Trojaner-Board - (save , on) Links im Internet & Chrome funktioniert nicht richtig

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - (save , on) Links im Internet & Chrome funktioniert nicht richtig (https://www.trojaner-board.de/156202-save-on-links-internet-chrome-funktioniert-richtig.html)

Terrenay

07.07.2014 18:18

(save , on) Links im Internet & Chrome funktioniert nicht richtig

Hallo, ich musste hier leider schon einmal ein Thema wegen eines ähnlichen Problems eröffnen... Auch damals ging es um eine Google Chrome Extension, die nicht deaktiviert werden konnte und auf jeder Internetseite irgendwelche Wörter zu Links verwandelt hat.. Diese Extension, die ich jetzt drauf hab (natürlich ungewollt) heisst "save , on". Wenn ich sie aus der Extension-Liste lösche, ist sie beim nächsten Chrome-Start wieder drin. Die Links gehen zwar weg, wenn ich sie deaktiviere, aber kommen halt beim nächsten Start wieder.

Des Weiteren hab ich noch ein Problem mit Chrome.. Ich hab vor einiger Zeit versehentlich einen Teil des Grafiktreibers gelöscht, aber glücklicherweise nach 2 Tagen wieder hingekriegt. Seit da ist allerdings der PC insgesamt ein wenig langsamer geworden (fällt nicht so auf, aber trotzdem) und wenn ich Chrome starte, kommt etwa 5 Mal die Fehlermeldung, dass ich nicht in Chrome eingeloggt werden konnte. Und noch etwas: Wenn ich Chrome beende und danach wieder starten will, funktioniert es nicht, da der Prozess irgendwie noch im Hintergrund weiterläuft... muss jedes Mal erst den Prozess (der etwa 3 Mal drinsteht) mit dem Taskmanager killen :(

Angehängt mal der Scan mit Malwarebytes (ich bekomme irgendwie täglich so viele Ergebnisse.. ich hoffe MWB ist nicht selber infinziert :o)

Schon Mal Danke für die Hilfe :)

schrauber

07.07.2014 18:25

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Terrenay

07.07.2014 18:36

FRST.txt:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01

Ran by Sven (administrator) on MirjamZanetti on 07-07-2014 19:29:32

Running from C:\Users\Sven\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(PCRx.com, LLC) C:\Program Files (x86)\24x7Help\App24x7Svc.exe

(Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

() C:\Program Files (x86)\LPT\srpts.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
 
 

==================== Registry (Whitelisted) ==================
 

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}

HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}

HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoNetworkConnections] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoCommonGroups] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\acer.exe

AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found

AppInit_DLLs:  C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll [2721072 2014-02-24] ()

AppInit_DLLs-x32: c:\progra~2\searchprotect\searchprotect\bin\spvc32loader.dll => "c:\progra~2\searchprotect\searchprotect\bin\spvc32loader.dll" File Not Found

AppInit_DLLs-x32:  c:\progra~2\optimi~1\optpro~1.dll => c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [3000776 2013-10-29] ()

Startup: C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://websearch.exitingsearch.info/?pid=725&r=2014/03/21&hid=10042898870410746318&lg=EN&cc=CH&unqvl=50

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://websearch.exitingsearch.info/?pid=725&r=2014/03/21&hid=10042898870410746318&lg=EN&cc=CH&unqvl=50

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 

SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 

SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 

SearchScopes: HKCU - DefaultScope {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.exitingsearch.info/?l=1&q={searchTerms}&pid=725&r=2014/03/21&hid=10042898870410746318&lg=EN&cc=CH&unqvl=50

SearchScopes: HKCU - {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms}

BHO: No Name - {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - C:\PROGRA~2\SITERA~1\SiteR64.dll No File

BHO: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)

BHO: websAve - {64F90499-3748-EB91-80FB-AF08D4C67CEB} - C:\Program Files (x86)\websAve\sILwmCx.x64.dll No File

BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO: SNT - {76F9D91C-56F3-3618-2D80-F6734BE2E498} - C:\Program Files (x86)\SNT\5AJN.x64.dll No File

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: YoutubeAdblocker - {A7388829-048E-0C3D-362C-D61D931EE415} - C:\Program Files (x86)\YoutubeAdblocker\TNNSE_b.x64.dll No File

BHO: No Name - {CCB69577-088B-4004-9ED8-FF5BCC83A039} - C:\Program Files (x86)\RebateInformer\RebInf64.dll (Inbox.com)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll (Xacti, LLC)

BHO-x32: No Name - {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - C:\PROGRA~2\SITERA~1\SiteRank.dll No File

BHO-x32: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll No File

BHO-x32: websAve - {64F90499-3748-EB91-80FB-AF08D4C67CEB} - C:\Program Files (x86)\websAve\sILwmCx.dll No File

BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: SNT - {76F9D91C-56F3-3618-2D80-F6734BE2E498} - C:\Program Files (x86)\SNT\5AJN.dll No File

BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)

BHO-x32: Media Watch - {8be1f90a-ab31-4a5a-9285-bb553c6c359d} - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ie\MediaWatchV1home1136.dll No File

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: YoutubeAdblocker - {A7388829-048E-0C3D-362C-D61D931EE415} - C:\Program Files (x86)\YoutubeAdblocker\TNNSE_b.dll No File

BHO-x32: No Name - {CCB69577-088B-4004-9ED8-FF5BCC83A039} - C:\Program Files (x86)\RebateInformer\RebateI.dll (Inbox.com)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Media View - {fed65192-d64e-4d7b-91f6-37d5f033d528} - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File

Toolbar: HKLM - &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll (Xacti, LLC)

Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - loadtbs - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - C:\Users\Tim\AppData\Roaming\loadtbs\toolbar.dll No File

Toolbar: HKLM-x32 - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll (Xacti, LLC)

Handler: rebinfo - {AF808758-C780-404C-A4EE-4526323FD9B6} - C:\Program Files (x86)\RebateInformer\RebInf64.dll (Inbox.com)

Handler-x32: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\Program Files (x86)\Inbox Toolbar\Inbox.dll (Xacti, LLC)

Handler-x32: rebinfo - {AF808758-C780-404C-A4EE-4526323FD9B6} - C:\Program Files (x86)\RebateInformer\RebateI.dll (Inbox.com)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (AVG Secure Search)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
 

FireFox:

========

FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default

FF DefaultSearchEngine: WebSearch

FF SearchEngineOrder.1: WebSearch

FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\\npsitesafety.dll No File

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Sven\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF user.js: detected! => C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\user.js

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\searchplugins\Mysearchdial.xml

FF SearchPlugin: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\searchplugins\Web Search.xml

FF SearchPlugin: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\searchplugins\WebSearch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml

FF Extension: YoutubeAdblocker - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\8sayuwumg@qf-ojca.edu [2014-03-24]

FF Extension: SNT - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\hcfai@pbgqo-.co.uk [2014-03-24]

FF Extension: Quick Start - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\quick_start@gmail.com [2014-03-05]

FF Extension: safeoweb - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\ylwdzcck@vz-vwc.net [2014-03-24]

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox

FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]

FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\extensions\quick_start@gmail.com

FF Extension: Quick Start - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\extensions\quick_start@gmail.com [2014-03-05]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff

FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff [2014-03-20]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff

FF Extension: Media Watch - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff [2014-03-24]
 

Chrome: 

=======

CHR HomePage: hxxp://google.ch/

CHR StartupUrls: "hxxp://www.google.ch/"

CHR DefaultSearchKeyword: google.ch___

CHR Extension: (Google Drive) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-25]

CHR Extension: (save, on) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]

CHR Extension: (YouTube) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-25]

CHR Extension: (Google-Suche) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-25]

CHR Extension: (Google Wallet) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

CHR Extension: (Google Mail) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-25]

CHR Extension: (save, on) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14 [2014-06-23]

CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Tim\AppData\Local\mysearchdial-speeddial.crx [2014-01-24]

CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2014-01-14]

CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2014-01-14]

CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2014-02-25]

CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2014-02-25]

CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-03-05]

CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Tim\AppData\Local\mysearchdial-speeddial.crx [2014-01-24]

CHR HKLM-x32\...\Chrome\Extension: [pljcgbedjplidkdjahbaalanadmjfgop] - C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ-V7C\CRX\ToolbarCR.crx [2014-01-24]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 24x7HelpSvc; C:\Program Files (x86)\24x7Help\App24x7Svc.exe [339808 2013-12-12] (PCRx.com, LLC)

R2 70e6ca8c; c:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll [186496 2013-10-29] ()

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)

R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [32288 2014-02-06] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]

R2 vToolbarUpdater18.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [1801240 2014-05-25] (AVG Secure Search)

S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]

S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]

S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

S2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe -service [X]

S2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe -service [X]
 

==================== Drivers (Whitelisted) ====================
 

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-07] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-07 19:29 - 2014-07-07 19:30 - 00027962 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-07 19:29 - 00000000 ____D () C:\FRST

2014-07-07 19:27 - 2014-07-07 19:27 - 02084352 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 19:16 - 2014-07-07 19:16 - 00035116 _____ () C:\Users\Sven\Desktop\mwblog.rar

2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:44 - 2014-07-07 14:45 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-23 12:57 - 2014-06-23 12:57 - 00000000 ____D () C:\Users\Mirjam Zanetti\Documents\Optimizer Pro

2014-06-23 12:56 - 2014-06-23 12:56 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Optimizer Pro

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\ProgramData\MySearch

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\ProgramData\AnyAppSnow

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\Program Files (x86)\MySearch

2014-06-23 12:41 - 2014-06-23 12:43 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\SkypEmoticons

2014-06-23 12:41 - 2014-06-23 12:41 - 00001070 _____ () C:\Users\Mirjam Zanetti\Desktop\Optimizer Pro.lnk

2014-06-23 12:41 - 2014-06-23 12:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkypEmoticons

2014-06-23 12:39 - 2014-07-03 20:34 - 00000000 ____D () C:\ProgramData\save, on

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Tim\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Sven\AppData\Local\Comodo

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Sven\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Gast\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Program Files (x86)\save, on

2014-06-17 21:27 - 2014-06-17 21:59 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Audacity

2014-06-17 21:27 - 2014-06-17 21:27 - 00001027 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk

2014-06-17 21:27 - 2014-06-17 21:27 - 00001015 _____ () C:\Users\Public\Desktop\Audacity.lnk

2014-06-17 21:27 - 2014-06-17 21:27 - 00000000 ____D () C:\Program Files (x86)\Audacity

2014-06-17 21:23 - 2014-06-17 21:26 - 22180353 _____ (Audacity Team ) C:\Users\Sven\Downloads\audacity-win-2.0.5.exe

2014-06-14 14:49 - 2014-06-15 17:28 - 00000000 ____D () C:\Users\Mirjam Zanetti\Downloads\Holzbrücken_files

2014-06-14 14:49 - 2014-06-14 14:49 - 00012165 _____ () C:\Users\Mirjam Zanetti\Downloads\Holzbrücken.htm

2014-06-13 12:11 - 2014-06-13 12:11 - 20143464 _____ (Gameforge ) C:\Users\Tim\Downloads\4Story_GameforgeLiveSetup (2).exe

2014-06-11 18:01 - 2014-06-11 18:01 - 01681384 _____ (Bandoo Media Inc) C:\Users\Sven\Downloads\iLividSetup-r495-n-bc.exe

2014-06-11 15:42 - 2014-06-11 15:42 - 54082726 _____ () C:\Users\Sven\Desktop\AncientMagic_New.zip

2014-06-11 14:20 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-06-11 14:20 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-06-11 14:20 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-06-11 14:20 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-06-11 14:20 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-06-11 14:20 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-11 14:20 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-11 14:20 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-06-11 14:20 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-11 14:20 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-06-11 14:20 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-11 14:20 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-11 14:20 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-06-11 14:20 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-06-11 14:20 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-06-11 14:20 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-06-11 14:20 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-06-11 14:20 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-06-11 14:20 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-06-11 14:20 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-11 14:20 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-06-11 14:20 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-06-11 14:20 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-06-11 14:20 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-06-11 14:20 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-11 14:20 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-06-11 14:20 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-06-11 14:20 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-11 14:20 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-11 14:20 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-06-11 14:20 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-06-11 14:20 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-11 14:20 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-06-11 14:20 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-06-11 14:20 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-06-11 14:20 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-06-11 14:20 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-06-11 14:20 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-11 14:20 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-06-11 14:20 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-06-11 14:20 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-06-11 14:20 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-06-11 14:20 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-06-11 14:20 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-06-11 14:20 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-06-11 14:20 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-06-11 14:20 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-06-11 14:20 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-06-11 14:20 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-06-11 14:20 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-06-11 14:20 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-06-11 14:20 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-06-11 14:14 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-06-11 14:14 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-06-11 14:14 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2014-06-11 14:14 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2014-06-11 14:14 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-06-11 14:14 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-06-11 14:14 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2014-06-11 14:14 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-06-11 14:14 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2014-06-11 14:14 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-06-11 14:14 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2014-06-11 14:14 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-06-11 14:14 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll

2014-06-11 14:14 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-06-11 14:09 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-11 14:09 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-10 15:51 - 2014-06-10 15:51 - 20143464 _____ (Gameforge ) C:\Users\Tim\Downloads\4Story_GameforgeLiveSetup.exe

2014-06-10 15:47 - 2014-06-10 15:49 - 20143464 _____ (Gameforge ) C:\Users\Tim\Downloads\4Story_GameforgeLiveSetup (1).exe

2014-06-10 07:28 - 2014-06-10 07:31 - 20143464 _____ (Gameforge ) C:\Users\Tim\Desktop\4Story_GameforgeLiveSetup.exe

2014-06-09 17:06 - 2014-06-09 17:08 - 00000000 ____D () C:\Users\Sven\weblica-data

2014-06-09 17:06 - 2014-06-09 17:08 - 00000000 ____D () C:\Users\Sven\weblica

2014-06-09 17:06 - 2014-06-09 17:06 - 00000999 _____ () C:\Users\Public\Desktop\weblica.lnk

2014-06-09 17:06 - 2014-06-09 17:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\weblica

2014-06-09 17:04 - 2014-06-09 17:06 - 00000000 ____D () C:\Program Files (x86)\weblica

2014-06-09 16:35 - 2014-06-09 16:51 - 134657408 _____ (empros gmbh) C:\Users\Sven\Downloads\weblica-3.6.3-setup.exe

2014-06-09 14:42 - 2014-06-09 14:53 - 00000000 ____D () C:\Users\Sven\Desktop\AncientMagic_New

2014-06-08 11:55 - 2014-06-08 11:55 - 00000000 ____D () C:\Program Files (x86)\Sven Zanetti

2014-06-08 11:48 - 2014-06-08 11:48 - 00001187 _____ () C:\Users\Sven\Desktop\InstallForge.lnk

2014-06-08 11:48 - 2014-06-08 11:48 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\solicus

2014-06-08 11:48 - 2014-06-08 11:48 - 00000000 ____D () C:\Program Files (x86)\solicus

2014-06-08 11:47 - 2014-06-08 11:48 - 02014870 _____ () C:\Users\Sven\Downloads\IFSetup.exe

2014-06-08 11:46 - 2014-06-08 11:46 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AncientMagic_New
 

==================== One Month Modified Files and Folders =======
 

2014-07-07 19:30 - 2014-07-07 19:29 - 00027962 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-07 19:30 - 2014-03-10 22:02 - 00000222 _____ () C:\Windows\Tasks\CPU Grid Computing.job

2014-07-07 19:29 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-07 19:27 - 02084352 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 19:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

2014-07-07 19:16 - 2014-07-07 19:16 - 00035116 _____ () C:\Users\Sven\Desktop\mwblog.rar

2014-07-07 19:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-07-07 19:00 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-07 19:00 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-07 18:56 - 2012-06-29 12:21 - 02056677 _____ () C:\Windows\WindowsUpdate.log

2014-07-07 18:53 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-07 18:52 - 2014-05-26 20:44 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-07 18:52 - 2014-03-05 19:40 - 00000348 _____ () C:\Windows\Tasks\AmiUpdXp.job

2014-07-07 18:52 - 2014-02-26 14:37 - 00000440 ____H () C:\Windows\Tasks\WS.Booster-S-1431105474.job

2014-07-07 18:52 - 2014-02-16 16:16 - 00000444 ____H () C:\Windows\Tasks\WS.Booster-S-5195167130.job

2014-07-07 18:52 - 2013-12-16 13:29 - 00000440 ____H () C:\Windows\Tasks\SK.Enabler-S-1495795506.job

2014-07-07 18:52 - 2010-11-21 05:47 - 01418426 _____ () C:\Windows\PFRO.log

2014-07-07 18:52 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-07 18:52 - 2009-07-14 06:51 - 00101588 _____ () C:\Windows\setupact.log

2014-07-07 18:49 - 2014-05-26 20:44 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-07 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

2014-07-07 14:54 - 2013-09-19 19:37 - 00000000 ___HD () C:\ArcTemp

2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:45 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-07 10:52 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent

2014-07-07 10:36 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype

2014-07-06 20:02 - 2014-03-10 22:02 - 00000322 _____ () C:\Windows\Tasks\Grid Computing Updater.job

2014-07-06 11:48 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012

2014-07-06 10:24 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven

2014-07-04 23:12 - 2014-02-24 12:51 - 00000000 ____D () C:\Program Files (x86)\LPT

2014-07-04 18:01 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim

2014-07-03 20:34 - 2014-06-23 12:39 - 00000000 ____D () C:\ProgramData\save, on

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 19:09 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-27 16:58 - 2014-01-21 18:43 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\newnext.me

2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer

2014-06-26 20:49 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype

2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr

2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf

2014-06-24 07:19 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-06-23 21:06 - 2014-02-24 12:51 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro

2014-06-23 12:57 - 2014-06-23 12:57 - 00000000 ____D () C:\Users\Mirjam Zanetti\Documents\Optimizer Pro

2014-06-23 12:57 - 2012-03-23 02:27 - 00000000 ____D () C:\ProgramData\Temp

2014-06-23 12:56 - 2014-06-23 12:56 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Optimizer Pro

2014-06-23 12:43 - 2014-06-23 12:41 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\SkypEmoticons

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\ProgramData\MySearch

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\ProgramData\AnyAppSnow

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\Program Files (x86)\MySearch

2014-06-23 12:42 - 2013-12-16 13:27 - 00000000 ____D () C:\ProgramData\InstallMate

2014-06-23 12:42 - 2013-12-02 21:20 - 00000000 ____D () C:\ProgramData\4c56cbda1eea8c4f

2014-06-23 12:41 - 2014-06-23 12:41 - 00001070 _____ () C:\Users\Mirjam Zanetti\Desktop\Optimizer Pro.lnk

2014-06-23 12:41 - 2014-06-23 12:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkypEmoticons

2014-06-23 12:41 - 2014-02-24 12:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Tim\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Sven\AppData\Local\Comodo

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Sven\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Gast\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Program Files (x86)\save, on

2014-06-23 12:39 - 2014-02-24 18:05 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-06-22 16:46 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti

2014-06-18 16:28 - 2014-01-01 16:21 - 00000000 ____D () C:\Program Files (x86)\Overwolf

2014-06-17 21:59 - 2014-06-17 21:27 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Audacity

2014-06-17 21:27 - 2014-06-17 21:27 - 00001027 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk

2014-06-17 21:27 - 2014-06-17 21:27 - 00001015 _____ () C:\Users\Public\Desktop\Audacity.lnk

2014-06-17 21:27 - 2014-06-17 21:27 - 00000000 ____D () C:\Program Files (x86)\Audacity

2014-06-17 21:26 - 2014-06-17 21:23 - 22180353 _____ (Audacity Team ) C:\Users\Sven\Downloads\audacity-win-2.0.5.exe

2014-06-15 17:28 - 2014-06-14 14:49 - 00000000 ____D () C:\Users\Mirjam Zanetti\Downloads\Holzbrücken_files

2014-06-14 14:49 - 2014-06-14 14:49 - 00012165 _____ () C:\Users\Mirjam Zanetti\Downloads\Holzbrücken.htm

2014-06-13 12:11 - 2014-06-13 12:11 - 20143464 _____ (Gameforge ) C:\Users\Tim\Downloads\4Story_GameforgeLiveSetup (2).exe

2014-06-13 12:11 - 2013-02-03 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live

2014-06-13 12:11 - 2013-02-03 17:47 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive

2014-06-12 14:10 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-06-12 14:05 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-06-12 14:05 - 2012-11-07 14:34 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-06-12 14:03 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-06-11 18:01 - 2014-06-11 18:01 - 01681384 _____ (Bandoo Media Inc) C:\Users\Sven\Downloads\iLividSetup-r495-n-bc.exe

2014-06-11 15:42 - 2014-06-11 15:42 - 54082726 _____ () C:\Users\Sven\Desktop\AncientMagic_New.zip

2014-06-10 15:51 - 2014-06-10 15:51 - 20143464 _____ (Gameforge ) C:\Users\Tim\Downloads\4Story_GameforgeLiveSetup.exe

2014-06-10 15:49 - 2014-06-10 15:47 - 20143464 _____ (Gameforge ) C:\Users\Tim\Downloads\4Story_GameforgeLiveSetup (1).exe

2014-06-10 07:32 - 2013-02-06 20:02 - 00000000 ____D () C:\Users\Mirjam Zanetti\Downloads\Gameforge Live

2014-06-10 07:31 - 2014-06-10 07:28 - 20143464 _____ (Gameforge ) C:\Users\Tim\Desktop\4Story_GameforgeLiveSetup.exe

2014-06-09 17:08 - 2014-06-09 17:06 - 00000000 ____D () C:\Users\Sven\weblica-data

2014-06-09 17:08 - 2014-06-09 17:06 - 00000000 ____D () C:\Users\Sven\weblica

2014-06-09 17:06 - 2014-06-09 17:06 - 00000999 _____ () C:\Users\Public\Desktop\weblica.lnk

2014-06-09 17:06 - 2014-06-09 17:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\weblica

2014-06-09 17:06 - 2014-06-09 17:04 - 00000000 ____D () C:\Program Files (x86)\weblica

2014-06-09 16:51 - 2014-06-09 16:35 - 134657408 _____ (empros gmbh) C:\Users\Sven\Downloads\weblica-3.6.3-setup.exe

2014-06-09 14:53 - 2014-06-09 14:42 - 00000000 ____D () C:\Users\Sven\Desktop\AncientMagic_New

2014-06-08 12:02 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment

2014-06-08 11:55 - 2014-06-08 11:55 - 00000000 ____D () C:\Program Files (x86)\Sven Zanetti

2014-06-08 11:48 - 2014-06-08 11:48 - 00001187 _____ () C:\Users\Sven\Desktop\InstallForge.lnk

2014-06-08 11:48 - 2014-06-08 11:48 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\solicus

2014-06-08 11:48 - 2014-06-08 11:48 - 00000000 ____D () C:\Program Files (x86)\solicus

2014-06-08 11:48 - 2014-06-08 11:47 - 02014870 _____ () C:\Users\Sven\Downloads\IFSetup.exe

2014-06-08 11:46 - 2014-06-08 11:46 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AncientMagic_New

2014-06-08 11:13 - 2014-06-11 14:09 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-08 11:08 - 2014-06-11 14:09 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-07 11:49 - 2014-02-15 18:56 - 00002076 _____ () C:\Users\Sven\AppData\Roaming\Charaktere.xml
 

Files to move or delete:

====================

C:\Users\Public\AlexaNSISPlugin.3080.dll
 
 

Some content of TEMP:

