2014-05-12 07:36 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2014-05-12 06:39 - 2014-05-12 06:39 - 00055206 _____ () C:\Users\Christian\Desktop\Gmer.txt

2014-05-12 01:08 - 2014-05-14 20:18 - 02066944 _____ (Farbar) C:\Users\Jessi\Desktop\FRST64.exe

2014-05-12 00:08 - 2007-11-07 15:42 - 00000000 ____D () C:\Users\Christian\Downloads\Windows Vista

2014-05-11 18:04 - 2014-05-12 01:05 - 00380416 _____ () C:\Users\Christian\Desktop\Gmer-19357.exe

2014-05-11 17:57 - 2014-05-11 17:55 - 00070978 _____ () C:\Users\Christian\Desktop\Addition.txt

2014-05-11 17:27 - 2014-05-11 17:26 - 00000480 _____ () C:\Users\Christian\Downloads\defogger_disable.log

2014-05-11 17:26 - 2014-05-11 17:26 - 00000000 _____ () C:\Users\Christian\defogger_reenable

2014-05-11 17:24 - 2014-05-14 20:16 - 00050477 _____ () C:\Users\Jessi\Desktop\Defogger.exe

2014-05-11 17:24 - 2014-05-12 01:04 - 00050477 _____ () C:\Users\Christian\Desktop\Defogger.exe

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\ProgramData\Package Cache

2014-05-11 16:05 - 2014-05-11 16:05 - 00000000 ____D () C:\Program Files\Adblock Plus for IE

2014-05-11 14:25 - 2014-05-11 14:25 - 00001336 _____ () C:\Windows\IE11_main.log

2014-05-10 11:29 - 2009-11-08 16:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\CrashDumps

2014-05-10 11:20 - 2014-05-10 11:20 - 00000000 _____ () C:\Windows\setuperr.log

2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-10 06:43 - 2014-05-10 06:43 - 00003548 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector

2014-05-10 06:37 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 00:08 - 00001255 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Nico Mak Computing

2014-05-10 00:07 - 2014-05-10 00:07 - 04892480 _____ (WinZip International LLC ) C:\Users\Jessi\Downloads\wzmp_8.exe

2014-05-09 23:33 - 2014-04-14 19:02 - 00001672 _____ () C:\Windows\system32\ASOROSet.bin

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup.exe

2014-05-09 23:26 - 2014-05-09 23:26 - 00817032 _____ () C:\Users\Christian\Downloads\Setup(1).exe

2014-05-09 23:24 - 2014-05-09 23:24 - 02077392 _____ (Microsoft Corporation) C:\Users\Christian\Downloads\IE11-Windows6.1.exe

2014-05-09 23:17 - 2014-05-09 23:17 - 01356664 _____ () C:\Windows\system32\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:12 - 2014-05-09 23:12 - 01161080 _____ () C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll

2014-05-09 23:09 - 2009-11-09 00:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Move Networks

2014-05-09 23:03 - 2014-04-14 19:02 - 00000000 ____D () C:\Windows\system32\config\RCCBakup

2014-05-09 22:48 - 2014-04-14 19:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-09 22:48 - 2012-05-27 10:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-09 12:35 - 2009-11-05 23:10 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-05-09 08:14 - 2014-05-14 18:49 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-09 08:11 - 2014-05-14 18:49 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-08 20:43 - 2013-10-16 16:07 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1ce7f9f803a5240

2014-05-08 20:43 - 2009-11-26 20:30 - 00004112 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-05-08 20:29 - 2014-05-08 20:29 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1(1).xpi

2014-05-08 20:28 - 2014-05-08 20:28 - 00957290 _____ () C:\Users\Christian\Downloads\adblockplus-2.5.1.xpi

2014-05-08 19:18 - 2011-11-10 16:43 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Akamai

2014-05-08 19:15 - 2009-11-07 02:47 - 00000000 ____D () C:\Program Files (x86)\Preispiraten6

2014-05-08 18:54 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-05-08 18:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-05-08 18:48 - 2014-05-08 18:48 - 00000000 ____D () C:\Program Files\Realtek

2014-05-08 18:20 - 2014-05-08 18:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\DropboxMaster

2014-05-08 18:20 - 2012-03-05 02:00 - 00001035 _____ () C:\Users\Christian\Desktop\Dropbox.lnk