====================

C:\Users\Mirjam Zanetti\AppData\Local\Temp\i4jdel0.exe

C:\Users\Mirjam Zanetti\AppData\Local\Temp\optprosetup.exe

C:\Users\Mirjam Zanetti\AppData\Local\Temp\propsys.dll

C:\Users\Mirjam Zanetti\AppData\Local\Temp\Sqlite3.dll

C:\Users\Mirjam Zanetti\AppData\Local\Temp\sSetup-se.exe

C:\Users\Sven\AppData\Local\Temp\1392373196_WindowShopper_mzqnzmz.exe

C:\Users\Sven\AppData\Local\Temp\92825uninstall.exe

C:\Users\Sven\AppData\Local\Temp\appinstall.exe

C:\Users\Sven\AppData\Local\Temp\FreemakeVideoConverter_4.1.3.15.exe

C:\Users\Sven\AppData\Local\Temp\htmlayout.dll

C:\Users\Sven\AppData\Local\Temp\ifxuec0f.dll

C:\Users\Sven\AppData\Local\Temp\jknsf453.dll

C:\Users\Sven\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe

C:\Users\Sven\AppData\Local\Temp\oi_{2C9319C4-8722-4E0C-A452-58CCB2B35D3A}.exe

C:\Users\Sven\AppData\Local\Temp\optprosetup.exe

C:\Users\Sven\AppData\Local\Temp\raptrpatch.exe

C:\Users\Sven\AppData\Local\Temp\raptr_stub.exe

C:\Users\Sven\AppData\Local\Temp\safeguard.exe

C:\Users\Sven\AppData\Local\Temp\setapp.exe

C:\Users\Sven\AppData\Local\Temp\Sqlite3.dll

C:\Users\Sven\AppData\Local\Temp\SurftasticSetup.exe

C:\Users\Sven\AppData\Local\Temp\Tsu283167A6.dll

C:\Users\Sven\AppData\Local\Temp\upibbv2d.dll

C:\Users\Sven\AppData\Local\Temp\VersionTmp.exe

C:\Users\Sven\AppData\Local\Temp\w23ptpgn.dll

C:\Users\Tim\AppData\Local\Temp\4Story_hack_Downloader.exe

C:\Users\Tim\AppData\Local\Temp\APNSetup.exe

C:\Users\Tim\AppData\Local\Temp\BackupSetup.exe

C:\Users\Tim\AppData\Local\Temp\BobyLyrics.exe

C:\Users\Tim\AppData\Local\Temp\BobyLyrics_1060-1090_v122.exe

C:\Users\Tim\AppData\Local\Temp\downloader.dll

C:\Users\Tim\AppData\Local\Temp\ffmpeg.exe

C:\Users\Tim\AppData\Local\Temp\FreemakeVideoConverter_4.1.3.8.exe

C:\Users\Tim\AppData\Local\Temp\Installer.exe

C:\Users\Tim\AppData\Local\Temp\Mobogenie_Setup_2-1-37_37.exe

C:\Users\Tim\AppData\Local\Temp\Mobogenie_Setup_2-1-37_610.exe

C:\Users\Tim\AppData\Local\Temp\nsdD751.exe

C:\Users\Tim\AppData\Local\Temp\nsdE161.exe

C:\Users\Tim\AppData\Local\Temp\nshB531.exe

C:\Users\Tim\AppData\Local\Temp\nshE3D1.exe

C:\Users\Tim\AppData\Local\Temp\nshE7C8.exe

C:\Users\Tim\AppData\Local\Temp\nsiD108.exe

C:\Users\Tim\AppData\Local\Temp\nsiD415.exe

C:\Users\Tim\AppData\Local\Temp\nsmB1A7.exe

C:\Users\Tim\AppData\Local\Temp\nsmEB90.exe

C:\Users\Tim\AppData\Local\Temp\nsnE4AC.exe

C:\Users\Tim\AppData\Local\Temp\nsrAC97.exe

C:\Users\Tim\AppData\Local\Temp\nsrB8CA.exe

C:\Users\Tim\AppData\Local\Temp\nssDEB1.exe

C:\Users\Tim\AppData\Local\Temp\OptimizerPro.exe

C:\Users\Tim\AppData\Local\Temp\setup__3862.exe

C:\Users\Tim\AppData\Local\Temp\Softonic_chr_1-8-29-3_cn.exe

C:\Users\Tim\AppData\Local\Temp\swt-win32-3740.dll

C:\Users\Tim\AppData\Local\Temp\Torrent.dll

C:\Users\Tim\AppData\Local\Temp\vcredist_x64.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-03-25 09:03
 

==================== End Of Log ============================

--- --- ---

Sorry, aber die Datei war zu gross um sie in den Post zu schreiben.. Irgendwie passt auch hier die addition.txt nicht mehr rein. Also poste ich sie gleich in einem anderen Post ;)

Terrenay

07.07.2014 18:37

Addition.txt:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-07-2014 01

Ran by Sven at 2014-07-07 19:30:49

Running from C:\Users\Sven\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 
 

==================== Installed Programs ======================
 

 clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden

 clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden

 Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden

 Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden

24x7 Help (HKLM-x32\...\{A957F04C-49F4-4375-8C8A-D04B769EFE47}_is1) (Version: 2.2.0.6 - Crawler, LLC) <==== ATTENTION

4Story (HKCU\...\Kalydo App 4Story) (Version: 4.02.02.6 - )

4Story DE 4.2.213 (HKLM-x32\...\4Story_DE_is1) (Version:  - )

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

Accelesys (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{8b68ee33}) (Version:  - PlanetCore) <==== ATTENTION

Accelewin (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{a5a53867}) (Version:  - Linker Ltd) <==== ATTENTION

Acer eDisplay Management (HKLM-x32\...\{A586DC50-B18D-48FB-B7CC-A598200457C2}) (Version: 1.37.007 - Portrait Displays, Inc.)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)

Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)

Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)

Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0609.2011 - Acer Incorporated)

Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)

Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden

Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.5 - Sereby Corporation)

AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden

AMD APP SDK Runtime (Version: 10.0.873.1 - Advanced Micro Devices Inc.) Hidden

AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden

AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden

AMD Steady Video Plug-In  (Version: 2.07.0000 - AMD) Hidden

AMD USB 3.0 Device Detector (Version: 2.1.29.0 - Advanced Micro Devices, Inc.) Hidden

AMD VISION Engine Control Center (x32 Version: 2012.0126.1906.34079 - Advanced Micro Devices, Inc.) Hidden

AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden

Ancient Magic (HKLM-x32\...\Ancient Magic) (Version: 0.0.0.1 - Sven Zanetti)

AncientMagic_New (HKCU\...\785aa0fbe9abac3c) (Version: 0.0.0.2 - AncientMagic_New)

Any Video Converter 5.5.5 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)

Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)

Ask Toolbar (HKLM-x32\...\{4F524A2D-5637-4300-76A7-A758B70C0A03}) (Version: 12.10.3.28 - APN, LLC) <==== ATTENTION

aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)

Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)

AVG SafeGuard toolbar (HKLM-x32\...\AVG SafeGuard toolbar) (Version: 18.1.0.443 - AVG Technologies)

Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.7.8981 - )

Benutzerhandbuch - Grundlagen EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Bog) (Version:  - )

Benutzerhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Useg) (Version:  - )

Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)

BitComet 1.36 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.36 - CometNetwork)

Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden

Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden

Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden

Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden

Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden

Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden

Blender (HKLM\...\Blender) (Version: 2.70a - Blender Foundation)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.17.916 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{7E6316CA-5ED0-4EF9-9920-A92115E286B7}) (Version: 0.7.17.916 - BlueStack Systems, Inc.)

Browser Enhancer (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{5717af3d}) (Version:  - Goingo) <==== ATTENTION

Browser System Enahncer (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{671c50b0}) (Version:  - GreatSoft) <==== ATTENTION

Camtasia Studio 8 (HKLM-x32\...\{A7727F03-5311-4A12-9A63-2ACD20BA0497}) (Version: 8.2.1.1423 - TechSmith Corporation)

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

Chat Mapper (HKLM-x32\...\{498F0DC0-3B5E-4DC7-B571-578F61306058}) (Version: 1.7.0.0 - Urban Brain Studios, Inc.)

clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)

clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)

CPU Miner (HKLM-x32\...\CPUMiner) (Version: 1.0 - WinTuneUp Apps. )

CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)

CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)

DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation)

Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden

Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden

Download Navigator (HKLM-x32\...\{E728441A-7820-4B1C-87C9-DE7BE37B2953}) (Version: 1.1.0 - SEIKO EPSON CORPORATION)

Druckerdeinstallation für EPSON XP-402 403 405 406 Series (HKLM\...\EPSON XP-402 403 405 406 Series) (Version:  - SEIKO EPSON Corporation)

eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)

Elsword_DE (HKLM-x32\...\Elsword_DE_is1) (Version:  - )

Entity Framework Designer für Visual Studio 2012 - DEU (HKLM-x32\...\{B2BDC072-BE01-432D-B281-30891D597FBB}) (Version: 11.1.30729.00 - Microsoft Corporation)

Epson Easy Photo Print 2 (HKLM-x32\...\{30E01116-5666-4807-8EF1-D80E9FF16717}) (Version: 2.3.2.0 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)

Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)

FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden

FileZilla Client 3.8.1 (HKLM-x32\...\FileZilla Client) (Version: 3.8.1 - Tim Kosse)

Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden

Fotogaléria (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalleri (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalleriet (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Freemake Video Converter Version 4.1.3 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.3 - Ellora Assets Corporation)

Galeria de Fotografias (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria fotogràfica (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galerie foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galerija fotografija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Gameforge Live 2.0.3 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.3 - Gameforge)

GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)

GLBasic SDK (HKLM-x32\...\GLBasic_SDK) (Version: 12.096 - Dream Design Entertainment)

GnuWin32: CoreUtils version 5.3.0 (HKLM-x32\...\CoreUtils-5.3.0_is1) (Version: 5.3.0 - GnuWin32)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)

Google Talk Plugin (HKLM-x32\...\{2A83AD05-56E6-3FBD-8752-B4143162EF59}) (Version: 4.9.1.16010 - Google)

Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden

Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)

Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3510 - Acer Incorporated)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12412 - HP)

HP Photosmart 7520 series - Grundlegende Software für das Gerät (HKLM\...\{62883BA5-32F6-44D0-AF9D-9CBED778F36F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

HyperCam 3 (HKLM-x32\...\HyperCam 3 3.5.1211.29) (Version: 3.5.1211.29 - Solveig Multimedia)

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

IePluginService12.27.0.3326 (HKLM-x32\...\IePlugins) (Version: 12.27.0.3326 - Cherished Technololgy LIMITED) <==== ATTENTION

IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)

IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )

IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )

Iminent (x32 Version: 6.46.1.0 - Iminent) Hidden <==== ATTENTION

Inbox Toolbar (HKLM-x32\...\{612AD33D-9824-4E87-8396-92374E91C4BB}_is1) (Version: 2.0.1.90 - Xacti, LLC)

Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden

InstallForge (HKLM-x32\...\InstallForge) (Version: 1.2.9.1 - solicus)

Interdiscount Fotoservice (HKLM-x32\...\Interdiscount Fotoservice) (Version: 4.8.6 - CEWE COLOR AG u Co. OHG)

Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.550 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden

JavaScript Tooling (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden

JetBrains ReSharper 7.0.1 (HKLM-x32\...\{1322DAC7-A713-4015-8F36-035F07A06ECA}) (Version: 7.0.1098 - JetBrains Inc)

Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden

John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Kalydo Player 6.00.00 (HKCU\...\KalydoPlayer) (Version: 6.00.00 - Eximion B.V.)

Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

loadtbs-3.0 (HKLM-x32\...\loadtbs-3.0) (Version:  - )

LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden

LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.130 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.130 - LogMeIn, Inc.) Hidden

LPT System Updater Service (HKLM-x32\...\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}) (Version: 1.0.0.0 - LPT) <==== ATTENTION

MAESTIA Version 201207 (HKLM-x32\...\{8F50EC3D-C482-4445-9E4B-991A766047D5}_is1) (Version: 201207 - RocWorks)

Magicka - Demo (HKLM-x32\...\Steam App 73050) (Version:  - Arrowhead Game Studios)

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Media View (HKLM-x32\...\MediaViewV1alpha97) (Version: 1.1 - Media View) <==== ATTENTION

Media Watch (HKLM-x32\...\MediaWatchV1home1136) (Version: 1.1 - Media Watch) <==== ATTENTION

Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden

Microsoft .NET Framework 1.1 Security Update (KB2656370) (HKLM-x32\...\M2656370) (Version:  - )

Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version:  - )

Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version:  - )

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft ASP.NET and Web Tools 2012.3 - Visual Studio 2012 - deu (x32 Version: 1.4.41009.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET and Web Tools 2012.3 - Visual Studio 2012 (x32 Version: 1.4.41009.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET MVC 3 - DEU (HKLM-x32\...\{07AC2D83-E795-4AD5-970D-B9BD14A1E411}) (Version: 3.0.20105.0 - Microsoft Corporation)

Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET Web Pages - DEU (HKLM-x32\...\{93EEC4E9-EEFE-4027-ACD3-6E8C1D085975}) (Version: 1.0.20105.0 - Microsoft Corporation)

Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden

Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden

Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden

Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden

Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden

Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)

Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden

Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM-x32\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation)

Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden

Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.6.40627.9000 - Microsoft Corporation) Hidden

Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.6.40627.9000 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931 - Microsoft Corporation) Hidden

Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden

Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden

Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden

Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)

Microsoft Silverlight 4 SDK - Deutsch (HKLM-x32\...\{8EA792A5-38AA-4F0E-8DFE-D1BAF1145431}) (Version: 4.0.60310.0 - Microsoft Corporation)

Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)

Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)

Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (HKLM-x32\...\{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}) (Version: 11.1.20828.01 - Microsoft Corporation)

Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (HKLM-x32\...\{00C84D22-DB8F-4159-BF70-682B8EA56A1E}) (Version: 11.1.20828.01 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft Visual C# 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C# 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012  x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{ac3600d2-e1b3-4573-bef7-73f9409d6393}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{aec97477-921a-4289-985a-9e29506625b6}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)

Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Language Pack - DEU (x32 Version: 11.0.50727.1 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Performance Collection Tools (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (HKLM-x32\...\{69ec32be-d994-44de-9eae-6d86ced6f352}) (Version: 11.0.50727.42 - Microsoft Corporation)

Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - ENU (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 (HKLM-x32\...\{ae17ae9b-af38-40d2-a194-6102c56ed502}) (Version: 11.0.50727.26 - Microsoft Corporation)

Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)

Microsoft Web Deploy dbSqlPackage Provider - DEU (HKLM-x32\...\{86756584-C41A-4CA3-B42D-4768C7720F56}) (Version: 10.3.20225.0 - Microsoft Corporation)

Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

Microsoft XNA Game Studio 4.0 Refresh (Shared Components) (x32 Version: 4.0.30901.0 - Microsoft Corporation) Hidden

Microsoft XNA Game Studio Platform Tools (HKLM-x32\...\{89690B51-2E21-4E93-914E-F9CAC5B24A84}) (Version: 1.4.0.0 - Microsoft Corporation)

Minecraft Editor 64 bits (HKLM\...\{042CC934-54B5-4BEB-948D-F3780B2CE4D7}) (Version: 1.6.6 - Axialmedia)

MorphVOX Pro (HKLM-x32\...\{53AB1F25-D607-4B4D-8FD5-74E03F2F9414}) (Version: 4.4.7 - Screaming Bee)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

MP4 To MP3 Converter V3.0.5 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version:  - hxxp://www.MP4ToMP3Converter.net)

MpcStar 5.4 (HKLM-x32\...\MpcStar) (Version: 5.4 - www.mpcstar.com)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden

MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - JDi Backup Ltd) <==== ATTENTION

MySearch (HKLM-x32\...\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}) (Version: 2.1.0.1222 - MySearch) <==== ATTENTION

MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.18 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.18 - Egis Technology Inc.) Hidden

Nero Control Center 10 (x32 Version: 10.6.13200.0.12 - Nero AG) Hidden

Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10800 - Nero AG) Hidden

Nero Core Components 10 (x32 Version: 2.0.20500.9.16 - Nero AG) Hidden

Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG)

Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden

Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10700.5.100 - Nero AG)

Nero Express 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden

Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.6.10300 - Nero AG)

Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10600.4.100 - Nero AG)

Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.10022.15.0 - Nero AG) Hidden

Network Acceleration (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{2384af53}) (Version:  - Sourceplace) <==== ATTENTION

Netzwerkhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Netg) (Version:  - )

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)

Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version:  - ) <==== ATTENTION

Overwolf (HKLM-x32\...\Overwolf) (Version: 0.76.1.0 - Overwolf Ltd.)

Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)

Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden

Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

Pivot Pro Plugin (x32 Version: 9.50.110 - Portrait Displays, Inc.) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)

PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Pokemon Online 2.0.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)

POKéMON Simulator 4.5 (HKLM-x32\...\POKéGAME32) (Version: 4.5 - Birdiesoft)

Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden

Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden

PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden

Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)

Prompt Downloader (HKLM-x32\...\Prompt Downloader) (Version:  - )

Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

RadioTotal1 Toolbar for IE (HKLM-x32\...\IECT3317892) (Version: 6.17.2.8 - RadioTotal1)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)

RebateInformer (HKLM-x32\...\{4EF645BD-65B0-4F98-AD56-D0437B7045F6}_is1) (Version: 2.0.0.7 - Xacti, LLC)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

SDK (x32 Version: 2.32.010 - Portrait Displays, Inc.) Hidden

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

SK.Enabler (HKLM-x32\...\S-1495795506) (Version: 2.0.0.1106 - PremiumSoft) <==== ATTENTION

SkypEmoticons (HKLM-x32\...\SkypEmoticons_is1) (Version:  - ) <==== ATTENTION

Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)

Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

Snap.Do (HKLM-x32\...\{3A014A11-3D9E-44BD-9431-2DB67F752CB9}) (Version: 11.32.1.16055 - ReSoft Ltd.) <==== ATTENTION

Software Updater (HKLM-x32\...\{7B3A525D-9D3D-4618-AE52-A31DE98C8AC3}) (Version: 4.1.4 - SEIKO EPSON CORPORATION)

Software Version Updater (HKLM-x32\...\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}) (Version: 1.1.3.8 - ) <==== ATTENTION

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Steuer 2012 13.0.3 (HKLM-x32\...\1382-8438-0790-3872) (Version: 13.0.3 - Information Factory AG)

Steuer 2013 14.0.1 (HKLM-x32\...\0166-6433-7072-1489) (Version: 14.0.1 - Information Factory AG)

Studie zur Verbesserung von HP Photosmart 7520 series Produkten (HKLM\...\{D662A279-973A-42A0-8D4B-8747C56C0501}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

SupTab (HKLM-x32\...\SupTab) (Version: 1.1.1.0 - ) <==== ATTENTION

SW-Booster (HKLM-x32\...\S-1820851148) (Version: 3.0.0.1396 - PremiumSoft) <==== ATTENTION

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Update kb70007 (x32 Version: 1.0.0 - MSR) Hidden

TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)

Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2881065) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{B7EF38F7-1D58-4085-A9A4-0F6C69A5AA1E}) (Version:  - Microsoft)

Update for Microsoft Visual Studio 2012 (KB2781514) (HKLM-x32\...\{56ef8912-352f-4fab-9c73-6f1c92a7127f}) (Version: 11.0.51219 - Microsoft Corporation)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

UpdateStar (HKLM-x32\...\{4B75C1B1-D0C7-4E70-9EE4-09CE7F734B0C}) (Version: 10.0.1265 - UpdateStar GmbH)

Valokuvavalikoima (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Vegas Movie Studio HD 11.0 (HKLM-x32\...\{6E3FD14F-858B-11E1-BC4A-F04DA23A5C58}) (Version: 11.0.75 - Sony)

VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.14 - NCH Software)

Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden

Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)

Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden

Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden

Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden

Visual Studio 2012 Update 4 (KB2707250) (HKLM-x32\...\{312d9252-c71c-4c84-b171-f4ad46e22098}) (Version: 11.0.61030 - Microsoft Corporation)

Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9202.20789 - Microsoft Corporation) Hidden

WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.71 - NCH Software)

WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden

WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden

WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden

WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden

WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)

weblica - 3.6.3 (HKLM-x32\...\weblica) (Version: 3.6.3 - empros gmbh)

websAve (HKLM-x32\...\{476D78C4-1DB0-2D88-7FCC-AA6559F59A8D}) (Version: 1.2.0.1869 - websuave) <==== ATTENTION

Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)

WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden

Windows App Certification Kit Native Components (Version: 8.59.29736 - Microsoft Corporation) Hidden

Windows App Certification Kit x64 (x32 Version: 8.59.29750 - Microsoft Corporation) Hidden

Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601 - Microsoft) Hidden

Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601 - Microsoft) Hidden

Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden

Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Temel Parçalar (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live 程式集 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Liven peruspaketti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Liven sähköposti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows XP Targeting with C++ (Version: 11.0.51106 - Microsoft Corporation) Hidden

Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden

WinFilter (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{3e661da}) (Version:  - Linker Ltd) <==== ATTENTION

WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

WinTuneUp 1.0 (HKLM-x32\...\WinTuneUp) (Version: 1.0 - WinTuneUp Apps. )

WinWeb protection (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{89f7ebe4}) (Version:  - BullPoint) <==== ATTENTION

WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )

Wondershare Video Editor(Build 3.5.0) (HKLM-x32\...\Wondershare Video Editor_is1) (Version:  - Wondershare Software)

WPM17.8.0.3393 (HKLM-x32\...\WPM) (Version: 17.8.0.3393 - Cherished Technololgy LIMITED) <==== ATTENTION

WS.Booster (HKLM-x32\...\S-1431105474) (Version: 3.3.0.1375 - PremiumSoft) <==== ATTENTION

WS.Booster (HKLM-x32\...\S-5195167130) (Version: 4.1.0.1908 - PremiumSoft) <==== ATTENTION

YoutubeAdblocker (HKLM-x32\...\{4820778D-AB0D-6D18-C316-52A6A0E1D507}) (Version: 1.2.0.1869 - YoutubeAdblocker) <==== ATTENTION

Zerius Vocoder (remove only) (HKLM-x32\...\VocoderGUI) (Version:  - )

Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Почта Windows Live (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden

Фотоальбом (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Фотогалерия (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Фотографии (общедоступная версия) (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

גלריית התמונות (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

بريد Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

معرض الصور (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

影像中心 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
 

==================== Restore Points  =========================
 

Could not list Restore Points. Check "winmgmt" service or repair WMI.
 