2014-05-08 18:20 - 2012-03-05 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\Program Files (x86)\Paragon Software

2014-05-07 09:41 - 2014-05-07 09:41 - 00000000 ____D () C:\ImageStorage

2014-05-07 09:38 - 2014-05-07 09:38 - 00002472 _____ () C:\Users\Christian\Desktop\Paragon Recovery Media Builder™.lnk

2014-05-07 09:38 - 2014-05-07 09:38 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Recovery Media Builder

2014-05-07 09:38 - 2014-05-06 01:06 - 00000000 ____D () C:\Program Files\Paragon Software

2014-05-07 09:36 - 2014-05-07 09:36 - 00002483 _____ () C:\Users\Public\Desktop\Paragon Festplatten Manager™ 14 Professional.lnk

2014-05-07 09:36 - 2014-05-07 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 14 Professional

2014-05-07 09:29 - 2014-05-07 09:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_blockmounter_01_09_00.Wdf

2014-05-07 09:26 - 2014-05-07 09:26 - 00003122 _____ () C:\Windows\System32\Tasks\{92236A19-9683-4ACF-92F3-1023691EB6F5}

2014-05-07 09:26 - 2014-04-23 15:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-05-07 09:26 - 2011-04-30 11:21 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-05-07 09:26 - 2011-04-30 11:20 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-05-07 09:26 - 2009-09-18 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2014-05-07 09:25 - 2014-04-24 01:12 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA Corporation

2014-05-07 09:22 - 2009-09-18 21:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools

2014-05-07 02:10 - 2005-04-06 20:00 - 00000000 ____D () C:\Users\Christian\Documents\Sicherungsdateien

2014-05-07 02:00 - 2009-11-26 20:30 - 00000000 ____D () C:\Users\Christian\AppData\Local\Google

2014-05-07 01:59 - 2014-05-07 01:59 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\dlg

2014-05-07 01:58 - 2014-04-16 14:02 - 00000860 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-05-07 01:58 - 2014-04-16 14:02 - 00000000 ____D () C:\Program Files\CCleaner

2014-05-07 01:58 - 2011-02-16 20:52 - 00000000 ____D () C:\ProgramData\Google

2014-05-07 01:56 - 2014-05-07 01:56 - 00000000 ____D () C:\Program Files\Google

2014-05-07 01:56 - 2007-06-22 22:59 - 00000000 ____D () C:\Program Files (x86)\Google

2014-05-07 01:55 - 2014-05-07 01:55 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Security System 2

2014-05-07 01:28 - 2014-05-07 01:28 - 00000000 ____D () C:\Users\Jessi\AppData\Local\Downloaded Installations

2014-05-07 00:55 - 2014-05-07 00:55 - 00003232 _____ () C:\Windows\System32\Tasks\{CCAEAFB8-B227-4463-B7B4-768C5109CD9B}

2014-05-07 00:54 - 2014-05-07 00:51 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000.exe

2014-05-07 00:48 - 2014-05-07 00:48 - 00003298 _____ () C:\Windows\System32\Tasks\{CB6EC068-6806-42CB-A914-30BCF36B7A95}

2014-05-07 00:45 - 2014-05-07 00:41 - 175107584 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_BMBInstallSNU_10.1.21.471_000.msi

2014-05-07 00:45 - 2010-06-18 17:47 - 00000000 ____D () C:\Users\Christian\AppData\Local\Downloaded Installations

2014-05-07 00:44 - 2014-05-07 00:42 - 54721832 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_RMBInstallx64_10.1.21.471_000.exe

2014-05-07 00:43 - 2014-05-07 00:39 - 245247776 _____ () C:\Users\Christian\Downloads\Paragon-277-PRG_WinInstallSNx64_10.1.21.471_000(1).exe

2014-05-07 00:35 - 2014-05-07 00:35 - 02113272 _____ (Nexway) C:\Users\Christian\Downloads\Download your order 21308190.exe

2014-05-06 08:08 - 2014-05-06 08:08 - 00024576 _____ (Realtek Semiconductor.) C:\Windows\SetupAfterRebootService.exe

2014-05-06 07:30 - 2009-09-18 21:38 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-05-06 07:30 - 2009-09-18 21:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-05-06 07:23 - 2014-05-06 07:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\NVIDIA