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {030C1B8D-C0CB-40F3-97DC-D1B2454451D3} - System32\Tasks\WS.Booster-S-1431105474 => c:\programdata\safesoft\ws.booster\WS.Booster.exe <==== ATTENTION

Task: {13FBF219-AB2F-4E15-9513-29FDD61F4A20} - \BrowserProtect No Task File <==== ATTENTION

Task: {1B396549-A773-464C-B9B3-B4C49CF28A10} - System32\Tasks\GPU Grid Computing => C:\Windows\SysWOW64\dfrg\runner.exe

Task: {44A54D41-E818-466E-A807-D50B1E9D910E} - System32\Tasks\PileFile reminder => C:\Users\4Story\AppData\Local\Temp\4Story hackDownload_F7BD\4Story_hack_Downloader.exe <==== ATTENTION

Task: {48840F86-1F7C-4F8A-A451-7370C9EE42CA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)

Task: {4BEA3EE7-26F9-419C-9225-FBFDE19FE80E} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION

Task: {6A733201-6137-4277-98D7-56AAB8FB7F8A} - System32\Tasks\RunAsStdUser Task => C:\Users\Sven\AppData\Local\Oxy\Application\oxy.exe <==== ATTENTION

Task: {6C8BDFDF-A6E7-4549-B494-C0D1A4F9A07B} - System32\Tasks\PileFile logon => C:\Users\4Story\AppData\Local\Temp\4Story hackDownload_F7BD\4Story_hack_Downloader.exe <==== ATTENTION

Task: {7289CE9D-CB71-4169-985C-588B4F1E620B} - System32\Tasks\CPU Grid Computing => C:\Windows\SysWOW64\dfrg\runner.exe

Task: {7B9E4676-9D21-4534-B701-63BDFE2E8A2A} - System32\Tasks\AmiUpdXp => C:\Users\4Story\AppData\Local\23662\a27541.exe <==== ATTENTION

Task: {87E712A9-9E69-4B7C-9F54-5A79A168AF42} - System32\Tasks\HPCustParticipation HP Photosmart 7520 series => C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {91D335C1-F898-40C0-B54D-12E7FCFF5BA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {AC774A6E-8700-4848-B0FE-1657D3DCAC3A} - \Funmoods No Task File <==== ATTENTION

Task: {B2657A83-E63B-4E58-A904-13C7D7ADCD26} - System32\Tasks\Grid Computing Updater => C:\Windows\SysWOW64\dfrg\upd.exe

Task: {CA415D1F-7A72-4B84-8880-31511E6E3DB6} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2014-06-10] (Overwolf LTD)

Task: {E14BE1A6-9A64-40D3-940C-A52A49596E45} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2014-01-23] ()

Task: {E45F4C4B-41F0-4A5B-983B-DB6815BF7334} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)

Task: {E52E50B0-B9CE-45E9-B428-61BEF38FA818} - System32\Tasks\WS.Booster-S-5195167130 => c:\programdata\greatsoft\ws.booster\WS.Booster.exe <==== ATTENTION

Task: {ECB3A5E8-F61B-4C9E-BB83-D0A25B283C73} - System32\Tasks\SK.Enabler-S-1495795506 => c:\programdata\quickset\sk.enabler\SK.Enabler.exe <==== ATTENTION

Task: {ED6A01BE-2498-41FE-9353-B16F0E1C97F2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {F87AF6AD-1E2B-445F-A72D-DB91FB0F505A} - \BackgroundContainer Startup Task No Task File <==== ATTENTION

Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\4Story\AppData\Local\23662\a27541.exe <==== ATTENTION

Task: C:\Windows\Tasks\CPU Grid Computing.job => C:\Windows\SysWOW64\dfrg\runner.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Grid Computing Updater.job => C:\Windows\SysWOW64\dfrg\upd.exe

Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

Task: C:\Windows\Tasks\SK.Enabler-S-1495795506.job => c:\programdata\quickset\sk.enabler\SK.Enabler.exe <==== ATTENTION

Task: C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe

Task: C:\Windows\Tasks\WS.Booster-S-1431105474.job => c:\programdata\safesoft\ws.booster\WS.Booster.exe <==== ATTENTION

Task: C:\Windows\Tasks\WS.Booster-S-5195167130.job => c:\programdata\greatsoft\ws.booster\WS.Booster.exe <==== ATTENTION
 

==================== Loaded Modules (whitelisted) =============
 

2014-02-24 12:51 - 2014-02-24 12:51 - 02721072 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll

2014-03-14 16:00 - 2014-03-14 16:00 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll

2014-02-06 22:19 - 2014-02-06 22:19 - 00032288 _____ () C:\Program Files (x86)\LPT\srpts.exe

2014-05-25 19:29 - 2014-05-25 19:28 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe

2014-05-01 21:29 - 2014-05-01 21:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2009-01-22 01:45 - 2009-01-22 01:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll

2012-06-18 17:24 - 2012-06-18 17:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll

2014-02-24 12:51 - 2013-10-29 15:08 - 03000776 _____ () c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll

2014-02-24 12:51 - 2013-10-29 15:08 - 00186496 _____ () c:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll

2014-02-06 22:19 - 2014-02-06 22:19 - 00070176 _____ () C:\Program Files (x86)\LPT\srpt.dll

2014-02-06 22:19 - 2014-02-06 22:19 - 00022048 _____ () C:\Program Files (x86)\LPT\srptc.dll

2014-02-06 22:18 - 2014-02-06 22:18 - 00018976 _____ () C:\Program Files (x86)\LPT\Smartbar.Common.dll

2014-05-25 19:29 - 2014-05-25 19:28 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\log4cplusU.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\Temp:373E1720

AlternateDataStreams: C:\ProgramData\Temp:AD022376

AlternateDataStreams: C:\Users\Sven\Downloads\message.eml:OECustomProperty
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (whitelisted) =============
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

MSCONFIG\Services: WdiSystemHost => 3

MSCONFIG\Services: WebClient => 3

MSCONFIG\Services: Wecsvc => 3

MSCONFIG\Services: wercplsupport => 3

MSCONFIG\Services: WerSvc => 3

MSCONFIG\Services: WinDefend => 2

MSCONFIG\Services: WinHttpAutoProxySvc => 3

MSCONFIG\Services: Winmgmt => 2

MSCONFIG\Services: WinRM => 3

MSCONFIG\Services: Wlansvc => 3

MSCONFIG\Services: wlidsvc => 3

MSCONFIG\Services: wmiApSrv => 3

MSCONFIG\Services: WMPNetworkSvc => 3

MSCONFIG\Services: WPCSvc => 3

MSCONFIG\Services: WPDBusEnum => 3

MSCONFIG\Services: wscsvc => 2

MSCONFIG\Services: WSearch => 2

MSCONFIG\Services: wuauserv => 2

MSCONFIG\Services: wudfsvc => 3

MSCONFIG\Services: WwanSvc => 3

MSCONFIG\startupfolder: C:^Users^Tim^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: 24x7HELP => "C:\Program Files (x86)\24x7Help\App24x7Help.exe" /STARTUP

MSCONFIG\startupreg: 4StoryPrePatch => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"

MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe

MSCONFIG\startupreg: CommonToolkitTray => C:\Program Files (x86)\Fighters\Tray\FightersTray.exe

MSCONFIG\startupreg: DT ACR => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -ACR

MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"

MSCONFIG\startupreg: EgisTecPMMUpdate => "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

MSCONFIG\startupreg: EgisUpdate => "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d

MSCONFIG\startupreg: EPLTarget => 

MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

MSCONFIG\startupreg: Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: InboxToolbar => "C:\Program Files (x86)\Inbox Toolbar\Inbox.exe" /STARTUP

MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start

MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe

MSCONFIG\startupreg: NextLive => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Tim\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe"

MSCONFIG\startupreg: Optimizer Pro => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent

MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe

MSCONFIG\startupreg: PC Speed Maximizer => C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe

MSCONFIG\startupreg: PivotSoftware => "C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

MSCONFIG\startupreg: RebateInformer => C:\Program Files (x86)\RebateInformer\RebateInf.exe /STARTUP

MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

MSCONFIG\startupreg: SiteRanker => "C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun

MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent

MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: UpdateStar => "C:\Users\Sven\AppData\Roaming\UpdateStar\UpdateStar.exe" -A

MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"

MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
 

==================== Faulty Device Manager Devices =============
 

Could not list Devices. Check "winmgmt" service or repair WMI.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/07/2014 06:52:44 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (07/07/2014 02:01:20 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)

Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.30214.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.
 

Error: (07/07/2014 02:01:20 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2705. The arguments are: Directory, ,
 

Error: (07/07/2014 02:01:19 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: XAPAuthenticodeSIPDLL, ,
 

Error: (07/07/2014 11:10:11 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (07/07/2014 09:36:09 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (07/06/2014 02:01:24 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)

Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.30214.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.
 

Error: (07/06/2014 02:01:24 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2705. The arguments are: Directory, ,
 

Error: (07/06/2014 02:01:23 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: XAPAuthenticodeSIPDLL, ,
 

Error: (07/06/2014 00:53:36 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
 

System errors:

=============

Error: (07/07/2014 06:54:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (07/07/2014 06:53:55 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (07/07/2014 06:53:40 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
 

Error: (07/07/2014 06:52:44 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (07/07/2014 06:52:34 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "IP-Hilfsdienst" ist vom Dienst "Windows-Verwaltungsinstrumentation" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (07/07/2014 06:52:34 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" ist vom Dienst "Windows-Verwaltungsinstrumentation" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (07/07/2014 06:52:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Wpm Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (07/07/2014 06:52:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "IePlugin Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (07/07/2014 06:52:24 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎07.‎07.‎2014 um 18:51:19 unerwartet heruntergefahren.
 

Error: (07/07/2014 02:01:57 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Silverlight (KB2932677)
 
 

Microsoft Office Sessions:

=========================

Error: (06/08/2014 05:44:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 25 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 37%

Total physical RAM: 3540.71 MB

Available physical RAM: 2224.07 MB

Total Pagefile: 7079.59 MB

Available Pagefile: 5617.56 MB

Total Virtual: 8192 MB

Available Virtual: 8191.85 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:456.45 GB) (Free:256.51 GB) NTFS

Drive d: (DATA) (Fixed) (Total:456.96 GB) (Free:456.74 GB) NTFS

Drive e: (acer_ P227HQV) (CDROM) (Total:0.2 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 6CE78890)

Partition 1: (Not Active) - (Size=18 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

schrauber

08.07.2014 18:09

Adware & Co. deinstallieren

Lade Dir bitte von hier http://deeprybka.trojaner-board.de/b...ninstaller.pngRevo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:
http://deeprybka.trojaner-board.de/b.../revo/add1.png
diesen Zusatz haben:
http://deeprybka.trojaner-board.de/b...e/revo/att.PNG
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
http://deeprybka.trojaner-board.de/b.../uninstall.PNG http://deeprybka.trojaner-board.de/b...o/moderat2.PNG
Reste löschen:
Klicke auf http://deeprybka.trojaner-board.de/b.../selectall.PNG dann auf http://deeprybka.trojaner-board.de/b...evo/delete.PNG und dann auf http://deeprybka.trojaner-board.de/b...evo/weiter.PNG.

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Terrenay

09.07.2014 14:39

Hallo, bin grad unterwegs, deshalb fass ich mich kurz: hab mit Revo alle Programme gelöscht, die da waren. Kam bei Schritt 1 aber meistens eine Fehlermeldung: "... .DLL konnte nicht gestartet werden". Combofix macht ebenfalls probleme: Als ich es gestartet hab kam eine Konsole, in der irgendwelche Programme dekomprimiert wurden. Danach hat sich das Programm einfach geschlossen :(
Muss das so sein?

schrauber

10.07.2014 13:46

Hast Du danach mit Revo auch die Reste entfernen lassen?

Combofix löschen und nochmal probieren, AV Programm ausschalten.

Terrenay

10.07.2014 13:56

Jo hab ich ;)

Hier das Log von CF, es hat einfach ewig gedauert bis das blaue Fenster aufging, also dachte ich, dass es nicht ging... Sorry:

Code:

ComboFix 14-07-08.04 - Sven 10.07.2014  14:14:27.1.2 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.41.1031.18.3541.1394 [GMT 2:00]

ausgeführt von:: c:\users\Sven\Desktop\ComboFix.exe

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\Java\jre7\bin\jp2ssv.dll

c:\program files (x86)\MediaViewV1

c:\program files (x86)\MediaViewV1\MediaViewV1alpha97\ff\chrome.manifest

c:\program files (x86)\MediaViewV1\MediaViewV1alpha97\ff\chrome\content\ffMediaViewV1alpha97.js

c:\program files (x86)\MediaViewV1\MediaViewV1alpha97\ff\chrome\content\ffMediaViewV1alpha97ffaction.js

c:\program files (x86)\MediaViewV1\MediaViewV1alpha97\ff\chrome\content\icons\default\MediaViewV1alpha97_32.png

c:\program files (x86)\MediaViewV1\MediaViewV1alpha97\ff\chrome\content\icons\Thumbs.db

c:\program files (x86)\MediaViewV1\MediaViewV1alpha97\ff\chrome\content\overlay.xul

c:\program files (x86)\MediaViewV1\MediaViewV1alpha97\ff\install.rdf

c:\program files (x86)\MediaWatchV1

c:\program files (x86)\MediaWatchV1\MediaWatchV1home1136\ff\chrome.manifest

c:\program files (x86)\MediaWatchV1\MediaWatchV1home1136\ff\chrome\content\ffMediaWatchV1home1136.js

c:\program files (x86)\MediaWatchV1\MediaWatchV1home1136\ff\chrome\content\ffMediaWatchV1home1136ffaction.js

c:\program files (x86)\MediaWatchV1\MediaWatchV1home1136\ff\chrome\content\icons\default\MediaWatchV1home1136_32.png

c:\program files (x86)\MediaWatchV1\MediaWatchV1home1136\ff\chrome\content\icons\Thumbs.db

c:\program files (x86)\MediaWatchV1\MediaWatchV1home1136\ff\chrome\content\overlay.xul

c:\program files (x86)\MediaWatchV1\MediaWatchV1home1136\ff\install.rdf

c:\program files (x86)\MySearch

c:\program files (x86)\MySearch\proRfA2nCS.dat

c:\program files (x86)\MySearch\proRfA2nCS.tlb

c:\program files (x86)\PSupport\uninstall.exe

c:\program files (x86)\save, on

c:\program files (x86)\save, on\fRtq.dat

c:\program files (x86)\save, on\fRtq.tlb

c:\program files (x86)\Windows Live\Messenger\msacm32.dll

c:\program files (x86)\YoutubeAdblocker

c:\program files (x86)\YoutubeAdblocker\TNNSE_b.dat

c:\program files (x86)\YoutubeAdblocker\TNNSE_b.tlb

c:\programdata\save, on

c:\programdata\save, on\ZdqPN.dat

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7_UploaderDark01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7bubble_Left.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7bubble_Right.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7bubble_X00.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7bubble_X01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7bubble_X02.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7Dark_NoTabs_Back00.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7Dark_NoTabs_PhoneIcon.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsActive.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsBack.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsHover.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7logoNew_dark01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUblue.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUgreen.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUmonitorIcon00.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUmonitorIcon01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_graph.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_LivechatIcon00.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_LivechatIcon01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_lowerstripe.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_manphoto.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SupportIcon00.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SupportIcon01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SystemCheckIcon00.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SystemCheckIcon01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\ArrowSmall.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\ArrowSmallHot.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Hardware_Icon.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Icon_FAQ.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Icon_FAQ_nonactive.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Icon_Settings.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Icon_Settings_nonactive.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\MainImg_SettingsDark01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Navigation_HomeIcon00_Dark01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Navigation_HomeIcon01_Dark01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Navigation_SettingsIcon00_Dark01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Navigation_SettingsIcon01_Dark01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\OK_IconGreen01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\PeriodicSystemCheckBubble.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Phones_Icon.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Security_Icon.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\skin.xml

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Software_Icon.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\SupportCheck01_arrow00.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\SupportCheck01_arrow01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Warning_Icon01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Warning_IconOrange01.png

c:\users\Mirjam Zanetti\AppData\Roaming\24x7 Help\skin\Warning_IconRed01.png

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\ev_t@dcwc-qkdaei.com

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\ev_t@dcwc-qkdaei.com\bootstrap.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\ev_t@dcwc-qkdaei.com\chrome.manifest

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\ev_t@dcwc-qkdaei.com\content\bg.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\ev_t@dcwc-qkdaei.com\install.rdf

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\uio.40@lluiepcsbu.com

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\uio.40@lluiepcsbu.com\bootstrap.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\uio.40@lluiepcsbu.com\chrome.manifest

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\uio.40@lluiepcsbu.com\content\bg.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\uio.40@lluiepcsbu.com\install.rdf

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\xgmrg-i4fq@txdj-mpior.net

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\xgmrg-i4fq@txdj-mpior.net\bootstrap.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\xgmrg-i4fq@txdj-mpior.net\chrome.manifest

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\xgmrg-i4fq@txdj-mpior.net\content\bg.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\xgmrg-i4fq@txdj-mpior.net\install.rdf

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_1cng@jfbiioyild.net

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_1cng@jfbiioyild.net\bootstrap.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_1cng@jfbiioyild.net\chrome.manifest

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_1cng@jfbiioyild.net\content\bg.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_1cng@jfbiioyild.net\install.rdf

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_yiy@azrleuii.edu

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_yiy@azrleuii.edu\bootstrap.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_yiy@azrleuii.edu\chrome.manifest

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_yiy@azrleuii.edu\content\bg.js

c:\users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\extensions\staged\yaay_yiy@azrleuii.edu\install.rdf

c:\users\Mirjam Zanetti\Documents\~WRD0000.tmp

c:\users\Public\AlexaNSISPlugin.3080.dll

c:\users\Sven\Desktop\fraps.exe

c:\users\Sven\Documents\~WRL0005.tmp

c:\users\Tim\AppData\Roaming\24x7 Help

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7_UploaderDark01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7bubble_Left.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7bubble_Right.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7bubble_X00.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7bubble_X01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7bubble_X02.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7Dark_NoTabs_Back00.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7Dark_NoTabs_PhoneIcon.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsActive.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsBack.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsHover.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7logoNew_dark01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUblue.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUgreen.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUmonitorIcon00.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUmonitorIcon01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_graph.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_LivechatIcon00.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_LivechatIcon01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_lowerstripe.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_manphoto.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SupportIcon00.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SupportIcon01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SystemCheckIcon00.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SystemCheckIcon01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\ArrowSmall.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\ArrowSmallHot.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\bubble.xml

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Hardware_Icon.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Icon_FAQ.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Icon_FAQ_nonactive.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Icon_Settings.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Icon_Settings_nonactive.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\MainImg_SettingsDark01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Navigation_HomeIcon00_Dark01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Navigation_HomeIcon01_Dark01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Navigation_SettingsIcon00_Dark01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Navigation_SettingsIcon01_Dark01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\OK_IconGreen01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\PeriodicSystemCheckBubble.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Phones_Icon.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Security_Icon.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\skin.xml

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Software_Icon.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\SupportCheck01_arrow00.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\SupportCheck01_arrow01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Warning_Icon01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Warning_IconOrange01.png

c:\users\Tim\AppData\Roaming\24x7 Help\skin\Warning_IconRed01.png

c:\users\Tim\AppData\Roaming\convert\convert.exe

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\ev_t@dcwc-qkdaei.com

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\ev_t@dcwc-qkdaei.com\bootstrap.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\ev_t@dcwc-qkdaei.com\chrome.manifest

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\ev_t@dcwc-qkdaei.com\content\bg.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\ev_t@dcwc-qkdaei.com\install.rdf

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\uio.40@lluiepcsbu.com

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\uio.40@lluiepcsbu.com\bootstrap.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\uio.40@lluiepcsbu.com\chrome.manifest

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\uio.40@lluiepcsbu.com\content\bg.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\uio.40@lluiepcsbu.com\install.rdf

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\xgmrg-i4fq@txdj-mpior.net

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\xgmrg-i4fq@txdj-mpior.net\bootstrap.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\xgmrg-i4fq@txdj-mpior.net\chrome.manifest

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\xgmrg-i4fq@txdj-mpior.net\content\bg.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\xgmrg-i4fq@txdj-mpior.net\install.rdf

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_1cng@jfbiioyild.net

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_1cng@jfbiioyild.net\bootstrap.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_1cng@jfbiioyild.net\chrome.manifest

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_1cng@jfbiioyild.net\content\bg.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_1cng@jfbiioyild.net\install.rdf

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_yiy@azrleuii.edu

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_yiy@azrleuii.edu\bootstrap.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_yiy@azrleuii.edu\chrome.manifest

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_yiy@azrleuii.edu\content\bg.js

c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\yaay_yiy@azrleuii.edu\install.rdf

c:\windows\security\Database\tmp.edb

c:\windows\wininit.ini

.

.

(((((((((((((((((((((((   Dateien erstellt von 2014-06-10 bis 2014-07-10  ))))))))))))))))))))))))))))))

.

.

2014-07-10 12:42 . 2014-07-10 12:42        --------        d-----w-        c:\users\Default\AppData\Local\temp

2014-07-10 12:42 . 2014-07-10 12:42        --------        d-----w-        c:\users\Mirjam Zanetti\AppData\Local\temp

2014-07-10 12:42 . 2014-07-10 12:42        --------        d-----w-        c:\users\Gast\AppData\Local\temp

2014-07-08 08:31 . 2014-07-08 08:31        --------        d-----w-        c:\program files (x86)\NVIDIA Corporation

2014-07-07 18:29 . 2014-07-07 18:29        --------        d-----w-        c:\program files (x86)\MonoGame

2014-07-07 17:27 . 2014-07-07 17:31        --------        d-----w-        C:\FRST

2014-07-07 12:45 . 2014-07-07 12:51        --------        d-----w-        c:\users\Sven\AppData\Roaming\Arc

2014-07-07 12:44 . 2014-07-08 04:36        --------        d-----w-        c:\program files (x86)\Perfect World Entertainment

2014-06-23 10:42 . 2014-06-23 10:42        --------        d-----w-        c:\programdata\AnyAppSnow

2014-06-23 10:39 . 2014-06-23 10:39        --------        d-----w-        c:\users\Tim\AppData\Local\Chromatic Browser

2014-06-23 10:39 . 2014-06-23 10:39        --------        d-----w-        c:\users\Sven\AppData\Local\Comodo

2014-06-23 10:39 . 2014-06-23 10:39        --------        d-----w-        c:\users\Sven\AppData\Local\Chromatic Browser

2014-06-23 10:39 . 2014-06-23 10:39        --------        d-----w-        c:\users\Mirjam Zanetti\AppData\Local\Chromatic Browser

2014-06-23 10:39 . 2014-06-23 10:39        --------        d-----w-        c:\users\Gast\AppData\Local\Chromatic Browser

2014-06-23 10:39 . 2014-06-23 10:39        --------        d-----w-        c:\users\Administrator\AppData\Local\Chromatic Browser

2014-06-17 19:27 . 2014-06-17 19:59        --------        d-----w-        c:\users\Sven\AppData\Roaming\Audacity

2014-06-17 19:27 . 2014-06-17 19:27        --------        d-----w-        c:\program files (x86)\Audacity

2014-06-11 12:14 . 2014-04-25 02:34        801280        ----a-w-        c:\windows\system32\usp10.dll

2014-06-11 12:09 . 2014-06-08 09:13        506368        ----a-w-        c:\windows\system32\aepdu.dll

2014-06-11 12:09 . 2014-06-08 09:08        424448        ----a-w-        c:\windows\system32\aeinv.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-07-10 12:10 . 2012-11-07 12:34        96441528        ----a-w-        c:\windows\system32\MRT.exe

2014-07-10 11:53 . 2014-04-16 20:09        122584        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys

2014-05-25 17:28 . 2014-05-25 17:29        50464        ----a-w-        c:\windows\system32\drivers\avgtpx64.sys

2014-05-25 11:29 . 2012-03-23 00:24        70832        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-05-25 11:29 . 2012-03-23 00:24        692400        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2014-05-12 05:26 . 2014-04-16 20:09        63704        ----a-w-        c:\windows\system32\drivers\mwac.sys

2014-05-12 05:26 . 2014-04-16 20:09        91352        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys

2014-05-12 05:25 . 2014-01-01 12:03        25816        ----a-w-        c:\windows\system32\drivers\mbam.sys

2014-04-18 02:43 . 2014-04-18 02:43        78432        ----a-w-        c:\windows\system32\atimpc64.dll

2014-04-18 02:43 . 2014-04-18 02:43        78432        ----a-w-        c:\windows\system32\amdpcom64.dll

2014-04-18 02:43 . 2014-04-18 02:43        71704        ----a-w-        c:\windows\SysWow64\atimpc32.dll

2014-04-18 02:43 . 2014-04-18 02:43        71704        ----a-w-        c:\windows\SysWow64\amdpcom32.dll

2014-04-18 02:43 . 2014-04-18 02:43        143304        ----a-w-        c:\windows\system32\atiuxp64.dll

2014-04-18 02:42 . 2014-04-18 02:42        126336        ----a-w-        c:\windows\SysWow64\atiuxpag.dll

2014-04-18 02:42 . 2014-04-18 02:42        117584        ----a-w-        c:\windows\system32\atiu9p64.dll

2014-04-18 02:42 . 2014-04-18 02:42        99520        ----a-w-        c:\windows\SysWow64\atiu9pag.dll

2014-04-18 02:42 . 2014-04-18 02:42        1343272        ----a-w-        c:\windows\system32\aticfx64.dll

2014-04-18 02:42 . 2014-04-18 02:42        1117184        ----a-w-        c:\windows\SysWow64\aticfx32.dll

2014-04-18 02:42 . 2014-04-18 02:42        10335208        ----a-w-        c:\windows\system32\atidxx64.dll

2014-04-18 02:42 . 2014-04-18 02:42        8866928        ----a-w-        c:\windows\SysWow64\atidxx32.dll

2014-04-18 02:42 . 2014-04-18 02:42        6796592        ----a-w-        c:\windows\SysWow64\atiumdva.dll

2014-04-18 02:42 . 2014-04-18 02:42        6799688        ----a-w-        c:\windows\SysWow64\atiumdag.dll

2014-04-18 02:42 . 2014-04-18 02:42        7520200        ----a-w-        c:\windows\system32\atiumd6a.dll

2014-04-18 02:42 . 2014-04-18 02:42        8010968        ----a-w-        c:\windows\system32\atiumd64.dll

2014-04-18 02:39 . 2014-04-18 02:39        274656        ----a-w-        c:\windows\system32\drivers\amdacpksd.sys

2014-04-18 02:36 . 2014-04-18 02:36        15376384        ----a-w-        c:\windows\system32\drivers\atikmdag.sys

2014-04-18 02:23 . 2014-04-18 02:23        231424        ----a-w-        c:\windows\system32\clinfo.exe

2014-04-18 02:22 . 2014-04-18 02:22        1187342        ----a-w-        c:\windows\system32\amdocl_as64.exe

2014-04-18 02:22 . 2014-04-18 02:22        1061902        ----a-w-        c:\windows\system32\amdocl_ld64.exe

2014-04-18 02:22 . 2014-04-18 02:22        995342        ----a-w-        c:\windows\SysWow64\amdocl_as32.exe

2014-04-18 02:22 . 2014-04-18 02:22        798734        ----a-w-        c:\windows\SysWow64\amdocl_ld32.exe

2014-04-18 02:22 . 2014-04-18 02:22        98816        ----a-w-        c:\windows\system32\OpenVideo64.dll

2014-04-18 02:22 . 2014-04-18 02:22        83456        ----a-w-        c:\windows\SysWow64\OpenVideo.dll

2014-04-18 02:22 . 2014-04-18 02:22        86528        ----a-w-        c:\windows\system32\OVDecode64.dll

2014-04-18 02:22 . 2014-04-18 02:22        73216        ----a-w-        c:\windows\SysWow64\OVDecode.dll

2014-04-18 02:22 . 2014-04-18 02:22        28685824        ----a-w-        c:\windows\system32\amdocl64.dll

2014-04-18 02:19 . 2014-04-18 02:19        24107520        ----a-w-        c:\windows\SysWow64\amdocl.dll

2014-04-18 02:17 . 2014-04-18 02:17        65024        ----a-w-        c:\windows\system32\OpenCL.dll

2014-04-18 02:17 . 2014-04-18 02:17        58880        ----a-w-        c:\windows\SysWow64\OpenCL.dll

2014-04-18 02:13 . 2014-04-18 02:13        127488        ----a-w-        c:\windows\system32\mantle64.dll

2014-04-18 02:13 . 2014-04-18 02:13        113664        ----a-w-        c:\windows\SysWow64\mantle32.dll

2014-04-18 02:12 . 2014-04-18 02:12        27907584        ----a-w-        c:\windows\system32\atio6axx.dll

2014-04-18 02:12 . 2014-04-18 02:12        5442048        ----a-w-        c:\windows\system32\amdmantle64.dll

2014-04-18 01:58 . 2014-04-18 01:58        4358656        ----a-w-        c:\windows\SysWow64\amdmantle32.dll

2014-04-18 01:51 . 2014-04-18 01:51        23409152        ----a-w-        c:\windows\SysWow64\atioglxx.dll

2014-04-18 01:46 . 2014-04-18 01:46        368128        ----a-w-        c:\windows\system32\atiapfxx.exe

2014-04-18 01:46 . 2014-04-18 01:46        62464        ----a-w-        c:\windows\system32\aticalrt64.dll

2014-04-18 01:46 . 2014-04-18 01:46        52224        ----a-w-        c:\windows\SysWow64\aticalrt.dll

2014-04-18 01:46 . 2014-04-18 01:46        55808        ----a-w-        c:\windows\system32\aticalcl64.dll

2014-04-18 01:46 . 2014-04-18 01:46        49152        ----a-w-        c:\windows\SysWow64\aticalcl.dll

2014-04-18 01:46 . 2014-04-18 01:46        15716352        ----a-w-        c:\windows\system32\aticaldd64.dll

2014-04-18 01:45 . 2014-04-18 01:45        91136        ----a-w-        c:\windows\system32\mantleaxl64.dll

2014-04-18 01:45 . 2014-04-18 01:45        85504        ----a-w-        c:\windows\SysWow64\mantleaxl32.dll

2014-04-18 01:42 . 2014-04-18 01:42        14302208        ----a-w-        c:\windows\SysWow64\aticaldd.dll

2014-04-18 01:33 . 2014-04-18 01:33        48128        ----a-w-        c:\windows\system32\amdmmcl6.dll

2014-04-18 01:33 . 2014-04-18 01:33        37888        ----a-w-        c:\windows\SysWow64\amdmmcl.dll

2014-04-18 01:30 . 2014-04-18 01:30        442368        ----a-w-        c:\windows\system32\atidemgy.dll

2014-04-18 01:30 . 2014-04-18 01:30        31232        ----a-w-        c:\windows\system32\atimuixx.dll

2014-04-18 01:29 . 2014-04-18 01:29        586240        ----a-w-        c:\windows\system32\atieclxx.exe

2014-04-18 01:29 . 2014-04-18 01:29        239616        ----a-w-        c:\windows\system32\atiesrxx.exe

2014-04-18 01:28 . 2014-04-18 01:28        190976        ----a-w-        c:\windows\system32\atitmm64.dll

2014-04-18 01:21 . 2014-04-18 01:21        806912        ----a-w-        c:\windows\system32\coinst_14.100.dll

2014-04-18 01:09 . 2014-04-18 01:09        1177600        ----a-w-        c:\windows\system32\atiadlxx.dll

2014-04-18 01:09 . 2012-03-22 23:54        848896        ----a-w-        c:\windows\SysWow64\atiadlxy.dll

2014-04-18 01:07 . 2014-04-18 01:07        75264        ----a-w-        c:\windows\system32\atig6pxx.dll

2014-04-18 01:07 . 2014-04-18 01:07        69632        ----a-w-        c:\windows\SysWow64\atiglpxx.dll

2014-04-18 01:07 . 2014-04-18 01:07        69632        ----a-w-        c:\windows\system32\atiglpxx.dll

2014-04-18 01:07 . 2014-04-18 01:07        146944        ----a-w-        c:\windows\system32\atig6txx.dll

2014-04-18 01:07 . 2014-04-18 01:07        133632        ----a-w-        c:\windows\SysWow64\atigktxx.dll

2014-04-18 01:07 . 2014-04-18 01:07        638976        ----a-w-        c:\windows\system32\drivers\atikmpag.sys

2014-04-18 01:04 . 2014-04-18 01:04        43520        ----a-w-        c:\windows\system32\drivers\ati2erec.dll

2014-04-17 20:33 . 2014-04-17 20:33        51200        ----a-w-        c:\windows\system32\kdbsdk64.dll

2014-04-17 20:28 . 2014-04-17 20:28        38912        ----a-w-        c:\windows\SysWow64\kdbsdk32.dll

2014-04-14 18:13 . 2014-02-07 11:29        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2014-04-12 02:22 . 2014-05-24 17:04        95680        ----a-w-        c:\windows\system32\drivers\ksecdd.sys

2014-04-12 02:22 . 2014-05-24 17:04        155072        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2014-04-12 02:19 . 2014-05-24 17:04        136192        ----a-w-        c:\windows\system32\sspicli.dll

2014-04-12 02:19 . 2014-05-24 17:04        29184        ----a-w-        c:\windows\system32\sspisrv.dll

2014-04-12 02:19 . 2014-05-24 17:04        28160        ----a-w-        c:\windows\system32\secur32.dll

2014-04-12 02:19 . 2014-05-24 17:04        1460736        ----a-w-        c:\windows\system32\lsasrv.dll

2014-04-12 02:19 . 2014-05-24 17:04        31232        ----a-w-        c:\windows\system32\lsass.exe

2014-04-12 02:12 . 2014-05-24 17:04        22016        ----a-w-        c:\windows\SysWow64\secur32.dll

2014-04-12 02:10 . 2014-05-24 17:04        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}]

2010-11-21 03:24        297808        ----a-w-        c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{CCB69577-088B-4004-9ED8-FF5BCC83A039}]

2014-01-09 06:00        1973184        ----a-w-        c:\progra~2\REBATE~1\RebateI.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"4StoryPrePatch"="c:\program files (x86)\Gameforge4D\4Story\PrePatch.exe" [2013-01-08 327680]

"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-06-23 3816272]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]

.

c:\users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

MyPC Backup.lnk - c:\program files (x86)\MyPC Backup\MyPC Backup.exe [2014-3-14 2901032]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableSecureUIAPath"= 1 (0x1)

.

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

"DisableClock"= 0 (0x0)

.

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoCommonGroups"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

.

R2 24x7HelpSvc;24x7HelpService;c:\program files (x86)\24x7Help\App24x7Svc.exe;c:\program files (x86)\24x7Help\App24x7Svc.exe [x]

R2 70e6ca8c;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]

R2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]

R2 BackupStack;Computer Backup (MyPC Backup);c:\program files (x86)\MyPC Backup\BackupStack.exe;c:\program files (x86)\MyPC Backup\BackupStack.exe [x]

R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [x]

R2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 IePluginService;IePlugin Service;c:\programdata\IePluginService\PluginService.exe;c:\programdata\IePluginService\PluginService.exe [x]

R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]

R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x]

R3 ArcService;Arc Service;c:\program files (x86)\Perfect World Entertainment\Arc\ArcService.exe;c:\program files (x86)\Perfect World Entertainment\Arc\ArcService.exe [x]

R3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service;c:\program files\BitComet\tools\BitCometService.exe;c:\program files\BitComet\tools\BitCometService.exe [x]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]

R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]

R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

R3 GamesAppIntegrationService;GamesAppIntegrationService;c:\program files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [x]

R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]

R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]

R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]

R3 OverwolfUpdater;Overwolf Updater Windows SCM;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]

R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]

S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]

S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]

S2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]

S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]

S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]

S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]

S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]

S2 LPTSystemUpdater;LPT System Updater Service;c:\program files (x86)\LPT\srpts.exe;c:\program files (x86)\LPT\srpts.exe [x]

S2 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys;c:\windows\SYSNATIVE\drivers\mbamchameleon.sys [x]

S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]

S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]

S2 PdiService;Portrait Displays SDK Service;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [x]

S2 vToolbarUpdater18.1.0;vToolbarUpdater18.1.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [x]

S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys;c:\windows\SYSNATIVE\DRIVERS\amdhub30.sys [x]

S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys;c:\windows\SYSNATIVE\DRIVERS\amdxhc.sys [x]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]

S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2014-05-26 18:55        1091912        ----a-w-        c:\program files (x86)\Google\Chrome\Application\35.0.1916.114\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2014-07-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

- c:\users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26 16:18]

.

2014-07-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

- c:\users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26 16:18]

.

2014-07-10 c:\windows\Tasks\HP Photo Creations Communicator.job

- c:\programdata\HP Photo Creations\Communicator.exe [2014-01-23 11:39]

.

.

--------- X64 Entries -----------

.

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://websearch.exitingsearch.info/?pid=725&r=2014/03/21&hid=10042898870410746318&lg=EN&cc=CH&unqvl=50

mDefault_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

mDefault_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E

mStart Page = hxxp://websearch.exitingsearch.info/?pid=725&r=2014/03/21&hid=10042898870410746318&lg=EN&cc=CH&unqvl=50

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

IE: &Alles mit BitComet herunterladen - c:\program files\BitComet\BitComet.exe/AddAllLink.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Mit BitComet herunter&laden - c:\program files\BitComet\BitComet.exe/AddLink.htm

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000

Handler: rebinfo - {AF808758-C780-404C-A4EE-4526323FD9B6} - c:\progra~2\REBATE~1\RebateI.dll

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

BHO-{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - c:\progra~2\SITERA~1\SiteRank.dll

BHO-{64F90499-3748-EB91-80FB-AF08D4C67CEB} - c:\program files (x86)\websAve\sILwmCx.dll

BHO-{76F9D91C-56F3-3618-2D80-F6734BE2E498} - c:\program files (x86)\SNT\5AJN.dll

BHO-{8be1f90a-ab31-4a5a-9285-bb553c6c359d} - c:\program files (x86)\MediaWatchV1\MediaWatchV1home1136\ie\MediaWatchV1home1136.dll

BHO-{A7388829-048E-0C3D-362C-D61D931EE415} - c:\program files (x86)\YoutubeAdblocker\TNNSE_b.dll

BHO-{fed65192-d64e-4d7b-91f6-37d5f033d528} - c:\program files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll

ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)

ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)

ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)

Wow6432Node-HKLM-Run-<NO NAME> - (no file)

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

BHO-{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - c:\progra~2\SITERA~1\SiteR64.dll

BHO-{64F90499-3748-EB91-80FB-AF08D4C67CEB} - c:\program files (x86)\websAve\sILwmCx.x64.dll

BHO-{76F9D91C-56F3-3618-2D80-F6734BE2E498} - c:\program files (x86)\SNT\5AJN.x64.dll

BHO-{A7388829-048E-0C3D-362C-D61D931EE415} - c:\program files (x86)\YoutubeAdblocker\TNNSE_b.x64.dll

ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)

ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)

ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)

AddRemove-Ancient Magic - c:\users\Sven\Desktop\Sven Zanetti\Ancient Magic\Uninstall.exe

AddRemove-AVG SafeGuard toolbar - c:\program files (x86)\AVG SafeGuard toolbar\UNINSTALL.exe

AddRemove-IECT3317892 - c:\programdata\Conduit\IE\CT3317892\UninstallerUI.exe

AddRemove-{4820778D-AB0D-6D18-C316-52A6A0E1D507} - c:\programdata\YoutubeAdblocker\Hja04VYH.exe

AddRemove-{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} - c:\users\4Story\AppData\Local\23662\a27541.exe

.

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Internet Explorer\Approved Extensions]

@DACL=(02 0000)

"{4D2D3B0F-69BE-477A-90F5-FDDB05357975}"=hex:51,66,7a,6c,4c,1d,3b,1b,1f,24,3a,

   57,8f,39,14,0f,8a,fa,b9,9b,01,77,3d,60

"{9D717F81-9148-4F12-8568-69135F087DB0}"=hex:51,66,7a,6c,4c,1d,3b,1b,91,60,66,

   87,79,c1,7c,07,9f,67,2d,53,5b,4a,39,a5

"{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}"=hex:51,66,7a,6c,4c,1d,3b,1b,0e,19,65,

   e7,ef,cf,23,00,bf,85,4f,eb,45,13,8e,cd

"{377E5D4D-77E5-476A-8716-7E70A9272DA0}"=hex:51,66,7a,6c,4c,1d,3b,1b,5d,42,69,

   2d,d4,27,04,0f,9d,19,3a,30,ad,65,69,b5

"{72853161-30C5-4D22-B7F9-0BBC1D38A37E}"=hex:51,66,7a,6c,4c,1d,3b,1b,71,2e,92,

   68,f4,60,4c,05,ad,f6,4f,fc,19,7a,e7,6b

"{F443A627-5009-4323-9C1D-7FD598D0D712}"=hex:51,66,7a,6c,4c,1d,3b,1b,37,b9,54,

   ee,38,00,4d,0b,86,12,3b,95,9c,92,93,07

"{EA582743-9076-4178-9AA6-7393FDF4D5CE}"=hex:51,66,7a,6c,4c,1d,3b,1b,53,38,4f,

   f0,47,c0,16,09,80,a9,37,d3,f9,b6,91,db

"{59C0C5BD-2579-433A-BBB8-AFFD59642BAF}"=hex:51,66,7a,6c,4c,1d,3b,1b,ad,da,d7,

   43,48,75,54,0b,a1,b7,eb,bd,5d,26,6f,ba

"{82E1477C-B154-48D3-9891-33D83C26BCD3}"=hex:51,66,7a,6c,4c,1d,3b,1b,6c,58,f6,

   98,65,e1,bd,00,82,9e,77,98,38,64,f8,c6

"{C1AF5FA5-852C-4C90-812E-A7F75E011D87}"=hex:51,66,7a,6c,4c,1d,3b,1b,b5,40,b8,

   db,1d,d5,fe,04,9b,21,e3,b7,5a,43,59,92

"{98889811-442D-49DD-99D7-DC866BE87DBC}"=hex:51,66,7a,6c,4c,1d,3b,1b,01,87,9f,

   82,1c,14,b3,01,83,d8,98,c6,6f,aa,39,a9

.

[HKEY_LOCAL_MACHINE\software\BlueStacks]

"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.13"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip]

"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2014-07-10  14:52:02

ComboFix-quarantined-files.txt  2014-07-10 12:52

.

Vor Suchlauf: 19 Verzeichnis(se), 278'411'096'064 Bytes frei

Nach Suchlauf: 29 Verzeichnis(se), 284'995'756'032 Bytes frei

.

- - End Of File - - 4B5FF54C280A8FCE0209094C8F09D870

A36C5E4F47E84449FF07ED3517B43A31

schrauber

11.07.2014 10:56

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Terrenay

11.07.2014 12:39

Hallo, ich hab alles gemacht, es hat aber wieder ein paar Komplikationen gegeben..
Erstens hat MWB etwa 1500 Objekte gefunden und in Quarantäne gestellt, aber der Log ist leer :/
Des Weiteren ist der AdwCleaner während dem Löschen der Dateien abgestürzt. Der Log hier ist vom zweiten Durchgang, allerdings hab ich das Gefühl, das einige Dinge nicht aufgelistet sind. Hoffe, das ist nicht so schlimm...

Und übrigens, nach dem Scan mit AdwCleaner hab ich Chrome geöffnet und siehe da: Die lästige Extension aus dem Startpost ist verschwunden :)

MWB Log:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 11.07.2014

Suchlauf-Zeit: 12:24:22

Logdatei: mwb.txt

Administrator: Ja
 

Version: 2.00.2.1012

Malware Datenbank: v2014.07.10.02

Rootkit Datenbank: v2014.07.09.01

Lizenz: Premium

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Self-protection: Aktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: Sven
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 470469

Verstrichene Zeit: 29 Min, 51 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristics: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 0

(No malicious items detected)
 

Registrierungswerte: 0

(No malicious items detected)
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 0

(No malicious items detected)
 

Dateien: 0

(No malicious items detected)
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

AdwCleaner:

Code:

# AdwCleaner v3.215 - Bericht erstellt am 11/07/2014 um 13:06:54

# Aktualisiert 09/07/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Sven - MirjamZanetti

# Gestartet von : C:\Users\Sven\Desktop\adwcleaner_3.215.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj

Ordner Gelöscht : C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj

Ordner Gelöscht : C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pljcgbedjplidkdjahbaalanadmjfgop

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bho

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\inbox.appserver

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\inbox.ibx404

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Inbox.JSServer

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Inbox.Toolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\inbox

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\rebinfo

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\RebateI.RebateInformImageGen

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Updater.AmiUpd

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\oxy.exe

Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\websuave.websuave

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\websuave.websuave.3.7

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Funn2SaVVe.Funn2SaVVe

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Funn2SaVVe.Funn2SaVVe.4.5

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YoutubeAdblocker.YoutubeAdblocker

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YoutubeAdblocker.YoutubeAdblocker.1.0

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SaveeLotts.SaveeLotts

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SaveeLotts.SaveeLotts.6.3

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3317892

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF808758-C780-404C-A4EE-4526323FD9B6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB69577-088B-4004-9ED8-FF5BCC83A039}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DFEFCDEE-CF1A-4FC8-88AD-129872198372}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64F90499-3748-EB91-80FB-AF08D4C67CEB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69DF3AE6-4A84-3D62-8B15-053CDE885CD6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A7388829-048E-0C3D-362C-D61D931EE415}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B1FE1B45-092C-7FBE-A603-719A44935901}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6A83313B-E6B5-4F18-B49D-15EBE176A8B1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{134B8A85-6292-4010-9FB0-D2D7B3768B9D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{615E8AA1-6BB8-4A3D-A1CC-373194DB612C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{CBEF8724-D080-4737-88DA-111EEC6651AA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EAB5257A-1FB3-474C-9B42-231F52622E72}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CCB69577-088B-4004-9ED8-FF5BCC83A039}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F90499-3748-EB91-80FB-AF08D4C67CEB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7388829-048E-0C3D-362C-D61D931EE415}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DFEFCDEE-CF1A-4FC8-88AD-129872198372}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFEFCDEE-CF1A-4FC8-88AD-129872198372}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{64F90499-3748-EB91-80FB-AF08D4C67CEB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69DF3AE6-4A84-3D62-8B15-053CDE885CD6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A7388829-048E-0C3D-362C-D61D931EE415}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B1FE1B45-092C-7FBE-A603-719A44935901}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AF808758-C780-404C-A4EE-4526323FD9B6}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{69DF3AE6-4A84-3D62-8B15-053CDE885CD6}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{B1FE1B45-092C-7FBE-A603-719A44935901}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6A83313B-E6B5-4F18-B49D-15EBE176A8B1}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gelöscht : HKCU\Software\1ClickDownload

Schlüssel Gelöscht : HKCU\Software\AVG SafeGuard toolbar

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx

Schlüssel Gelöscht : HKCU\Software\UpdateStar

Schlüssel Gelöscht : HKCU\Software\WEDLMNGR

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gelöscht : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gelöscht : HKLM\Software\AVG SafeGuard toolbar

Schlüssel Gelöscht : HKLM\Software\awesomehpSoftware

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\IePlugin

Schlüssel Gelöscht : HKLM\Software\Inbox Toolbar

Schlüssel Gelöscht : HKLM\Software\MediaViewV1

Schlüssel Gelöscht : HKLM\Software\MediaWatchV1

Schlüssel Gelöscht : HKLM\Software\Registry Helper

Schlüssel Gelöscht : HKLM\Software\supWPM

Schlüssel Gelöscht : HKLM\Software\Wpm

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3A014A11-3D9E-44BD-9431-2DB67F752CB9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4EF645BD-65B0-4F98-AD56-D0437B7045F6}_is1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{612AD33D-9824-4E87-8396-92374E91C4BB}_is1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\loadtbs-3.0

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Speedchecker Limited

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17126
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Mozilla Firefox v
 

[ Datei : C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuKApEPBlNodTHBkRt9JkgqTmbhhegZHspg7Bw-zXxO6B_BQbzOj3_VeigncIMMsf[...]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Mysearchdial");

Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuKApEPBlNodTHBkRt9JkgqTmbhhegZHspg7Bw-zXxO6B_BQbzOj3_VeigncIMMsfwsByEHQHRvoLB[...]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuKApEPBlNodTHBkRt9JkgqTmbhhegZHspg7Bw-zXxO6B_BQbzOj3_VeigncIMMsfwsByEH[...]
 

[ Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\42h3y7h3.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Mysearchdial");
 

[ Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.search.defaultenginename", "WebSearch");

Zeile gelöscht : user_pref("browser.search.defaultenginename,S", "WebSearch");

Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://websearch.exitingsearch.info/?pid=725&r=2014/03/21&hid=10042898870410746318&lg=EN&cc=CH&unqvl=50&l=1&q=");

Zeile gelöscht : user_pref("browser.search.order.1", "WebSearch");

Zeile gelöscht : user_pref("browser.search.order.1,S", "WebSearch");

Zeile gelöscht : user_pref("browser.search.selectedEngine,S", "WebSearch");

Zeile gelöscht : user_pref("extensions.EnXNnSg7SoH.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\[...]

Zeile gelöscht : user_pref("extensions.McoVDimLR.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"s[...]

Zeile gelöscht : user_pref("extensions.Ueqmd.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumor[...]

Zeile gelöscht : user_pref("extensions.irmysearch.aflt", "irmsd0103");

Zeile gelöscht : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");

Zeile gelöscht : user_pref("extensions.irmysearch.cr", "1514887747");

Zeile gelöscht : user_pref("extensions.irmysearch.instlRef", "");

Zeile gelöscht : user_pref("extensions.mfhsUYSD.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"su[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.AL", 2);

Zeile gelöscht : user_pref("extensions.mysearchdial.aflt", "irmsd0103");

Zeile gelöscht : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");

Zeile gelöscht : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");

Zeile gelöscht : user_pref("extensions.mysearchdial.cr", "1514887747");

Zeile gelöscht : user_pref("extensions.mysearchdial.dfltLng", "");

Zeile gelöscht : user_pref("extensions.mysearchdial.dfltSrch", true);

Zeile gelöscht : user_pref("extensions.mysearchdial.dnsErr", true);

Zeile gelöscht : user_pref("extensions.mysearchdial.excTlbr", false);

Zeile gelöscht : user_pref("extensions.mysearchdial.hmpg", true);

Zeile gelöscht : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutB[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.id", "F80F415692A82E0E");

Zeile gelöscht : user_pref("extensions.mysearchdial.instlDay", "16094");

Zeile gelöscht : user_pref("extensions.mysearchdial.instlRef", "");

Zeile gelöscht : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Czu[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.prdct", "mysearchdial");

Zeile gelöscht : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");

Zeile gelöscht : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");

Zeile gelöscht : user_pref("extensions.mysearchdial.tlbrId", "base");

Zeile gelöscht : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1C[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");

Zeile gelöscht : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");

Zeile gelöscht : user_pref("extensions.mysearchdial_i.hmpg", true);

Zeile gelöscht : user_pref("extensions.mysearchdial_i.newTab", false);

Zeile gelöscht : user_pref("extensions.mysearchdial_i.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.016:53:49");

Zeile gelöscht : user_pref("extensions.rvv5COD6U.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"s[...]
 