2014-05-06 06:40 - 2014-05-14 19:00 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 06:17 - 2014-05-14 19:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 05:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\spool

2014-05-06 05:25 - 2014-05-14 19:00 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-06 05:07 - 2014-05-14 19:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-06 05:00 - 2014-05-14 19:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-06 04:10 - 2014-05-14 19:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-06 01:12 - 2014-05-06 01:12 - 00000000 ____D () C:\ProgramData\redistpart

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\Users\Christian\.kchmviewer

2014-05-06 01:11 - 2014-05-06 01:11 - 00000000 ____D () C:\ProgramData\chmview

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\launcher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\explauncher

2014-05-06 01:10 - 2014-05-06 01:10 - 00000000 ____D () C:\ProgramData\deletepart

2014-05-06 00:24 - 2014-05-06 00:24 - 00000000 ____D () C:\Users\Jessi\AppData\Local\ilividmoviestoolbar20

2014-05-01 15:33 - 2012-04-28 00:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hager

2014-04-29 19:30 - 2014-04-29 19:17 - 00511192 _____ (Installer) C:\Users\Jessi\Downloads\Paragon Partition Manager.exe

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\AppData\Local\cache

2014-04-29 19:26 - 2014-04-29 19:26 - 00000000 ____D () C:\Users\Jessi\.android

2014-04-29 19:25 - 2014-04-29 19:25 - 00002539 _____ () C:\Users\Jessi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

2014-04-25 18:13 - 2014-04-25 18:13 - 00033814 _____ () C:\Users\Christian\Downloads\Speedport_w921v_1.34.000_25.04.14_1813.bin

2014-04-24 08:18 - 2014-04-17 14:09 - 00007597 _____ () C:\Users\Christian\AppData\Local\resmon.resmoncfg

2014-04-24 01:11 - 2014-04-24 01:11 - 00000000 ____D () C:\Users\Christian\AppData\Local\NVIDIA

2014-04-23 16:20 - 2013-07-08 20:04 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\WTablet

2014-04-23 16:10 - 2014-04-23 16:10 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\NVIDIA

2014-04-23 16:06 - 2014-04-23 15:19 - 00007656 _____ () C:\Users\Jessi\AppData\Local\resmon.resmoncfg

2014-04-23 15:40 - 2014-04-23 15:40 - 00000000 ____D () C:\Users\Jessi\AppData\Local\NVIDIA Corporation

2014-04-23 06:27 - 2010-07-19 18:41 - 00000000 ____D () C:\ProgramData\Recovery

2014-04-22 19:34 - 2009-09-18 21:36 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-04-22 19:24 - 2014-04-22 19:24 - 00002047 _____ () C:\Users\Public\Desktop\Live Update 5.lnk

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2014-04-22 19:24 - 2014-04-22 19:24 - 00000000 ____D () C:\Program Files (x86)\MSI

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieUserList

2014-04-22 14:45 - 2014-04-22 14:45 - 00000000 __SHD () C:\Users\Jessi\AppData\Local\EmieSiteList

2014-04-22 00:13 - 2014-04-22 00:13 - 00000000 ____D () C:\Users\Christian\.android

2014-04-22 00:13 - 2013-07-08 23:27 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\WTablet

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-04-22 00:09 - 2014-04-22 00:09 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-04-22 00:09 - 2011-06-19 17:47 - 00000000 ____D () C:\Program Files\Tablet

2014-04-22 00:09 - 2009-11-09 00:13 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieUserList

2014-04-21 14:38 - 2014-04-21 14:38 - 00000000 __SHD () C:\Users\Christian\AppData\Local\EmieSiteList

2014-04-19 19:09 - 2009-11-03 22:11 - 00103304 _____ () C:\Users\Christian\AppData\Local\GDIPFONTCACHEV1.DAT

2014-04-19 17:11 - 2009-07-14 06:45 - 05206728 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-04-18 15:25 - 2014-04-18 15:25 - 00003902 _____ () C:\Users\Jessi\Downloads\qrcode (2).eps

2014-04-18 15:18 - 2009-11-06 09:36 - 00103304 _____ () C:\Users\Jessi\AppData\Local\GDIPFONTCACHEV1.DAT