[ Datei : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\4b32mscn.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1[...]

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Mysearchdial");

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Mysearchdial");
 

[ Datei : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuKApEPBlNodTHBkRt9JkgqTmbhhegZHspg7Bw-zXxO6B_BQbzOj3_VeigncIMMsfwsByEH[...]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");

Zeile gelöscht : user_pref("browser.search.order.1", "Mysearchdial");

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuKApEPBlNodTHBkRt9JkgqTmbhhegZHspg7Bw-zXxO6B_BQbzOj3_VeigncIMMsf[...]

Zeile gelöscht : user_pref("extensions.EnXNnSg7SoH.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/re[...]

Zeile gelöscht : user_pref("extensions.McoVDimLR.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ress[...]

Zeile gelöscht : user_pref("extensions.Softonic.admin", false);

Zeile gelöscht : user_pref("extensions.Softonic.aflt", "SD");

Zeile gelöscht : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");

Zeile gelöscht : user_pref("extensions.Softonic.autoRvrt", "false");

Zeile gelöscht : user_pref("extensions.Softonic.cntry", "CH");

Zeile gelöscht : user_pref("extensions.Softonic.dfltLng", "de");

Zeile gelöscht : user_pref("extensions.Softonic.dfltSrch", true);

Zeile gelöscht : user_pref("extensions.Softonic.dnsErr", true);

Zeile gelöscht : user_pref("extensions.Softonic.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,182856413[...]

Zeile gelöscht : user_pref("extensions.Softonic.dpk_blck", "true");

Zeile gelöscht : user_pref("extensions.Softonic.dspFFXOld", "Conduit Search");

Zeile gelöscht : user_pref("extensions.Softonic.excTlbr", false);

Zeile gelöscht : user_pref("extensions.Softonic.ffxUnstlRst", false);

Zeile gelöscht : user_pref("extensions.Softonic.hdrMd5", "7E10AB55E045ECD9D83903BE07A66689");

Zeile gelöscht : user_pref("extensions.Softonic.hmpg", true);

Zeile gelöscht : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00362/tb_v1?SearchSource=13&cc=&mi=7c1d2e0e000000000000f80f415692a8&toi=16079");

Zeile gelöscht : user_pref("extensions.Softonic.hpFFXOld", "hxxp://search.conduit.com/?ctid=CT3322168&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPB1D58A69-E3B7-4DC4-9337-2B1AF0F47E84&SSPV=");

Zeile gelöscht : user_pref("extensions.Softonic.hpOld0", "");

Zeile gelöscht : user_pref("extensions.Softonic.id", "7c1d2e0e000000000000f80f415692a8");

Zeile gelöscht : user_pref("extensions.Softonic.instlDay", "16079");

Zeile gelöscht : user_pref("extensions.Softonic.instlRef", "MOY00362");

Zeile gelöscht : user_pref("extensions.Softonic.kw_url", "hxxp://search.softonic.com/MOY00362/tb_v1?SearchSource=2&cc=&mi=7c1d2e0e000000000000f80f415692a8&toi=16079&q=");

Zeile gelöscht : user_pref("extensions.Softonic.lastB", "hxxp://search.conduit.com/?ctid=CT3322168&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPB1D58A69-E3B7-4DC4-9337-2B1AF0F47E84&SSPV=");

Zeile gelöscht : user_pref("extensions.Softonic.lastVrsnTs", "1.8.29.317:18:52");

Zeile gelöscht : user_pref("extensions.Softonic.newTab", true);

Zeile gelöscht : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00362/tb_v1/?SearchSource=15&cc=&mi=7c1d2e0e000000000000f80f415692a8&toi=16079");

Zeile gelöscht : user_pref("extensions.Softonic.pnu_2013desingbrand", "{\"newVrsn\":\"58\",\"lastVrsn\":\"58\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");

Zeile gelöscht : user_pref("extensions.Softonic.prdct", "Softonic");

Zeile gelöscht : user_pref("extensions.Softonic.prtnrId", "softonic");

Zeile gelöscht : user_pref("extensions.Softonic.rvrt", "false");

Zeile gelöscht : user_pref("extensions.Softonic.sg", "none");

Zeile gelöscht : user_pref("extensions.Softonic.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");

Zeile gelöscht : user_pref("extensions.Softonic.storage\\storage\\mpvfloatingwindmutex", "354802036378406@@@Thu Jan 01 1970 01:00:00 GMT+0100");

Zeile gelöscht : user_pref("extensions.Softonic.storage\\storage\\mpvinpagemutex", "ec1650b3760c409d56b66f0524e3bfa0@@@Wed Feb 05 2014 18:09:01 GMT+0100");

Zeile gelöscht : user_pref("extensions.Softonic.tlbrId", "2013desingbrand");

Zeile gelöscht : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00362/tb_v1?SearchSource=1&cc=&mi=7c1d2e0e000000000000f80f415692a8&toi=16079&q=");

Zeile gelöscht : user_pref("extensions.Softonic.vrsn", "1.8.29.3");

Zeile gelöscht : user_pref("extensions.Softonic.vrsnTs", "1.8.29.317:18:52");

Zeile gelöscht : user_pref("extensions.Softonic.vrsni", "1.8.29.3");

Zeile gelöscht : user_pref("extensions.Ueqmd.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressbar.[...]

Zeile gelöscht : user_pref("extensions.enabledAddons", "{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}:1.0,ffxtlbra%40softonic.com:1.6.0,%7Bad9a41d2-9a49-4fa6-a79e-71a0785364c8%7D:9.5.3,software%40loadtubes.com:1.01,ffxtlbr%4[...]

Zeile gelöscht : user_pref("extensions.helperbar.BackPageActive", true);

Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);

Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);

Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);

Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);

Zeile gelöscht : user_pref("extensions.helperbar.keepAliveLastevent", "1393845383");

Zeile gelöscht : user_pref("extensions.irmysearch.aflt", "irmsd0103");

Zeile gelöscht : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");

Zeile gelöscht : user_pref("extensions.irmysearch.cr", "1514887747");

Zeile gelöscht : user_pref("extensions.irmysearch.instlRef", "");

Zeile gelöscht : user_pref("extensions.mfhsUYSD.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressb[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.AL", 2);

Zeile gelöscht : user_pref("extensions.mysearchdial.aflt", "irmsd0103");

Zeile gelöscht : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");

Zeile gelöscht : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");

Zeile gelöscht : user_pref("extensions.mysearchdial.cntry", "CH");

Zeile gelöscht : user_pref("extensions.mysearchdial.cr", "1514887747");

Zeile gelöscht : user_pref("extensions.mysearchdial.dfltLng", "");

Zeile gelöscht : user_pref("extensions.mysearchdial.dfltSrch", true);

Zeile gelöscht : user_pref("extensions.mysearchdial.dnsErr", true);

Zeile gelöscht : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.excTlbr", false);

Zeile gelöscht : user_pref("extensions.mysearchdial.hdrMd5", "D41406EE0A999195C9C6AAC5DB71931C");

Zeile gelöscht : user_pref("extensions.mysearchdial.hmpg", true);

Zeile gelöscht : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutB[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.id", "F80F415692A82E0E");

Zeile gelöscht : user_pref("extensions.mysearchdial.instlDay", "16094");

Zeile gelöscht : user_pref("extensions.mysearchdial.instlRef", "");

Zeile gelöscht : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtA[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.lastVrsnTs", "");

Zeile gelöscht : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Czu[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"90\",\"lastVrsn\":\"90\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");

Zeile gelöscht : user_pref("extensions.mysearchdial.prdct", "mysearchdial");

Zeile gelöscht : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");

Zeile gelöscht : user_pref("extensions.mysearchdial.sg", "{smplGrp}");

Zeile gelöscht : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");

Zeile gelöscht : user_pref("extensions.mysearchdial.tlbrId", "base");

Zeile gelöscht : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1C[...]

Zeile gelöscht : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");

Zeile gelöscht : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");

Zeile gelöscht : user_pref("extensions.mysearchdial_i.hmpg", true);

Zeile gelöscht : user_pref("extensions.mysearchdial_i.newTab", false);

Zeile gelöscht : user_pref("extensions.mysearchdial_i.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.016:53:49");

Zeile gelöscht : user_pref("extensions.rvv5COD6U.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ress[...]

Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuKApEPBlNodTHBkRt9JkgqTmbhhegZHspg7Bw-zXxO6B_BQbzOj3_VeigncIMMsfwsByEHQHRvoLB[...]
 

-\\ Google Chrome v35.0.1916.114
 

[ Datei : C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms}

Gelöscht [Search Provider] : hxxp://isearch.babylon.com/?q={searchTerms}&affID=120307&babsrc=SP_ss&mntrId=7C1DF80F415692A8

Gelöscht [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}

Gelöscht [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv2&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyEyDyBtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1G2XtB&cr=253778042&ir=

Gelöscht [Search Provider] : hxxp://www2.delta-search.com/?q={searchTerms}&affID=119556&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8

Gelöscht [Search Provider] : hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8

Gelöscht [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1514887747&ir=

Gelöscht [Extension] : jbolfgndggfhhpbnkgnpjkfhinclbigj

Gelöscht [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma
 

[ Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Search Provider] : hxxp://isearch.babylon.com/?q={searchTerms}&affID=120307&babsrc=SP_ss&mntrId=7C1DF80F415692A8

Gelöscht [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}

Gelöscht [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv2&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyEyDyBtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1G2XtB&cr=253778042&ir=

Gelöscht [Search Provider] : hxxp://www2.delta-search.com/?q={searchTerms}&affID=119556&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8

Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/mb106/?search={searchTerms}&loc=IB_DS&a=6PQwntg4IO&i=26

Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=109986&babsrc=SP_ss&mntrId=dcc1a6b9000000000000f80f4129ff48

Gelöscht [Search Provider] : hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8

Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms}

Gelöscht [Search Provider] : hxxp://www.nationzoom.com/web/?type=ds&ts=1387620009&from=ild&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms}

Gelöscht [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0103&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyByDyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1514887747&ir=

Gelöscht [Search Provider] : hxxp://www.awesomehp.com/web/?type=ds&ts=1394041413&from=amt&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

Gelöscht [Search Provider] : hxxp://websearch.exitingsearch.info/?l=1&q={searchTerms}&pid=725&r=2014/03/21&hid=10042898870410746318&lg=EN&cc=CH&unqvl=50

Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms}

Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms}

Gelöscht [Extension] : jbolfgndggfhhpbnkgnpjkfhinclbigj

Gelöscht [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma

Gelöscht [Extension] : pflphaooapbgpeakohlggbpidpppgdff
 

[ Datei : C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Extension] : jbolfgndggfhhpbnkgnpjkfhinclbigj

Gelöscht [Extension] : pflphaooapbgpeakohlggbpidpppgdff
 

*************************
 

AdwCleaner[R0].txt - [54398 octets] - [11/07/2014 12:59:49]

AdwCleaner[R1].txt - [41537 octets] - [11/07/2014 13:04:58]

AdwCleaner[S0].txt - [13288 octets] - [11/07/2014 13:02:04]

AdwCleaner[S1].txt - [39813 octets] - [11/07/2014 13:06:54]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [39874 octets] ##########

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 7 Home Premium x64

Ran by Sven on 11.07.2014 at 13:22:13.04

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\bobylyrics

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\sweetim

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup(1)_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup(1)_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup(1)_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup(1)_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8be1f90a-ab31-4a5a-9285-bb553c6c359d}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{8be1f90a-ab31-4a5a-9285-bb553c6c359d}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\apn"

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"

Successfully deleted: [Folder] "C:\ProgramData\fighters"

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{0EAF6628-11F7-45D8-A623-1AAAA6B89C5D}

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{3242E650-EFA1-47F4-8C2D-8B0415367BF1}

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{40EA1F96-D9D0-46CC-996E-5D5409B5BB7F}

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{5A0335C8-0838-47EE-A855-812E2768FA73}

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{6A0AC37F-1303-4B53-A7B7-5680CA802FF2}

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{C0799D62-A52E-4637-890B-1D951ABFA50F}

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{E2B93FB6-25B6-4083-9FDC-AAE91D19686F}

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{F36DA996-DC19-47F6-A75A-4D9E6D19880E}

Successfully deleted: [Empty Folder] C:\Users\Sven\appdata\local\{F40B6B8E-C1F6-40BB-82EE-EAD957A921AA}
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 11.07.2014 at 13:30:57.22

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2014

Ran by Sven (administrator) on MirjamZanetti on 11-07-2014 13:32:35

Running from C:\Users\Sven\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
 
 

==================== Registry (Whitelisted) ==================
 

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-06-23] (LogMeIn Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoNetworkConnections] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoCommonGroups] 0

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms}

BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: SNT - {76F9D91C-56F3-3618-2D80-F6734BE2E498} - C:\Program Files (x86)\SNT\5AJN.dll No File

BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File

BHO-x32: Media View - {fed65192-d64e-4d7b-91f6-37d5f033d528} - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Sven\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Extension: SNT - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\hcfai@pbgqo-.co.uk [2014-03-24]

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox

FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff
 

Chrome: 

=======

CHR HomePage: hxxp://google.ch/

CHR StartupUrls: "hxxp://www.google.ch/"

CHR DefaultSearchKeyword: google.ch___

CHR Extension: (Google Drive) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-25]

CHR Extension: (No Name) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]

CHR Extension: (YouTube) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-25]

CHR Extension: (Google-Suche) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-25]

CHR Extension: (Avira Browser Safety) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-10]

CHR Extension: (Google Wallet) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

CHR Extension: (Google Mail) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-25]

CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2014-05-25]

CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2014-05-25]

CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2014-05-25]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-15] (LogMeIn, Inc.)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]

S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]

S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]

S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
 

==================== Drivers (Whitelisted) ====================
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-11 13:32 - 2014-07-11 13:32 - 00017473 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 12:14 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 14:30 - 2014-07-09 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-09 14:30 - 2014-07-09 14:30 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox

2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt

2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-11 13:32 - 00000000 ____D () C:\FRST

2014-07-07 19:27 - 2014-07-11 12:14 - 02084864 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\ProgramData\AnyAppSnow

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Sven\AppData\Local\Comodo

2014-06-17 21:27 - 2014-06-17 21:59 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Audacity

2014-06-17 21:27 - 2014-06-17 21:27 - 00001027 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk

2014-06-17 21:27 - 2014-06-17 21:27 - 00001015 _____ () C:\Users\Public\Desktop\Audacity.lnk

2014-06-17 21:27 - 2014-06-17 21:27 - 00000000 ____D () C:\Program Files (x86)\Audacity

2014-06-17 21:23 - 2014-06-17 21:26 - 22180353 _____ (Audacity Team ) C:\Users\Sven\Downloads\audacity-win-2.0.5.exe

2014-06-14 14:49 - 2014-06-15 17:28 - 00000000 ____D () C:\Users\Mirjam Zanetti\Downloads\Holzbrücken_files

2014-06-14 14:49 - 2014-06-14 14:49 - 00012165 _____ () C:\Users\Mirjam Zanetti\Downloads\Holzbrücken.htm

2014-06-13 12:11 - 2014-06-13 12:11 - 20143464 _____ (Gameforge ) C:\Users\Tim\Downloads\4Story_GameforgeLiveSetup (2).exe

2014-06-11 18:01 - 2014-06-11 18:01 - 01681384 _____ (Bandoo Media Inc) C:\Users\Sven\Downloads\iLividSetup-r495-n-bc.exe

2014-06-11 15:42 - 2014-06-11 15:42 - 54082726 _____ () C:\Users\Sven\Desktop\AncientMagic_New.zip

2014-06-11 14:20 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-06-11 14:20 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-06-11 14:20 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-06-11 14:20 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-06-11 14:20 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-06-11 14:20 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-11 14:20 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-11 14:20 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-06-11 14:20 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-11 14:20 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-06-11 14:20 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-11 14:20 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-11 14:20 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-06-11 14:20 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-06-11 14:20 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-06-11 14:20 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-06-11 14:20 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-06-11 14:20 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-06-11 14:20 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-06-11 14:20 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-11 14:20 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-06-11 14:20 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-06-11 14:20 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-06-11 14:20 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-06-11 14:20 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-11 14:20 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-06-11 14:20 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-06-11 14:20 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-11 14:20 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-11 14:20 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-06-11 14:20 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-06-11 14:20 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-11 14:20 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-06-11 14:20 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-06-11 14:20 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-06-11 14:20 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-06-11 14:20 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-06-11 14:20 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-11 14:20 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-06-11 14:20 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-06-11 14:20 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-06-11 14:20 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-06-11 14:20 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-06-11 14:20 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-06-11 14:20 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-06-11 14:20 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-06-11 14:20 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-06-11 14:20 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-06-11 14:20 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-06-11 14:20 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-06-11 14:20 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-06-11 14:20 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-06-11 14:14 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-06-11 14:14 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-06-11 14:14 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2014-06-11 14:14 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2014-06-11 14:14 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-06-11 14:14 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-06-11 14:14 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2014-06-11 14:14 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-06-11 14:14 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2014-06-11 14:14 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-06-11 14:14 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2014-06-11 14:14 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-06-11 14:14 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll

2014-06-11 14:14 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-06-11 14:09 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-11 14:09 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
 

==================== One Month Modified Files and Folders =======
 

2014-07-11 13:33 - 2014-07-11 13:32 - 00017473 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-11 13:32 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-11 13:19 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-11 13:19 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:16 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat

2014-07-11 13:16 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat

2014-07-11 13:16 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat

2014-07-11 13:16 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat

2014-07-11 13:16 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat

2014-07-11 13:16 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat

2014-07-11 13:16 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:14 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-11 13:10 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-11 13:10 - 2009-07-14 06:51 - 00101980 _____ () C:\Windows\setupact.log

2014-07-11 13:09 - 2010-11-21 05:47 - 01695744 _____ () C:\Windows\PFRO.log

2014-07-11 13:08 - 2012-06-29 12:21 - 01436590 _____ () C:\Windows\WindowsUpdate.log

2014-07-11 13:07 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner

2014-07-11 13:03 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim

2014-07-11 13:03 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven

2014-07-11 13:03 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 12:14 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-11 12:14 - 2014-07-07 19:27 - 02084864 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-11 12:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-07-10 18:35 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent

2014-07-10 18:31 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox

2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt

2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert

2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport

2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps

2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-10 10:43 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi

2014-07-10 10:43 - 2012-12-02 21:28 - 00000680 __RSH () C:\Users\Tim\ntuser.pol

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 19:59 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi

2014-07-09 19:58 - 2012-12-01 11:05 - 00000680 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol

2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET

2014-07-09 14:31 - 2014-07-09 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-09 14:30 - 2014-07-09 14:30 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-09 14:28 - 2014-02-24 18:05 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-07-09 14:28 - 2012-12-01 11:20 - 00001326 __RSH () C:\Users\Sven\ntuser.pol

2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk

2014-07-09 13:23 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp

2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-06 11:48 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012

2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer

2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr

2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf

2014-06-24 07:19 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-06-23 12:57 - 2012-03-23 02:27 - 00000000 ____D () C:\ProgramData\Temp

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\ProgramData\AnyAppSnow

2014-06-23 12:42 - 2013-12-16 13:27 - 00000000 ____D () C:\ProgramData\InstallMate

2014-06-23 12:42 - 2013-12-02 21:20 - 00000000 ____D () C:\ProgramData\4c56cbda1eea8c4f

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Sven\AppData\Local\Comodo

2014-06-18 16:28 - 2014-01-01 16:21 - 00000000 ____D () C:\Program Files (x86)\Overwolf

2014-06-17 21:59 - 2014-06-17 21:27 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Audacity

2014-06-17 21:27 - 2014-06-17 21:27 - 00001027 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk

2014-06-17 21:27 - 2014-06-17 21:27 - 00001015 _____ () C:\Users\Public\Desktop\Audacity.lnk

2014-06-17 21:27 - 2014-06-17 21:27 - 00000000 ____D () C:\Program Files (x86)\Audacity

2014-06-17 21:26 - 2014-06-17 21:23 - 22180353 _____ (Audacity Team ) C:\Users\Sven\Downloads\audacity-win-2.0.5.exe

2014-06-15 17:28 - 2014-06-14 14:49 - 00000000 ____D () C:\Users\Mirjam Zanetti\Downloads\Holzbrücken_files

2014-06-14 14:49 - 2014-06-14 14:49 - 00012165 _____ () C:\Users\Mirjam Zanetti\Downloads\Holzbrücken.htm

2014-06-13 12:11 - 2014-06-13 12:11 - 20143464 _____ (Gameforge ) C:\Users\Tim\Downloads\4Story_GameforgeLiveSetup (2).exe

2014-06-13 12:11 - 2013-02-03 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live

2014-06-13 12:11 - 2013-02-03 17:47 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive

2014-06-12 14:03 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-06-11 18:01 - 2014-06-11 18:01 - 01681384 _____ (Bandoo Media Inc) C:\Users\Sven\Downloads\iLividSetup-r495-n-bc.exe

2014-06-11 15:42 - 2014-06-11 15:42 - 54082726 _____ () C:\Users\Sven\Desktop\AncientMagic_New.zip
 

Some content of TEMP:

====================

C:\Users\Sven\AppData\Local\Temp\avgnt.exe

C:\Users\Sven\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-03-25 09:03
 

==================== End Of Log ============================

--- --- ---

schrauber

12.07.2014 07:38

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Terrenay

12.07.2014 07:48

Hallo, ich gehe jetzt gleich für eine Woche in den Urlaub und kann bis dann dem entsprechend hier nicht weitermachen :(
Also, bitte lösch das Thema nicht aus deinen Abos ;)

Bis dann!

schrauber

13.07.2014 06:56

ok :)

Terrenay

22.07.2014 10:03

Code:

 Results of screen317's Security Check version 0.99.85  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop   

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 WinTuneUp 1.0    

 Visual Studio Extensions for Windows Library for JavaScript 

 Java 7 Update 55  

 JavaScript Tooling    

 Java version out of Date! 

  Adobe Flash Player 13.0.0.214 Flash Player out of Date!  

 Adobe Reader XI  

 Google Chrome 35.0.1916.114  
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbam.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes Anti-Malware mbamscheduler.exe   

 Symantec Norton Online Backup NOBuAgent.exe  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014

Ran by Sven (administrator) on MirjamZanetti on 22-07-2014 10:55:49

Running from C:\Users\Sven\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-07-15] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoNetworkConnections] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoCommonGroups] 0

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms}

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File

BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
 

FireFox:

========

FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Sven\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Extension: SNT - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\hcfai@pbgqo-.co.uk [2014-03-24]

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox

FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff
 

Chrome: 

=======

CHR HomePage: hxxp://google.ch/

CHR StartupUrls: "hxxp://www.google.ch/"

CHR DefaultSearchKeyword: google.ch___

CHR Extension: (Google Drive) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-25]

CHR Extension: (No Name) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]

CHR Extension: (YouTube) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-25]

CHR Extension: (Google-Suche) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-25]

CHR Extension: (Avira Browser Safety) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-10]

CHR Extension: (Google Wallet) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

CHR Extension: (Google Mail) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-25]

CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2014-05-25]

CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2014-05-25]

CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2014-05-25]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-14] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]

S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]

S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]

S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
 

==================== Drivers (Whitelisted) ====================
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-22] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-19 19:24 - 2014-07-19 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-19 19:24 - 2014-07-19 19:24 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 13:32 - 2014-07-22 10:55 - 00018305 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 12:14 - 2014-07-22 10:55 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox

2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt

2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-22 10:55 - 02090496 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 19:27 - 2014-07-22 10:55 - 00000000 ____D () C:\FRST

2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\ProgramData\AnyAppSnow

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Sven\AppData\Local\Comodo
 

==================== One Month Modified Files and Folders =======
 

2014-07-22 10:56 - 2014-07-11 13:32 - 00018305 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-22 10:55 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-22 10:55 - 2014-07-07 19:27 - 02090496 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-22 10:55 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-22 10:35 - 2012-06-29 12:21 - 01486200 _____ () C:\Windows\WindowsUpdate.log

2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-07-22 10:32 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-22 10:32 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-22 10:30 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi

2014-07-22 10:26 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-22 10:23 - 2010-11-21 05:47 - 01704358 _____ () C:\Windows\PFRO.log

2014-07-22 10:23 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-22 10:23 - 2009-07-14 06:51 - 00102428 _____ () C:\Windows\setupact.log

2014-07-22 07:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-07-22 06:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

2014-07-21 21:38 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi

2014-07-21 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012

2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat

2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat

2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-19 19:24 - 2014-07-19 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-19 19:24 - 2014-07-19 19:24 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:07 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner

2014-07-11 13:03 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim

2014-07-11 13:03 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven

2014-07-11 13:03 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-07-10 18:35 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent

2014-07-10 18:31 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox

2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt

2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert

2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport

2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps

2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-10 10:43 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi

2014-07-10 10:43 - 2012-12-02 21:28 - 00000680 __RSH () C:\Users\Tim\ntuser.pol

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 19:58 - 2012-12-01 11:05 - 00000680 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol

2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET

2014-07-09 14:28 - 2014-02-24 18:05 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-07-09 14:28 - 2012-12-01 11:20 - 00001326 __RSH () C:\Users\Sven\ntuser.pol

2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk

2014-07-09 13:23 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp

2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer

2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr

2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf

2014-06-24 07:19 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-06-23 12:57 - 2012-03-23 02:27 - 00000000 ____D () C:\ProgramData\Temp

2014-06-23 12:42 - 2014-06-23 12:42 - 00000000 ____D () C:\ProgramData\AnyAppSnow

2014-06-23 12:42 - 2013-12-16 13:27 - 00000000 ____D () C:\ProgramData\InstallMate

2014-06-23 12:42 - 2013-12-02 21:20 - 00000000 ____D () C:\ProgramData\4c56cbda1eea8c4f

2014-06-23 12:39 - 2014-06-23 12:39 - 00000000 ____D () C:\Users\Sven\AppData\Local\Comodo
 

Some content of TEMP:

====================

C:\Users\Mirjam Zanetti\AppData\Local\Temp\avgnt.exe

C:\Users\Sven\AppData\Local\Temp\avgnt.exe

C:\Users\Sven\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-03-25 09:03
 

==================== End Of Log ============================

--- --- ---

Zu ESET... Der Scan dauert bei mir 5.30h, weshalb ich ihn vor 2 Tagen über Nacht laufen liess (und wegen den Geräuschen vom PC fast nicht schlafen konnte ._.). Am nächsten Morgen WÄRE er ja fertig gewesen, aber dann hat meine Mutter oder mein Bruder ne Steckdose "vergewaltigt" und die Sicherung für die ganze Wohnung ist rausgefallen. Tja, PC war am Ars** und danach war auch kein Logfile im Ordner ._.
Habe den Scan dann sogar von gestern auf heute wieder laufen lassen, dann allerdings, weil ich mich so gefreut hab dass es dieses mal ging, nicht gross nachgedacht und bei "Nach Fertigstellung deinstallieren" ein Häkchen gesetzt -.-
Jetzt sind im ESET-Ordner nur noch 3 Dateien, darunter ist keine Textdatei...
Ich würd den Scan diese Nacht lieber nicht noch mal laufen lassen, damit ich auch mal wieder vernünftig schlafen kann, aber wenn du das Log unbedingt brauchst, werd ichs wohl tun..
Vielleicht kann ich ihn auch heute Nachmittag schnell laufen lassen, wenn wir weg sind.

schrauber

23.07.2014 08:14

Java und Flash updaten.

Mach bitte nen Vollscan mit deinem AV Programm und lass ESET weg.

Terrenay

23.07.2014 13:38

Hab Avira:

Code:



Avira Free Antivirus

Erstellungsdatum der Reportdatei: Mittwoch, 23. Juli 2014  09:46
 
 

Das Programm läuft als uneingeschränkte Vollversion.

Online-Dienste stehen zur Verfügung.
 

Lizenznehmer   : Avira Antivirus Free

Seriennummer   : 0000149996-AVHOE-0000001

Plattform      : Windows 7 Home Premium

Windowsversion : (Service Pack 1)  [6.1.7601]

Boot Modus     : Normal gebootet

Benutzername   : SYSTEM

Computername   : MirjamZanetti
 

Versionsinformationen:

BUILD.DAT      : 14.0.5.464     91868 Bytes  02.07.2014 13:06:00

AVSCAN.EXE     : 14.0.5.396   1042512 Bytes  02.07.2014 11:06:43

AVSCANRC.DLL   : 14.0.5.364     62544 Bytes  02.07.2014 11:06:43

LUKE.DLL       : 14.0.5.336     57936 Bytes  02.07.2014 11:06:46

AVSCPLR.DLL    : 14.0.5.376     89680 Bytes  02.07.2014 11:06:43

AVREG.DLL      : 14.0.5.356    261200 Bytes  02.07.2014 11:06:43

avlode.dll     : 14.0.5.396    588368 Bytes  02.07.2014 11:06:42

avlode.rdf     : 14.0.4.42      65114 Bytes  19.07.2014 17:26:05

XBV00008.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00009.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00010.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00011.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00012.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00013.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00014.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00015.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00016.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00017.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00018.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00019.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00020.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00021.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00022.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00023.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00024.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00025.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00026.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00027.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00028.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00029.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00030.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00031.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00032.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00033.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00034.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00035.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00036.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00037.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00038.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00039.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00040.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00041.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00163.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:22

XBV00164.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:22

XBV00165.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:22

XBV00166.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:22

XBV00167.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:22

XBV00168.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:22

XBV00169.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:22

XBV00170.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:22

XBV00171.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00172.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00173.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00174.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00175.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00176.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00177.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00178.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00179.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00180.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00181.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00182.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00183.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:23

XBV00184.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00185.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00186.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00187.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00188.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00189.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00190.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00191.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00192.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00193.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00194.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00195.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00196.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00197.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00198.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00199.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00200.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00201.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00202.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00203.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00204.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00205.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00206.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00207.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00208.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00209.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00210.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00211.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00212.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00213.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00214.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00215.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00216.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00217.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00218.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00219.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00220.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00221.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00222.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00223.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00224.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00225.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00226.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00227.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00228.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00229.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00230.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00231.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00232.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00233.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00234.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00235.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00236.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00237.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00238.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00239.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00240.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00241.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00242.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00243.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00244.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00245.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00246.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00247.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00248.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00249.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00250.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00251.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00252.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:29

XBV00253.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:29

XBV00254.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:29

XBV00255.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:29

XBV00000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 11:06:47

XBV00001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 11:06:47

XBV00002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 11:06:47

XBV00003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 11:06:47

XBV00004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 11:06:47

XBV00005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 11:06:47

XBV00006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 11:06:47

XBV00007.VDF   : 7.11.152.100  4193792 Bytes  02.06.2014 11:06:47

XBV00042.VDF   : 8.11.153.142   710656 Bytes  06.06.2014 11:06:47

XBV00043.VDF   : 8.11.155.44  1013760 Bytes  16.06.2014 11:06:47

XBV00044.VDF   : 8.11.159.102  1662976 Bytes  08.07.2014 14:50:53

XBV00045.VDF   : 8.11.159.104    13824 Bytes  08.07.2014 14:50:53

XBV00046.VDF   : 8.11.159.108    13312 Bytes  08.07.2014 14:50:53

XBV00047.VDF   : 8.11.159.112    30720 Bytes  09.07.2014 14:50:54

XBV00048.VDF   : 8.11.159.114     6144 Bytes  09.07.2014 14:50:54

XBV00049.VDF   : 8.11.159.116    10240 Bytes  09.07.2014 14:50:54

XBV00050.VDF   : 8.11.159.118     5632 Bytes  09.07.2014 14:50:54

XBV00051.VDF   : 8.11.159.122     7168 Bytes  09.07.2014 14:50:54

XBV00052.VDF   : 8.11.159.126   180736 Bytes  09.07.2014 14:50:58

XBV00053.VDF   : 8.11.159.148   174080 Bytes  09.07.2014 14:51:04

XBV00054.VDF   : 8.11.159.168     2560 Bytes  09.07.2014 14:51:04

XBV00055.VDF   : 8.11.159.188    15360 Bytes  09.07.2014 14:51:05

XBV00056.VDF   : 8.11.159.210    25600 Bytes  09.07.2014 14:51:05

XBV00057.VDF   : 8.11.159.212     7168 Bytes  09.07.2014 14:51:05

XBV00058.VDF   : 8.11.159.218    27648 Bytes  10.07.2014 14:51:06

XBV00059.VDF   : 8.11.159.220     2048 Bytes  10.07.2014 14:51:06

XBV00060.VDF   : 8.11.159.222    29696 Bytes  10.07.2014 14:51:07

XBV00061.VDF   : 8.11.159.224   167936 Bytes  10.07.2014 14:51:13

XBV00062.VDF   : 8.11.159.226    35328 Bytes  10.07.2014 14:51:14

XBV00063.VDF   : 8.11.159.230   186368 Bytes  10.07.2014 20:49:51

XBV00064.VDF   : 8.11.159.250    16896 Bytes  10.07.2014 20:49:51

XBV00065.VDF   : 8.11.159.252     2048 Bytes  10.07.2014 20:49:51

XBV00066.VDF   : 8.11.160.16     6144 Bytes  10.07.2014 20:49:51

XBV00067.VDF   : 8.11.160.40    17408 Bytes  10.07.2014 10:12:52

XBV00068.VDF   : 8.11.160.42     2048 Bytes  11.07.2014 10:12:54

XBV00069.VDF   : 8.11.160.46   179200 Bytes  11.07.2014 10:12:55

XBV00070.VDF   : 8.11.160.48   203264 Bytes  11.07.2014 14:37:58

XBV00071.VDF   : 8.11.160.50     6144 Bytes  11.07.2014 14:37:58

XBV00072.VDF   : 8.11.160.52     2048 Bytes  11.07.2014 14:37:58

XBV00073.VDF   : 8.11.160.54     2048 Bytes  11.07.2014 14:37:58

XBV00074.VDF   : 8.11.160.58    22016 Bytes  11.07.2014 14:37:58

XBV00075.VDF   : 8.11.160.60     2048 Bytes  11.07.2014 14:37:58

XBV00076.VDF   : 8.11.160.62     8192 Bytes  11.07.2014 14:37:58

XBV00077.VDF   : 8.11.160.66   198656 Bytes  12.07.2014 14:38:00

XBV00078.VDF   : 8.11.160.68     7168 Bytes  12.07.2014 14:38:00

XBV00079.VDF   : 8.11.160.70    14848 Bytes  12.07.2014 14:38:00

XBV00080.VDF   : 8.11.160.72     7168 Bytes  12.07.2014 14:38:00

XBV00081.VDF   : 8.11.160.92    40448 Bytes  13.07.2014 14:37:40

XBV00082.VDF   : 8.11.160.112     2048 Bytes  13.07.2014 14:37:40

XBV00083.VDF   : 8.11.160.130   193024 Bytes  13.07.2014 14:37:42

XBV00084.VDF   : 8.11.160.132     2048 Bytes  13.07.2014 14:37:42

XBV00085.VDF   : 8.11.160.152    20480 Bytes  13.07.2014 20:37:37

XBV00086.VDF   : 8.11.160.154     2048 Bytes  13.07.2014 20:37:37

XBV00087.VDF   : 8.11.160.156    20992 Bytes  14.07.2014 08:37:41

XBV00088.VDF   : 8.11.160.158     2560 Bytes  14.07.2014 08:37:41

XBV00089.VDF   : 8.11.160.160    11264 Bytes  14.07.2014 14:37:42

XBV00090.VDF   : 8.11.160.162     2560 Bytes  14.07.2014 14:37:42

XBV00091.VDF   : 8.11.160.166    14336 Bytes  14.07.2014 14:37:42

XBV00092.VDF   : 8.11.160.168     5120 Bytes  14.07.2014 14:37:42

XBV00093.VDF   : 8.11.160.178     7168 Bytes  14.07.2014 20:37:41

XBV00094.VDF   : 8.11.160.180     2048 Bytes  14.07.2014 20:37:41

XBV00095.VDF   : 8.11.160.182     2048 Bytes  14.07.2014 20:37:41

XBV00096.VDF   : 8.11.160.188   256000 Bytes  14.07.2014 02:37:43

XBV00097.VDF   : 8.11.160.190     7680 Bytes  14.07.2014 02:37:43

XBV00098.VDF   : 8.11.160.194    18432 Bytes  15.07.2014 08:37:38

XBV00099.VDF   : 8.11.160.212   184832 Bytes  15.07.2014 19:24:53

XBV00100.VDF   : 8.11.160.230   289792 Bytes  15.07.2014 19:24:55

XBV00101.VDF   : 8.11.160.232     2048 Bytes  15.07.2014 19:24:55

XBV00102.VDF   : 8.11.160.234   176128 Bytes  15.07.2014 19:24:56

XBV00103.VDF   : 8.11.160.254    18432 Bytes  15.07.2014 17:26:06

XBV00104.VDF   : 8.11.161.16     6144 Bytes  16.07.2014 17:26:06

XBV00105.VDF   : 8.11.161.32     2048 Bytes  16.07.2014 17:26:06

XBV00106.VDF   : 8.11.161.34     2048 Bytes  16.07.2014 17:26:06

XBV00107.VDF   : 8.11.161.52    26624 Bytes  16.07.2014 17:26:07

XBV00108.VDF   : 8.11.161.68   184832 Bytes  16.07.2014 17:26:08

XBV00109.VDF   : 8.11.161.84     2048 Bytes  16.07.2014 17:26:08

XBV00110.VDF   : 8.11.162.2      2560 Bytes  16.07.2014 17:26:08

XBV00111.VDF   : 8.11.162.6     16896 Bytes  16.07.2014 17:26:08

XBV00112.VDF   : 8.11.162.8     24064 Bytes  16.07.2014 17:26:08

XBV00113.VDF   : 8.11.162.10     2560 Bytes  16.07.2014 17:26:09

XBV00114.VDF   : 8.11.162.14    41472 Bytes  17.07.2014 17:26:09

XBV00115.VDF   : 8.11.162.16     2048 Bytes  17.07.2014 17:26:09

XBV00116.VDF   : 8.11.162.18   215040 Bytes  17.07.2014 17:26:10

XBV00117.VDF   : 8.11.162.22   184320 Bytes  17.07.2014 17:26:12

XBV00118.VDF   : 8.11.162.40   258048 Bytes  17.07.2014 17:26:14

XBV00119.VDF   : 8.11.162.42     3584 Bytes  17.07.2014 17:26:14

XBV00120.VDF   : 8.11.162.58     3072 Bytes  17.07.2014 17:26:14

XBV00121.VDF   : 8.11.162.78     2048 Bytes  17.07.2014 17:26:14

XBV00122.VDF   : 8.11.162.94     2048 Bytes  17.07.2014 17:26:14

XBV00123.VDF   : 8.11.162.110    35840 Bytes  17.07.2014 17:26:14

XBV00124.VDF   : 8.11.162.112     2048 Bytes  18.07.2014 17:26:14

XBV00125.VDF   : 8.11.162.130    23040 Bytes  18.07.2014 17:26:14

XBV00126.VDF   : 8.11.162.134   184320 Bytes  18.07.2014 17:26:16

XBV00127.VDF   : 8.11.162.136     2048 Bytes  18.07.2014 17:26:16

XBV00128.VDF   : 8.11.162.152   231424 Bytes  18.07.2014 17:26:22

XBV00129.VDF   : 8.11.162.154     2048 Bytes  18.07.2014 17:26:22

XBV00130.VDF   : 8.11.162.170   108032 Bytes  18.07.2014 17:26:25

XBV00131.VDF   : 8.11.162.172     9728 Bytes  18.07.2014 17:26:25

XBV00132.VDF   : 8.11.162.174     2048 Bytes  18.07.2014 17:26:25

XBV00133.VDF   : 8.11.162.188    20992 Bytes  18.07.2014 17:26:25

XBV00134.VDF   : 8.11.162.192     2048 Bytes  18.07.2014 17:26:25

XBV00135.VDF   : 8.11.162.194     2048 Bytes  18.07.2014 17:26:26

XBV00136.VDF   : 8.11.162.200    19968 Bytes  18.07.2014 17:26:26

XBV00137.VDF   : 8.11.162.204     2048 Bytes  18.07.2014 17:26:26

XBV00138.VDF   : 8.11.162.212     2048 Bytes  18.07.2014 17:26:26

XBV00139.VDF   : 8.11.162.228   227840 Bytes  19.07.2014 17:26:27

XBV00140.VDF   : 8.11.162.244     2048 Bytes  19.07.2014 17:26:27

XBV00141.VDF   : 8.11.163.2     31232 Bytes  19.07.2014 17:26:28

XBV00142.VDF   : 8.11.163.16    62464 Bytes  20.07.2014 16:13:15

XBV00143.VDF   : 8.11.163.20   202752 Bytes  20.07.2014 16:13:17

XBV00144.VDF   : 8.11.163.22     2048 Bytes  20.07.2014 16:13:17

XBV00145.VDF   : 8.11.163.26    50176 Bytes  21.07.2014 10:13:04

XBV00146.VDF   : 8.11.163.28    23040 Bytes  21.07.2014 10:13:05

XBV00147.VDF   : 8.11.163.42     6144 Bytes  21.07.2014 10:13:05

XBV00148.VDF   : 8.11.163.44     2560 Bytes  21.07.2014 10:13:05

XBV00149.VDF   : 8.11.163.56     5120 Bytes  21.07.2014 10:13:05

XBV00150.VDF   : 8.11.163.68     8192 Bytes  21.07.2014 16:13:27

XBV00151.VDF   : 8.11.163.74   213504 Bytes  21.07.2014 16:13:28

XBV00152.VDF   : 8.11.163.78    22528 Bytes  22.07.2014 04:13:04

XBV00153.VDF   : 8.11.163.82     2560 Bytes  22.07.2014 10:13:30

XBV00154.VDF   : 8.11.163.84   181248 Bytes  22.07.2014 10:13:31

XBV00155.VDF   : 8.11.163.86     9728 Bytes  22.07.2014 10:13:31

XBV00156.VDF   : 8.11.163.92     2560 Bytes  22.07.2014 16:13:16

XBV00157.VDF   : 8.11.163.98   230400 Bytes  22.07.2014 22:13:15

XBV00158.VDF   : 8.11.163.100     2048 Bytes  22.07.2014 22:13:15

XBV00159.VDF   : 8.11.163.102     2048 Bytes  22.07.2014 22:13:15

XBV00160.VDF   : 8.11.163.108    22528 Bytes  22.07.2014 22:13:15

XBV00161.VDF   : 8.11.163.112    17920 Bytes  22.07.2014 04:13:11

XBV00162.VDF   : 8.11.163.116     2048 Bytes  23.07.2014 04:13:11

LOCAL000.VDF   : 8.11.163.116 109633536 Bytes  23.07.2014 04:13:26

Engineversion  : 8.3.22.12 

AEVDF.DLL      : 8.3.0.4       118976 Bytes  02.07.2014 11:06:41

AESCRIPT.DLL   : 8.2.0.12      426184 Bytes  21.07.2014 16:13:27

AESCN.DLL      : 8.3.2.2       139456 Bytes  21.07.2014 16:13:25

AESBX.DLL      : 8.2.20.24    1409224 Bytes  02.07.2014 11:06:41

AERDL.DLL      : 8.2.0.138     704888 Bytes  02.07.2014 11:06:41

AEPACK.DLL     : 8.4.0.42      786632 Bytes  10.07.2014 14:50:04

AEOFFICE.DLL   : 8.3.0.14      213192 Bytes  21.07.2014 16:13:25

AEHEUR.DLL     : 8.1.4.1166   7233736 Bytes  21.07.2014 16:13:24

AEHELP.DLL     : 8.3.1.0       278728 Bytes  02.07.2014 11:06:41

AEGEN.DLL      : 8.1.7.28      450752 Bytes  02.07.2014 11:06:41

AEEXP.DLL      : 8.4.2.6       237760 Bytes  02.07.2014 11:06:41

AEEMU.DLL      : 8.1.3.2       393587 Bytes  02.07.2014 11:06:41

AEDROID.DLL    : 8.4.2.24      442568 Bytes  02.07.2014 11:06:41

AECORE.DLL     : 8.3.2.2       241864 Bytes  21.07.2014 16:13:03

AEBB.DLL       : 8.1.1.4        53619 Bytes  02.07.2014 11:06:41

AVWINLL.DLL    : 14.0.5.320     24144 Bytes  02.07.2014 11:06:44

AVPREF.DLL     : 14.0.5.320     50256 Bytes  02.07.2014 11:06:43

AVREP.DLL      : 14.0.5.320    219216 Bytes  02.07.2014 11:06:43

AVARKT.DLL     : 14.0.5.368    226384 Bytes  02.07.2014 11:06:42

AVEVTLOG.DLL   : 14.0.5.320    182352 Bytes  02.07.2014 11:06:42

SQLITE3.DLL    : 14.0.5.320    452176 Bytes  02.07.2014 11:06:47

AVSMTP.DLL     : 14.0.5.320     76368 Bytes  02.07.2014 11:06:44

NETNT.DLL      : 14.0.5.320     13392 Bytes  02.07.2014 11:06:46

RCIMAGE.DLL    : 14.0.5.320   4998224 Bytes  02.07.2014 11:06:46

RCTEXT.DLL     : 14.0.5.322     73808 Bytes  02.07.2014 11:06:46
 

Konfiguration für den aktuellen Suchlauf:

Job Name..............................: Vollständige Systemprüfung

Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp

Protokollierung.......................: standard

Primäre Aktion........................: Interaktiv

Sekundäre Aktion......................: Ignorieren

Durchsuche Masterbootsektoren.........: ein

Durchsuche Bootsektoren...............: ein

Bootsektoren..........................: C:, D:, 

Durchsuche aktive Programme...........: ein

Laufende Programme erweitert..........: ein

Durchsuche Registrierung..............: ein

Suche nach Rootkits...................: ein

Integritätsprüfung von Systemdateien..: aus

Prüfe alle Dateien....................: Alle Dateien

Durchsuche Archive....................: ein

Rekursionstiefe einschränken..........: 20

Archiv Smart Extensions...............: ein

Makrovirenheuristik...................: ein

Dateiheuristik........................: erweitert
 

Beginn des Suchlaufs: Mittwoch, 23. Juli 2014  09:46
 

Der Suchlauf über die Bootsektoren wird begonnen:

Bootsektor 'HDD0(C:, D:)'

    [INFO]      Es wurde kein Virus gefunden!
 

Der Suchlauf nach versteckten Objekten wird begonnen.
 