2014-04-17 09:11 - 2010-10-13 13:53 - 00001456 _____ () C:\Users\Jessi\AppData\Local\Adobe Für Web speichern 12.0 Prefs

2014-04-17 08:55 - 2014-04-17 08:55 - 00020108 _____ () C:\Users\Jessi\Downloads\qrcode (1).eps
 

Some content of TEMP:

====================

C:\Users\Christian\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3c7odb.dll

C:\Users\Christian\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe

[2014-05-14 18:49] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
 

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-09 00:25
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Gegenwärtig läuft alles so werbe- und popupfrei wie es meines Empfindens nach sein kann!
Überaus herzlichen Dank! Meine Frau macht Luftsprünge, dass Sie jetzt endlich in einem akzeptablen Tempo wieder Ihre Fotos ver- und bearbeiten kann!

[/CODE]

schrauber

18.05.2014 11:02

Java und Adobe updaten.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

WinZip Malware Protector deinstallieren, das ist Fake!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Windows\System32\LightsOff.CD920490367F.2.6.80.dll

C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll

HKU\SCANNERMAP\...\Run: [genesis] => "c:\users\jessi\appdata\local\genesis\genesis.exe" /r

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

ProxyServer: http=127.0.0.1:13810

2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-10 06:43 - 2014-05-10 06:43 - 00003548 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-15 00:36 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 06:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 00:08 - 00001255 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Nico Mak Computing

2014-05-10 00:08 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe

2014-05-10 00:07 - 2014-05-10 00:07 - 04892480 _____ (WinZip International LLC ) C:\Users\Jessi\Downloads\wzmp_8.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schramme

28.05.2014 09:28

Hallo Schrauber,
tut mir leid, aus dienstlichen Gründen habe ich es nicht eher geschafft weiter zu machen.

Jetzt aber die Fixlog.txt:

Code:



Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-05-2014 02

Ran by Christian at 2014-05-28 10:25:54 Run:1

Running from C:\Users\Christian\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

C:\Windows\System32\LightsOff.CD920490367F.2.6.80.dll

C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll

HKU\SCANNERMAP\...\Run: [genesis] => "c:\users\jessi\appdata\local\genesis\genesis.exe" /r

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

ProxyServer: http=127.0.0.1:13810

2014-05-10 08:20 - 2014-05-10 08:20 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Nico Mak Computing

2014-05-10 06:43 - 2014-05-10 06:43 - 00003548 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-15 00:36 - 00000000 ____D () C:\Program Files (x86)\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 06:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector

2014-05-10 00:08 - 2014-05-10 00:08 - 00001255 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\Users\Jessi\AppData\Roaming\Nico Mak Computing

2014-05-10 00:08 - 2014-05-10 00:08 - 00000000 ____D () C:\ProgramData\Nico Mak Computing

2014-05-10 00:08 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe

2014-05-10 00:07 - 2014-05-10 00:07 - 04892480 _____ (WinZip International LLC ) C:\Users\Jessi\Downloads\wzmp_8.exe

         

*****************
 

C:\Windows\System32\LightsOff.CD920490367F.2.6.80.dll => Moved successfully.

C:\Windows\SysWOW64\LightsOff.CD920490367F.2.6.80.dll => Moved successfully.

HKU\SCANNERMAP\Software\Microsoft\Windows\CurrentVersion\Run\\genesis => Value not found.

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.

C:\Users\Christian\AppData\Roaming\Nico Mak Computing => Moved successfully.

"C:\Windows\System32\Tasks\WinZip Malware Protector" => File/Directory not found.

"C:\Program Files (x86)\WinZip Malware Protector" => File/Directory not found.

"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector" => File/Directory not found.

"C:\Users\Public\Desktop\WinZip Malware Protector.lnk" => File/Directory not found.

C:\Users\Jessi\AppData\Roaming\Nico Mak Computing => Moved successfully.

"C:\ProgramData\Nico Mak Computing" => File/Directory not found.

"C:\Windows\system32\wsusnative64.exe" => File/Directory not found.

C:\Users\Jessi\Downloads\wzmp_8.exe => Moved successfully.
 
 

The system needed a reboot. 
 

==== End of Fixlog ====

Alle Zeitangaben in WEZ +1. Es ist jetzt 06:01 Uhr.

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131