Der Suchlauf über gestartete Prozesse wird begonnen:

Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht

Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '75' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '91' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '105' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '164' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '92' Modul(e) wurden durchsucht

Durchsuche Prozess 'spoolsv.exe' - '106' Modul(e) wurden durchsucht

Durchsuche Prozess 'sched.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht

Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'avguard.exe' - '120' Modul(e) wurden durchsucht

Durchsuche Prozess 'HD-LogRotatorService.exe' - '34' Modul(e) wurden durchsucht

Durchsuche Prozess 'dtsrvc.exe' - '25' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '50' Modul(e) wurden durchsucht

Durchsuche Prozess 'GREGsvc.exe' - '23' Modul(e) wurden durchsucht

Durchsuche Prozess 'UpdaterService.exe' - '27' Modul(e) wurden durchsucht

Durchsuche Prozess 'LMIGuardianSvc.exe' - '44' Modul(e) wurden durchsucht

Durchsuche Prozess 'NOBuAgent.exe' - '30' Modul(e) wurden durchsucht

Durchsuche Prozess 'pdisrvc.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'sqlwriter.exe' - '33' Modul(e) wurden durchsucht

Durchsuche Prozess 'WLIDSVC.EXE' - '74' Modul(e) wurden durchsucht

Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '132' Modul(e) wurden durchsucht

Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht

Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'hamachi-2.exe' - '73' Modul(e) wurden durchsucht

Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht

Durchsuche Prozess 'NASvc.exe' - '46' Modul(e) wurden durchsucht

Durchsuche Prozess 'SeaPort.exe' - '55' Modul(e) wurden durchsucht

Durchsuche Prozess 'atieclxx.exe' - '43' Modul(e) wurden durchsucht

Durchsuche Prozess 'taskhost.exe' - '40' Modul(e) wurden durchsucht

Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht

Durchsuche Prozess 'Explorer.EXE' - '169' Modul(e) wurden durchsucht

Durchsuche Prozess 'Avira.OE.Systray.exe' - '138' Modul(e) wurden durchsucht

Durchsuche Prozess 'avgnt.exe' - '114' Modul(e) wurden durchsucht

Durchsuche Prozess 'hamachi-2-ui.exe' - '58' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '91' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '61' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '55' Modul(e) wurden durchsucht

Durchsuche Prozess 'avcenter.exe' - '113' Modul(e) wurden durchsucht

Durchsuche Prozess 'avscan.exe' - '125' Modul(e) wurden durchsucht

Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht

Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht

Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht

Durchsuche Prozess 'lsass.exe' - '65' Modul(e) wurden durchsucht

Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht

Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht

Durchsuche Prozess 'winlogon.exe' - '30' Modul(e) wurden durchsucht
 

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:

Die Registry wurde durchsucht ( '11879' Dateien ).
 
 

Der Suchlauf über die ausgewählten Dateien wird begonnen:
 

Beginne mit der Suche in 'C:\' <Acer>

C:\Program Files (x86)\NextCouuP\f.dll

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/AgentCV.A.14238

C:\Program Files (x86)\Perfect World Entertainment\RaiderZ_en\Splash.exe

  [FUND]      Ist das Trojanische Pferd TR/Dropper.A.24596

C:\Program Files (x86)\SK Supporter\uninstall.exe

    [0] Archivtyp: NSIS

    --> [PluginsDir]/spext.dll

        [FUND]      Enthält Erkennungsmuster der Adware ADWARE/BHO.BProtector.13

        [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

C:\Users\Mirjam Zanetti\Downloads\Multihack by Madeye v4.1.zip

    [0] Archivtyp: ZIP

    --> Multihack by Madeye v4.1/Multihack by Madeye v4.1.exe

        [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

        [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

C:\Users\Sven\AppData\Local\Mozilla\Firefox\Profiles\42h3y7h3.default\Cache\7\97\51E1Fd01

  [FUND]      Enthält Erkennungsmuster des Java-Scriptvirus JS/Blacole.GB.105

C:\Users\Sven\Downloads\4Story Hack by LaBomba.zip

    [0] Archivtyp: ZIP

    --> 4Story Hack by LaBomba.exe

        [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

        [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

    [0] Archivtyp: Runtime Packed

    --> C:\Users\Sven\Downloads\chromeinstall-7u65.exe

        [1] Archivtyp: Runtime Packed

      --> C:\Users\Sven\Downloads\chromeinstall-7u9.exe

          [2] Archivtyp: Runtime Packed

        --> C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip

            [3] Archivtyp: ZIP

          --> Multihack by Madeye v4.1/Multihack by Madeye v4.1.exe

              [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

              [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip

  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002eb

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/InstallRex.Gen

        --> C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar

            [3] Archivtyp: RAR

          --> 4story Gold Hack 2014 4.4.exe

              [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

              [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar

  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

Beginne mit der Suche in 'D:\' <DATA>
 

Beginne mit der Desinfektion:

C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar

  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '50a20aa7.qua' verschoben!

C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002eb

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/InstallRex.Gen

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4f892514.qua' verschoben!

C:\Users\Sven\Downloads\Multihack by Madeye v4.1.zip

  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1a127fea.qua' verschoben!

C:\Users\Sven\Downloads\4Story Hack by LaBomba.zip

  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7c5d304a.qua' verschoben!

C:\Users\Sven\AppData\Local\Mozilla\Firefox\Profiles\42h3y7h3.default\Cache\7\97\51E1Fd01

  [FUND]      Enthält Erkennungsmuster des Java-Scriptvirus JS/Blacole.GB.105

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '398e1d52.qua' verschoben!

C:\Users\Mirjam Zanetti\Downloads\Multihack by Madeye v4.1.zip

  [FUND]      Ist das Trojanische Pferd TR/Spy.Gen

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '46ba2f77.qua' verschoben!

C:\Program Files (x86)\SK Supporter\uninstall.exe

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/BHO.BProtector.13

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0a010334.qua' verschoben!

C:\Program Files (x86)\Perfect World Entertainment\RaiderZ_en\Splash.exe

  [FUND]      Ist das Trojanische Pferd TR/Dropper.A.24596

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '761a436a.qua' verschoben!

C:\Program Files (x86)\NextCouuP\f.dll

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/AgentCV.A.14238

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5b486c69.qua' verschoben!
 
 

Ende des Suchlaufs: Mittwoch, 23. Juli 2014  14:30

Benötigte Zeit:  4:16:07 Stunde(n)
 

Der Suchlauf wurde vollständig durchgeführt.
 

 105434 Verzeichnisse wurden überprüft

 2485463 Dateien wurden geprüft

     11 Viren bzw. unerwünschte Programme wurden gefunden

      0 Dateien wurden als verdächtig eingestuft

      0 Dateien wurden gelöscht

      0 Viren bzw. unerwünschte Programme wurden repariert

      9 Dateien wurden in die Quarantäne verschoben

      0 Dateien wurden umbenannt

      0 Dateien konnten nicht durchsucht werden

 2485452 Dateien ohne Befall

  25609 Archive wurden durchsucht

      5 Warnungen

      9 Hinweise

 1629595 Objekte wurden beim Rootkitscan durchsucht

      0 Versteckte Objekte wurden gefunden

Das Problem aus dem Startpost ist wie gesagt schon länger verschwunden^^
Allerdings hab ich noch das Problem mit Google Chrome: Wenn ich es starte, gehen 2-5 Mitteilungen ("Ihr Profil konnte nicht ordnungsgemäss geöffnet werden. Etc. etc.") auf und wenn ich es schliesse, bleibt der Prozess zwei Mal offen. Ich muss dann beide chrome.exe-Prozesse über den Taskmanager schliessen damit ich Chrome wieder öffnen kann, ansonsten passiert nämlich nix.
Weisst du vielleicht, wie ich das wieder hinkriege? Mit Revo drüber und neu installieren zB?

Und achja, die beiden Programme sollten nun geupdatet sein ;)

schrauber

24.07.2014 09:37

Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de

frisches FRST Log bitte.

Terrenay

24.07.2014 11:10

Super, Chrome geht wieder wie geschmiert :)

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014

Ran by Sven (administrator) on MirjamZanetti on 24-07-2014 12:06:24

Running from C:\Users\Sven\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoNetworkConnections] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Policies\Explorer: [NoCommonGroups] 0

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = https://www.google.com/search?q={searchTerms}

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File

BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Sven\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Extension: SNT - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\Extensions\hcfai@pbgqo-.co.uk [2014-03-24]

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox

FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff
 

Chrome: 

=======

CHR HomePage: hxxp://google.ch/

CHR StartupUrls: "hxxp://www.google.ch/"

CHR Extension: (Google Docs) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-24]

CHR Extension: (Google Drive) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-24]

CHR Extension: (YouTube) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-24]

CHR Extension: (Google-Suche) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-24]

CHR Extension: (Avira Browser Safety) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-24]

CHR Extension: (Google Wallet) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-24]

CHR Extension: (Google Mail) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-24]

CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2014-07-24]

CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2014-07-24]

CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2014-07-24]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]

S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-24] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:52 - 2014-07-24 11:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-24 11:52 - 2014-07-24 11:57 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 09:45 - 2014-07-24 11:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 13:32 - 2014-07-24 12:06 - 00019164 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox

2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt

2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 19:27 - 2014-07-24 12:06 - 00000000 ____D () C:\FRST

2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-24 12:07 - 2014-07-11 13:32 - 00019164 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-24 12:06 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-24 11:57 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-24 11:57 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-24 11:57 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-24 11:51 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-24 11:51 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0

2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-24 11:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-24 11:48 - 2009-07-14 06:51 - 00102540 _____ () C:\Windows\setupact.log

2014-07-24 11:47 - 2012-06-29 12:21 - 02021108 _____ () C:\Windows\WindowsUpdate.log

2014-07-24 11:47 - 2010-11-21 05:47 - 01748832 _____ () C:\Windows\PFRO.log

2014-07-24 11:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-24 11:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

2014-07-24 11:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-07-23 22:45 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent

2014-07-23 22:27 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 20:53 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi

2014-07-23 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-07-21 21:38 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi

2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012

2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat

2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat

2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:07 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner

2014-07-11 13:03 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim

2014-07-11 13:03 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven

2014-07-11 13:03 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox

2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt

2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert

2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport

2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps

2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-10 10:43 - 2012-12-02 21:28 - 00000680 __RSH () C:\Users\Tim\ntuser.pol

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 19:58 - 2012-12-01 11:05 - 00000680 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol

2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET

2014-07-09 14:28 - 2014-02-24 18:05 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2014-07-09 14:28 - 2012-12-01 11:20 - 00001326 __RSH () C:\Users\Sven\ntuser.pol

2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk

2014-07-09 13:23 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp

2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer

2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr

2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf
 

Some content of TEMP:

====================

C:\Users\Mirjam Zanetti\AppData\Local\Temp\avgnt.exe

C:\Users\Sven\AppData\Local\Temp\avgnt.exe

C:\Users\Sven\AppData\Local\Temp\Quarantine.exe

C:\Users\Tim\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-03-25 09:03
 

==================== End Of Log ============================

--- --- ---

schrauber

24.07.2014 19:19

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Terrenay

25.07.2014 18:18

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-07-2014

Ran by Sven at 2014-07-25 19:01:24 Run:1

Running from C:\Users\Sven\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User: Group Policy restriction detected <======= ATTENTION

         

*****************
 

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.

C:\Windows\system32\GroupPolicyUsers\S-1-5-21-1536315646-4119356758-1407283469-1001\User => Moved successfully.
 
 

The system needed a reboot. 
 

==== End of Fixlog ====

Erstmal: Vielen Dank für die Hilfe! Alles ist verschwunden und der Computer läuft wieder viel schneller!
...Auf meinem Account..

Ich hab grad, nachdem ich den Neustart von FRST durchgeführt habe, kurz auf dem Account meiner Mutter (Computer-Administrator) geschaut, ob auch dort alles OK ist.
Aber dort ist sogar immer noch die "save.on"-Erweiterung installiert und es öffnen sich in Chrome dauern Webseiten, die Werbung etc beinhalten.
Kann es sein, dass wir uns hier nur um die Viren auf meinem Account gekümmert haben?

lg

schrauber

26.07.2014 10:51

Ich weiß ja nit auf welchem Account du die ganzen Scans machst.

FRST bitte aus dem Account der Mutter laufen lassen, Logs posten.

Terrenay

26.07.2014 20:29

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014

Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 26-07-2014 21:22:33

Running from C:\Users\Mirjam Zanetti\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPNetworkCommunicator.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe 

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [se] => C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe  /minimized  

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com

HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.holasearch.com/?affID=121962&tt=gc_&babsrc=HP_ss&mntrId=7C1DF80F415692A8

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}

SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8

SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File

BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
 

FireFox:

========

FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox

FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff

FF HKCU\...\Firefox\Extensions: [happylyrics@hpyproductions.net] - C:\Program Files (x86)\HappyLyrics\FF
 

Chrome: 

=======

CHR HomePage: 

CHR DefaultSearchKeyword: ask search

CHR DefaultSearchProvider: Ask Search

CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms}

CHR DefaultNewTabURL: 

CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28]

CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]

CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]

CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]

S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-26] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-26 21:22 - 2014-07-26 21:23 - 00020722 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt

2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe

2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS

2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:52 - 2014-07-26 21:13 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-24 11:52 - 2014-07-26 20:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 09:45 - 2014-07-26 20:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox

2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt

2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-26 21:22 - 00000000 ____D () C:\FRST

2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-26 21:23 - 2014-07-26 21:22 - 00020722 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt

2014-07-26 21:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe

2014-07-26 21:22 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST

2014-07-26 21:22 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-26 21:22 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-26 21:19 - 2012-06-29 12:21 - 01207747 _____ () C:\Windows\WindowsUpdate.log

2014-07-26 21:16 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-26 21:16 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi

2014-07-26 21:13 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-26 21:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-26 21:13 - 2009-07-14 06:51 - 00102820 _____ () C:\Windows\setupact.log

2014-07-26 21:09 - 2010-11-21 05:47 - 01755708 _____ () C:\Windows\PFRO.log

2014-07-26 20:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent

2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype

2014-07-26 20:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-26 20:23 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi

2014-07-26 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

2014-07-26 10:55 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi

2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol

2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim

2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol

2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven

2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol

2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti

2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server

2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS

2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0

2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP

2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012

2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat

2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat

2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:07 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox

2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt

2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert

2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport

2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps

2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET

2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk

2014-07-09 13:23 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp

2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-26 20:49 - 2014-01-05 20:23 - 00000000 ____D () C:\Users\Sven\AppData\Local\Purplizer

2014-06-26 20:48 - 2014-05-26 18:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Raptr

2014-06-26 20:48 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-06-26 20:48 - 2014-01-01 16:14 - 00000000 ____D () C:\Users\Sven\AppData\Local\Overwolf
 

Some content of TEMP:

====================

C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe

C:\Users\Sven\AppData\Local\temp\avgnt.exe

C:\Users\Sven\AppData\Local\temp\Quarantine.exe

C:\Users\Tim\AppData\Local\temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-03-25 09:03
 

==================== End Of Log ============================

--- --- ---

Terrenay

26.07.2014 20:29

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-07-2014

Ran by Mirjam Zanetti at 2014-07-26 21:24:22

Running from C:\Users\Mirjam Zanetti\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

 clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden

 clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden

 Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden

 Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden

4Story DE 4.2.213 (HKLM-x32\...\4Story_DE_is1) (Version:  - )

4story_cycle (HKCU\...\Kalydo App 4story_cycle) (Version: 4.01.00.22 - )

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

Acer eDisplay Management (HKLM-x32\...\{A586DC50-B18D-48FB-B7CC-A598200457C2}) (Version: 1.37.007 - Portrait Displays, Inc.)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)

Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)

Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)

Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0609.2011 - Acer Incorporated)

Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)

Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden

Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.5 - Sereby Corporation)

AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden

AMD APP SDK Runtime (Version: 10.0.873.1 - Advanced Micro Devices Inc.) Hidden

AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden

AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden

AMD Steady Video Plug-In  (Version: 2.07.0000 - AMD) Hidden

AMD USB 3.0 Device Detector (Version: 2.1.29.0 - Advanced Micro Devices, Inc.) Hidden

AMD VISION Engine Control Center (x32 Version: 2012.0126.1906.34079 - Advanced Micro Devices, Inc.) Hidden

AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden

Ancient Magic (HKLM-x32\...\Ancient Magic) (Version: 0.0.0.1 - Sven Zanetti)

Any Video Converter 5.5.5 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)

Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)

Ask Toolbar (HKLM-x32\...\{4F524A2D-5637-4300-76A7-A758B70C0A03}) (Version: 12.10.3.28 - APN, LLC) <==== ATTENTION

aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)

Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)

Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.7.8981 - )

Avira (HKLM-x32\...\{142be4a8-895b-4ed9-b1ff-11c76357e3df}) (Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)

Benutzerhandbuch - Grundlagen EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Bog) (Version:  - )

Benutzerhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Useg) (Version:  - )

Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)

BitComet 1.36 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.36 - CometNetwork)

Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden

Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden

Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden

Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden

Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden

Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden

Blender (HKLM\...\Blender) (Version: 2.70a - Blender Foundation)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.17.916 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{7E6316CA-5ED0-4EF9-9920-A92115E286B7}) (Version: 0.7.17.916 - BlueStack Systems, Inc.)

Camtasia Studio 8 (HKLM-x32\...\{A7727F03-5311-4A12-9A63-2ACD20BA0497}) (Version: 8.2.1.1423 - TechSmith Corporation)

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

Chat Mapper (HKLM-x32\...\{498F0DC0-3B5E-4DC7-B571-578F61306058}) (Version: 1.7.0.0 - Urban Brain Studios, Inc.)

clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)

clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)

CPU Miner (HKLM-x32\...\CPUMiner) (Version: 1.0 - WinTuneUp Apps. )

CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)

CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)

DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation)

Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden

Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden

Download Navigator (HKLM-x32\...\{E728441A-7820-4B1C-87C9-DE7BE37B2953}) (Version: 1.1.0 - SEIKO EPSON CORPORATION)

Druckerdeinstallation für EPSON XP-402 403 405 406 Series (HKLM\...\EPSON XP-402 403 405 406 Series) (Version:  - SEIKO EPSON Corporation)

eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)

Elsword_DE (HKLM-x32\...\Elsword_DE_is1) (Version:  - )

Entity Framework Designer für Visual Studio 2012 - DEU (HKLM-x32\...\{B2BDC072-BE01-432D-B281-30891D597FBB}) (Version: 11.1.30729.00 - Microsoft Corporation)

Epson Easy Photo Print 2 (HKLM-x32\...\{30E01116-5666-4807-8EF1-D80E9FF16717}) (Version: 2.3.2.0 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)

Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden

FileZilla Client 3.8.1 (HKLM-x32\...\FileZilla Client) (Version: 3.8.1 - Tim Kosse)

Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden

Fotogaléria (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalleri (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalleriet (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Freemake Video Converter Version 4.1.3 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.3 - Ellora Assets Corporation)

Galeria de Fotografias (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria fotogràfica (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galerie foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galerija fotografija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Gameforge Live 2.0.3 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.3 - Gameforge)

GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)

GLBasic SDK (HKLM-x32\...\GLBasic_SDK) (Version: 12.096 - Dream Design Entertainment)

GnuWin32: CoreUtils version 5.3.0 (HKLM-x32\...\CoreUtils-5.3.0_is1) (Version: 5.3.0 - GnuWin32)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Talk Plugin (HKLM-x32\...\{2A83AD05-56E6-3FBD-8752-B4143162EF59}) (Version: 4.9.1.16010 - Google)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)

Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3510 - Acer Incorporated)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12412 - HP)

HP Photosmart 7520 series - Grundlegende Software für das Gerät (HKLM\...\{62883BA5-32F6-44D0-AF9D-9CBED778F36F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

HyperCam 3 (HKLM-x32\...\HyperCam 3 3.5.1211.29) (Version: 3.5.1211.29 - Solveig Multimedia)

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)

IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )

IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )

Iminent (x32 Version: 6.46.1.0 - Iminent) Hidden <==== ATTENTION

Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden

InstallForge (HKLM-x32\...\InstallForge) (Version: 1.2.9.1 - solicus)

Interdiscount Fotoservice (HKLM-x32\...\Interdiscount Fotoservice) (Version: 4.8.6 - CEWE COLOR AG u Co. OHG)

Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.650 - Oracle)

Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden

JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden

JavaScript Tooling (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden

JetBrains ReSharper 7.0.1 (HKLM-x32\...\{1322DAC7-A713-4015-8F36-035F07A06ECA}) (Version: 7.0.1098 - JetBrains Inc)

Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden

John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Kalydo Player 5.00.01 (HKCU\...\KalydoPlayer) (Version: 5.00.01 - Eximion B.V.)

Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden

LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.227 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.227 - LogMeIn, Inc.) Hidden

MAESTIA Version 201207 (HKLM-x32\...\{8F50EC3D-C482-4445-9E4B-991A766047D5}_is1) (Version: 201207 - RocWorks)

Magicka - Demo (HKLM-x32\...\Steam App 73050) (Version:  - Arrowhead Game Studios)

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden

Microsoft .NET Framework 1.1 Security Update (KB2656370) (HKLM-x32\...\M2656370) (Version:  - )

Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version:  - )

Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version:  - )

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft ASP.NET and Web Tools 2012.3 - Visual Studio 2012 - deu (x32 Version: 1.4.41009.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET and Web Tools 2012.3 - Visual Studio 2012 (x32 Version: 1.4.41009.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET MVC 3 - DEU (HKLM-x32\...\{07AC2D83-E795-4AD5-970D-B9BD14A1E411}) (Version: 3.0.20105.0 - Microsoft Corporation)

Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET Web Pages - DEU (HKLM-x32\...\{93EEC4E9-EEFE-4027-ACD3-6E8C1D085975}) (Version: 1.0.20105.0 - Microsoft Corporation)

Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden

Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden

Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden

Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden

Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden

Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden

Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)

Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden

Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM-x32\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation)

Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden

Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.61011 - Microsoft Corporation) Hidden

Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.6.40627.9000 - Microsoft Corporation) Hidden

Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.6.40627.9000 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931 - Microsoft Corporation) Hidden

Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden

Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden

Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden

Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)

Microsoft Silverlight 4 SDK - Deutsch (HKLM-x32\...\{8EA792A5-38AA-4F0E-8DFE-D1BAF1145431}) (Version: 4.0.60310.0 - Microsoft Corporation)

Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)

Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)

Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (HKLM-x32\...\{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}) (Version: 11.1.20828.01 - Microsoft Corporation)

Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (HKLM-x32\...\{00C84D22-DB8F-4159-BF70-682B8EA56A1E}) (Version: 11.1.20828.01 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (x64) (HKLM\...\{1E6ED082-E32D-4B2B-8B6A-70B094815135}) (Version: 10.50.1750.9 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft Visual C# 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C# 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012  x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{ac3600d2-e1b3-4573-bef7-73f9409d6393}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{aec97477-921a-4289-985a-9e29506625b6}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)

Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Language Pack - DEU (x32 Version: 11.0.50727.1 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Performance Collection Tools (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (HKLM-x32\...\{69ec32be-d994-44de-9eae-6d86ced6f352}) (Version: 11.0.50727.42 - Microsoft Corporation)

Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - ENU (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 (HKLM-x32\...\{ae17ae9b-af38-40d2-a194-6102c56ed502}) (Version: 11.0.50727.26 - Microsoft Corporation)

Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)

Microsoft Web Deploy dbSqlPackage Provider - DEU (HKLM-x32\...\{86756584-C41A-4CA3-B42D-4768C7720F56}) (Version: 10.3.20225.0 - Microsoft Corporation)

Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

Microsoft XNA Game Studio 4.0 Refresh (Shared Components) (x32 Version: 4.0.30901.0 - Microsoft Corporation) Hidden

Microsoft XNA Game Studio Platform Tools (HKLM-x32\...\{89690B51-2E21-4E93-914E-F9CAC5B24A84}) (Version: 1.4.0.0 - Microsoft Corporation)

Minecraft Editor 64 bits (HKLM\...\{042CC934-54B5-4BEB-948D-F3780B2CE4D7}) (Version: 1.6.6 - Axialmedia)

MonoGame (HKLM-x32\...\MonoGame) (Version: 3.0 - MonoGame)

MorphVOX Pro (HKLM-x32\...\{53AB1F25-D607-4B4D-8FD5-74E03F2F9414}) (Version: 4.4.7 - Screaming Bee)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

MP4 To MP3 Converter V3.0.5 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version:  - hxxp://www.MP4ToMP3Converter.net)

MpcStar 5.4 (HKLM-x32\...\MpcStar) (Version: 5.4 - www.mpcstar.com)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden

MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.18 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.18 - Egis Technology Inc.) Hidden

Nero Control Center 10 (x32 Version: 10.6.13200.0.12 - Nero AG) Hidden

Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10800 - Nero AG) Hidden

Nero Core Components 10 (x32 Version: 2.0.20500.9.16 - Nero AG) Hidden

Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG)

Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden

Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10700.5.100 - Nero AG)

Nero Express 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden

Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.6.10300 - Nero AG)

Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10600.4.100 - Nero AG)

Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.10022.15.0 - Nero AG) Hidden

Netzwerkhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Netg) (Version:  - )

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)

NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)

Online Weather (HKCU\...\Online Weather) (Version: 1.0 - )

Overwolf (HKLM-x32\...\Overwolf) (Version: 0.76.1.0 - Overwolf Ltd.)

Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)

Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden

Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

Pivot Pro Plugin (x32 Version: 9.50.110 - Portrait Displays, Inc.) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)

PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Pokemon Online 2.0.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)

POKéMON Simulator 4.5 (HKLM-x32\...\POKéGAME32) (Version: 4.5 - Birdiesoft)

Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden

Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden

PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden

Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)

Prompt Downloader (HKLM-x32\...\Prompt Downloader) (Version:  - )

Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

SDK (x32 Version: 2.32.010 - Portrait Displays, Inc.) Hidden

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)

Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

Software Updater (HKLM-x32\...\{7B3A525D-9D3D-4618-AE52-A31DE98C8AC3}) (Version: 4.1.4 - SEIKO EPSON CORPORATION)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Steuer 2012 13.0.3 (HKLM-x32\...\1382-8438-0790-3872) (Version: 13.0.3 - Information Factory AG)

Steuer 2013 14.0.1 (HKLM-x32\...\0166-6433-7072-1489) (Version: 14.0.1 - Information Factory AG)

Studie zur Verbesserung von HP Photosmart 7520 series Produkten (HKLM\...\{D662A279-973A-42A0-8D4B-8747C56C0501}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Update kb70007 (x32 Version: 1.0.0 - MSR) Hidden

Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version:  - Microsoft)

Update for Microsoft Visual Studio 2012 (KB2781514) (HKLM-x32\...\{56ef8912-352f-4fab-9c73-6f1c92a7127f}) (Version: 11.0.51219 - Microsoft Corporation)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

UpdateStar (HKLM-x32\...\{4B75C1B1-D0C7-4E70-9EE4-09CE7F734B0C}) (Version: 10.0.1265 - UpdateStar GmbH)

Valokuvavalikoima (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Vegas Movie Studio HD 11.0 (HKLM-x32\...\{6E3FD14F-858B-11E1-BC4A-F04DA23A5C58}) (Version: 11.0.75 - Sony)

VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.14 - NCH Software)

Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden

Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)

Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden

Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden

Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden

Visual Studio 2012 Update 4 (KB2707250) (HKLM-x32\...\{312d9252-c71c-4c84-b171-f4ad46e22098}) (Version: 11.0.61030 - Microsoft Corporation)

Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9202.20789 - Microsoft Corporation) Hidden

WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.71 - NCH Software)

WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden

WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden

WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden

WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden

WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)

weblica - 3.6.3 (HKLM-x32\...\weblica) (Version: 3.6.3 - empros gmbh)

Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)

WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden

Windows App Certification Kit Native Components (Version: 8.59.29736 - Microsoft Corporation) Hidden

Windows App Certification Kit x64 (x32 Version: 8.59.29750 - Microsoft Corporation) Hidden

Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601 - Microsoft) Hidden

Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601 - Microsoft) Hidden

Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3528.0331 - společnost Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden

Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Temel Parçalar (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live 程式集 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Liven peruspaketti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Liven sähköposti (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

Windows XP Targeting with C++ (Version: 11.0.51106 - Microsoft Corporation) Hidden

Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden

WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

WinTuneUp 1.0 (HKLM-x32\...\WinTuneUp) (Version: 1.0 - WinTuneUp Apps. )

WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )

Wondershare Video Editor(Build 3.5.0) (HKLM-x32\...\Wondershare Video Editor_is1) (Version:  - Wondershare Software)

Zerius Vocoder (remove only) (HKLM-x32\...\VocoderGUI) (Version:  - )

Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Почта Windows Live (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden

Фотоальбом (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Фотогалерия (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Фотографии (общедоступная версия) (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

גלריית התמונות (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

بريد Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

معرض الصور (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

影像中心 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1536315646-4119356758-1407283469-1000_Classes\CLSID\{F7D4B6AD-AB5F-4fe8-9469-3A4697E41129}\InprocServer32 -> C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\kalydoplayer64.dll (Eximion B.V.)
 

==================== Restore Points  =========================
 

14-07-2014 12:00:11 Windows Update

15-07-2014 19:25:05 Windows Update

15-07-2014 19:53:43 Windows Update

19-07-2014 19:32:05 Windows Update

20-07-2014 12:00:16 Windows Update

21-07-2014 12:00:15 Windows Update

22-07-2014 08:30:54 Windows Update

22-07-2014 12:00:11 Windows Update

23-07-2014 07:35:52 Installed Java 7 Update 65

23-07-2014 12:00:14 Windows Update

24-07-2014 09:34:21 Revo Uninstaller's restore point - Google Chrome

24-07-2014 12:00:16 Windows Update

25-07-2014 17:01:30 Windows Update

25-07-2014 17:15:33 Windows Update

26-07-2014 12:00:19 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2014-07-10 14:46 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {13FBF219-AB2F-4E15-9513-29FDD61F4A20} - \BrowserProtect No Task File <==== ATTENTION

Task: {1B396549-A773-464C-B9B3-B4C49CF28A10} - System32\Tasks\GPU Grid Computing => C:\Windows\SysWOW64\dfrg\runner.exe

Task: {1C72B99D-EB1B-418B-9229-06888E65E40E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-24] (Google Inc.)

Task: {44A54D41-E818-466E-A807-D50B1E9D910E} - \PileFile reminder No Task File <==== ATTENTION

Task: {48840F86-1F7C-4F8A-A451-7370C9EE42CA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)

Task: {4BEA3EE7-26F9-419C-9225-FBFDE19FE80E} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION

Task: {4F8E5131-8941-4329-B11F-3413CA5D0960} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-24] (Google Inc.)

Task: {6A733201-6137-4277-98D7-56AAB8FB7F8A} - System32\Tasks\RunAsStdUser Task => C:\Users\Sven\AppData\Local\Oxy\Application\oxy.exe <==== ATTENTION

Task: {6C8BDFDF-A6E7-4549-B494-C0D1A4F9A07B} - \PileFile logon No Task File <==== ATTENTION

Task: {87E712A9-9E69-4B7C-9F54-5A79A168AF42} - System32\Tasks\HPCustParticipation HP Photosmart 7520 series => C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {AC774A6E-8700-4848-B0FE-1657D3DCAC3A} - \Funmoods No Task File <==== ATTENTION

Task: {CA415D1F-7A72-4B84-8880-31511E6E3DB6} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2014-06-10] (Overwolf LTD)

Task: {CFC139DF-686C-45F9-A5F4-DCF738E94779} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-23] (Adobe Systems Incorporated)

Task: {E14BE1A6-9A64-40D3-940C-A52A49596E45} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2014-01-23] ()

Task: {E45F4C4B-41F0-4A5B-983B-DB6815BF7334} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)

Task: {F87AF6AD-1E2B-445F-A72D-DB91FB0F505A} - \BackgroundContainer Startup Task No Task File <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-05-01 21:29 - 2014-05-01 21:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2014-07-07 13:53 - 2014-07-07 13:53 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll

2014-07-07 13:52 - 2014-07-07 13:52 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-07-11 21:08 - 2014-07-07 13:53 - 00049744 _____ () C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\Temp:373E1720

AlternateDataStreams: C:\ProgramData\Temp:AD022376

AlternateDataStreams: C:\Users\Sven\Downloads\message.eml:OECustomProperty
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: WdiSystemHost => 3

MSCONFIG\Services: WebClient => 3

MSCONFIG\Services: Wecsvc => 3

MSCONFIG\Services: wercplsupport => 3

MSCONFIG\Services: WerSvc => 3

MSCONFIG\Services: WinDefend => 2

MSCONFIG\Services: WinHttpAutoProxySvc => 3

MSCONFIG\Services: Winmgmt => 2

MSCONFIG\Services: WinRM => 3

MSCONFIG\Services: Wlansvc => 3

MSCONFIG\Services: wlidsvc => 3

MSCONFIG\Services: wmiApSrv => 3

MSCONFIG\Services: WMPNetworkSvc => 3

MSCONFIG\Services: WPCSvc => 3

MSCONFIG\Services: WPDBusEnum => 3

MSCONFIG\Services: wscsvc => 2

MSCONFIG\Services: WSearch => 2

MSCONFIG\Services: wuauserv => 2

MSCONFIG\Services: wudfsvc => 3

MSCONFIG\Services: WwanSvc => 3

MSCONFIG\startupfolder: C:^Users^Tim^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: 24x7HELP => "C:\Program Files (x86)\24x7Help\App24x7Help.exe" /STARTUP

MSCONFIG\startupreg: 4StoryPrePatch => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"

MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe

MSCONFIG\startupreg: CommonToolkitTray => C:\Program Files (x86)\Fighters\Tray\FightersTray.exe

MSCONFIG\startupreg: DT ACR => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -ACR

MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"

MSCONFIG\startupreg: EgisTecPMMUpdate => "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

MSCONFIG\startupreg: EgisUpdate => "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d

MSCONFIG\startupreg: EPLTarget => 

MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

MSCONFIG\startupreg: Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: InboxToolbar => "C:\Program Files (x86)\Inbox Toolbar\Inbox.exe" /STARTUP

MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start

MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe

MSCONFIG\startupreg: NextLive => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Tim\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe"

MSCONFIG\startupreg: Optimizer Pro => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent

MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe

MSCONFIG\startupreg: PC Speed Maximizer => C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe

MSCONFIG\startupreg: PivotSoftware => "C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

MSCONFIG\startupreg: RebateInformer => C:\Program Files (x86)\RebateInformer\RebateInf.exe /STARTUP

MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

MSCONFIG\startupreg: SiteRanker => "C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun

MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent

MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: UpdateStar => "C:\Users\Sven\AppData\Roaming\UpdateStar\UpdateStar.exe" -A

MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"

MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/26/2014 09:14:47 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/26/2014 09:13:52 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (07/26/2014 09:10:53 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/26/2014 09:09:57 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (07/26/2014 02:01:58 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)

Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.30514.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.
 

Error: (07/26/2014 02:01:58 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2705. The arguments are: Directory, ,
 

Error: (07/26/2014 02:01:56 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: XAPAuthenticodeSIPDLL, ,
 

Error: (07/26/2014 10:51:00 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/26/2014 10:50:11 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (07/25/2014 07:19:18 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)

Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.30514.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.
 
 

System errors:

=============

Error: (07/26/2014 09:15:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (07/26/2014 09:15:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
 

Error: (07/26/2014 09:13:52 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (07/26/2014 09:13:17 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎26.‎07.‎2014 um 21:12:24 unerwartet heruntergefahren.
 

Error: (07/26/2014 09:11:12 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
 

Error: (07/26/2014 09:10:53 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.
 

Error: (07/26/2014 09:09:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 

%%1064
 

Error: (07/26/2014 09:09:24 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎26.‎07.‎2014 um 21:07:40 unerwartet heruntergefahren.
 

Error: (07/26/2014 02:02:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Microsoft Silverlight (KB2977218)
 

Error: (07/26/2014 10:53:10 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 
 

Microsoft Office Sessions:

=========================

Error: (06/08/2014 05:44:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 25 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-07-10 14:40:33.475

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-07-10 14:40:33.163

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 41%

Total physical RAM: 3540.71 MB

Available physical RAM: 2053.84 MB

Total Pagefile: 7079.59 MB

Available Pagefile: 5283.79 MB

Total Virtual: 8192 MB

Available Virtual: 8191.86 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:456.45 GB) (Free:262.07 GB) NTFS

Drive d: (DATA) (Fixed) (Total:456.96 GB) (Free:456.72 GB) NTFS

Drive e: (acer_ P227HQV) (CDROM) (Total:0.2 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 6CE78890)

Partition 1: (Not Active) - (Size=18 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

schrauber

27.07.2014 10:15

Adware & Co. deinstallieren

Lade Dir bitte von hier http://deeprybka.trojaner-board.de/b...ninstaller.pngRevo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:
http://deeprybka.trojaner-board.de/b.../revo/add1.png
diesen Zusatz haben:
http://deeprybka.trojaner-board.de/b...e/revo/att.PNG
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
http://deeprybka.trojaner-board.de/b.../uninstall.PNG http://deeprybka.trojaner-board.de/b...o/moderat2.PNG
Reste löschen:
Klicke auf http://deeprybka.trojaner-board.de/b.../selectall.PNG dann auf http://deeprybka.trojaner-board.de/b...evo/delete.PNG und dann auf http://deeprybka.trojaner-board.de/b...evo/weiter.PNG.

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Terrenay

27.07.2014 14:38

Malwarebytes hat um die 70 Dateien in Quarantäne gestellt, darunter war auch eine Trojan.Agent.Irgendwas, aber das Log ist ziemlich leer :o

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 27.07.2014

Suchlauf-Zeit: 14:04:05

Logdatei: mbam.txt

Administrator: Ja
 

Version: 2.00.2.1012

Malware Datenbank: v2014.07.27.04

Rootkit Datenbank: v2014.07.17.01

Lizenz: Premium

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Self-protection: Aktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: Mirjam Zanetti
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 493475

Verstrichene Zeit: 30 Min, 22 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristics: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 0

(No malicious items detected)
 

Registrierungswerte: 0

(No malicious items detected)
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 0

(No malicious items detected)
 

Dateien: 0

(No malicious items detected)
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

Code:

# AdwCleaner v3.216 - Bericht erstellt am 27/07/2014 um 15:03:54

# Aktualisiert 17/07/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Mirjam Zanetti - MirjamZanetti

# Gestartet von : C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Verknüpfungen ] *****
 

Verknüpfung Desinfiziert : C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather\Uninstall.lnk
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [happylyrics@hpyproductions.net]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [se]

Schlüssel Gelöscht : HKCU\Software\5c55df8db669ec14

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{59C0C5BD-2579-433A-BBB8-AFFD59642BAF}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}

Schlüssel Gelöscht : HKCU\Software\1ClickDownload

Schlüssel Gelöscht : HKCU\Software\24x7help

Schlüssel Gelöscht : HKCU\Software\Alexa Internet

Schlüssel Gelöscht : HKCU\Software\APN DTX

Schlüssel Gelöscht : HKCU\Software\BabylonToolbar

Schlüssel Gelöscht : HKCU\Software\BI

Schlüssel Gelöscht : HKCU\Software\DataMngr

[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar

Schlüssel Gelöscht : HKCU\Software\Delta

Schlüssel Gelöscht : HKCU\Software\distromatic

Schlüssel Gelöscht : HKCU\Software\Funmoods

Schlüssel Gelöscht : HKCU\Software\ilivid

Schlüssel Gelöscht : HKCU\Software\Iminent

Schlüssel Gelöscht : HKCU\Software\ImInstaller

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\Optimizer Pro

Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx

Schlüssel Gelöscht : HKCU\Software\SearchProtect

Schlüssel Gelöscht : HKCU\Software\SiteRanker

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\Solvusoft

Schlüssel Gelöscht : HKCU\Software\SweetIM

Schlüssel Gelöscht : HKCU\Software\Webplayer

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\HappyLyrics

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17207
 
 

-\\ Mozilla Firefox v
 

[ Datei : C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\prefs.js ]
 
 

[ Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\42h3y7h3.default\prefs.js ]
 
 

[ Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\prefs.js ]
 
 

[ Datei : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\4b32mscn.default\prefs.js ]
 
 

[ Datei : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\prefs.js ]
 
 

-\\ Google Chrome v36.0.1985.125
 

[ Datei : C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Search Provider] : hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8

Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/mb106/?search={searchTerms}&loc=IB_DS&a=6PQwntg4IO&i=26

Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=109986&babsrc=SP_ss&mntrId=dcc1a6b9000000000000f80f4129ff48

Gelöscht [Search Provider] : hxxp://www2.delta-search.com/?q={searchTerms}&affID=119556&tt=gc_&babsrc=SP_ss&mntrId=7C1DF80F415692A8

Gelöscht [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&gct=ds&appid=559&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=5608402600834153&q={searchTerms}

Gelöscht [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv2&cd=2XzuyEtN2Y1L1Qzu0FzztD0FyEtCyDyCzytB0AzztB0EtD0EtN0D0Tzu0CyEyDyBtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1G2XtB&cr=253778042&ir=

Gelöscht [Search Provider] : hxxp://www.nationzoom.com/web/?type=ds&ts=1387620009&from=ild&uid=ST31000524AS_6VPK855EXXXX6VPK855E&q={searchTerms}

Gelöscht [Search Provider] : hxxp://isearch.babylon.com/?q={searchTerms}&affID=120307&babsrc=SP_ss&mntrId=7C1DF80F415692A8
 

[ Datei : C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [54398 octets] - [11/07/2014 12:59:49]

AdwCleaner[R1].txt - [41537 octets] - [11/07/2014 13:04:58]

AdwCleaner[R2].txt - [7714 octets] - [27/07/2014 14:52:57]

AdwCleaner[S0].txt - [13288 octets] - [11/07/2014 13:02:04]

AdwCleaner[S1].txt - [40111 octets] - [11/07/2014 13:06:54]

AdwCleaner[S2].txt - [5896 octets] - [27/07/2014 15:03:54]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [5956 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 7 Home Premium x64

Ran by Mirjam Zanetti on 27.07.2014 at 15:21:16.95

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\sweetim
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001048D3-294A-4CDA-A17A-51A2D04C086B}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001427FC-4209-43F8-AA6F-CFFFA44C9078}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{001C3F2B-822C-48BB-8A18-885402131C5F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{003C2E72-933C-4E15-BC47-121CAF8C4D75}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{00B69F4E-A72A-41BA-8FEB-43CF7E704D3F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{018FB44D-EF4B-4383-B5B6-5567AE3823CC}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0349CC65-3667-4741-B7E0-DB5C7007F28D}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{03DA18BE-C820-4B8C-8563-C772F3999E87}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{04DD1F21-5381-430B-A374-51B30F247497}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{05D5C397-6C47-445C-A102-97D5917F8593}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{075E535C-E40F-411E-A1DF-3E2CA5179D64}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0862F236-4003-4DD8-BFFB-4D24651A1AF4}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{08BC8F91-B10C-442D-BACA-B8D169C843EB}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0B2573C4-BB15-42BA-9882-F6DAFFC324E3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0BECB8D7-AAF7-437F-A7B0-8D241ED39115}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0D46A79A-5288-411A-9B06-1C73034004B1}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0EDA6312-2318-40B2-9310-E388FAEAC484}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{0FAB5D99-6693-4DD5-9CD3-E7F4E0C06378}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{14DEC5E6-1C4F-4DF0-8D3F-2E0510581B2F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1556CD4E-4F30-4F92-AC42-00B57B1284C0}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{15D8EE5B-554A-4018-B1A9-A08A590D4DFB}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{166999E6-1CE5-470D-ADC5-5107F118802B}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{169F4864-3CA7-49B7-A1AB-D3ADB404429B}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1707E4A7-CEAD-4738-821A-ED5409504C86}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{173435D1-713B-4972-83A1-8E3DD9C599C4}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1A87B844-0E76-4134-ABD2-2B84E00E1D1C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1B784D16-C4E8-42E6-BF9C-121638182E2A}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1BC8C91E-B47D-47E6-B13C-687897F3A9E9}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1C1037CD-D94D-44CD-B8AE-4DCFC94608EB}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1E3BDDC2-98E4-4C9B-B751-C3DA9EA75D01}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1EB18C3B-E67D-42B3-B9BF-29CBBF1C7117}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1EFAC82D-ED09-4F4C-A19D-837B447A026C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{1F5D4F0B-51D5-4D2F-BA96-6D0B11521E18}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{21B1C6EE-4898-486D-A0A5-E28D7C284F5E}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2338D82F-479C-4173-84B5-395A5DB8AD77}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{23C84535-2353-4A8B-A287-8A88C96E9C4A}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{23ECF433-5672-46B1-B41B-4B40DDEC1B88}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2697B3BD-3512-4F0F-B29A-3F0D100044C6}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2826245F-2184-407C-954A-9F1EEA2B4E7A}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{29ADEA81-083C-4597-BE00-57F507E96D57}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{29F097C1-87F4-4986-93F0-6C59AA625205}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2AC3AA20-1753-4389-A565-9FB66EC2AE95}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2BFC90E2-CBE4-4E0E-B223-4A933BCDD766}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2CCAE2D2-DC82-40FF-92F3-E53D3BCEDE46}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2CCEDFEF-1CCD-47D1-BB76-72EFD6EB0A66}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{2E6616C2-459F-46D6-B85B-E9ACC591CB4C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{30D0F7C5-BA05-4F52-8E4E-653D740B9593}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{32C2A792-4F39-4A01-8B82-AEB568DC135A}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{354CA703-9178-4200-982F-6F3F71DC9A47}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{356992C4-8207-4240-B0E6-DD3F4A8F67B8}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{37BA0D53-A0A8-429B-90CE-6463877DB78C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3835D28F-8E9B-4B78-BFC9-524805636F08}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{384F5E87-9F25-4E7B-96AA-E5F11C62915D}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{38D4A321-4100-4BF9-83A9-529A633D4037}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3A4CBDFF-1095-49B8-8879-ABE3AAFB7DD7}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3D949276-70AF-4F4D-9B82-A03ED129F102}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3DF5E7FD-D7AA-43A3-86B2-B680AAA04909}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3E11254D-5BAC-42CC-A5D6-CAB7829A934F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{3EA3D35C-1C50-4B8B-B1D2-763BAF183F9B}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4248DE69-D1FA-4066-8C50-E768B7C8BE6A}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{43FC2119-AC5E-4A65-8305-24A737D5A269}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{445A78D9-A17B-4A78-B94F-E23215FE37B8}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{463CB620-9333-48B6-A0F6-DDF1997BEF7F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{46E1978A-49C4-4ADC-8616-2050A36003F9}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{481189F8-A67F-4A37-887B-3EF200062ECD}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{492BC164-AE9C-40ED-A6DC-CBDD466CA0C2}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{49887326-CDE0-486A-A870-17F09EFDD750}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4ABBA807-2A5D-44C3-893D-28DB65AC3519}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4DB21EC0-DF3D-431D-89A6-79AA90A59A81}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4E2E2624-4078-4601-9592-727987A79677}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4EBA5256-AA10-4233-A4A8-1F3D23188C1C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{4F1311E4-7503-434A-859B-BAC763919082}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{51523AF7-3BC6-4455-8F15-6F58664077F3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5348964B-86F6-43C8-A7A2-22A2F87A6925}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{576FCAE9-B26F-4CD7-B2C5-848B62DBBF30}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{585952C3-52DB-46D2-811E-AC91C8006037}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5BEF7603-5AAE-4330-9A89-11A0E5861A20}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{5F01BBDC-0FCB-4B5B-B8F4-3CEA2EA15B2B}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{60538968-4E00-4770-B792-5FCC05837683}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6105637B-FE5A-40CA-94D5-EB3AAF54C0D7}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{62880CED-175F-45FE-92F3-AA1A620A9BC7}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{63413761-CA77-405B-9F03-8302444BE677}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{63FDB144-6214-4121-8271-CDD5F66E6055}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{68ADF529-0E04-4648-AC70-97E077713196}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{69BF8703-066E-4F49-94DE-B3B0160BD1C7}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6A5C721A-18D4-4751-AB51-BAA53D02D40C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6AA77B6E-C946-45F3-B64B-50AAE20B3243}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6AF54B64-306C-463E-8EDF-4B7EF3D5B122}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6BB03D55-5CB6-48D6-B2B6-2874E2BE2C77}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6F6768E3-E654-4058-8C4B-27BC25C2590E}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{6FCE5AC1-8164-4A43-B7BE-A1FD28371D61}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{720A529F-47E8-4C4D-B730-21A73E2A40EC}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{767FB82C-539E-4E2C-8357-DF4C6241F621}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{77249B16-96A1-437E-9738-5AC82F624E07}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{77282672-1D93-4822-A172-880EE23477E8}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7730D470-7D35-4FC9-80EA-E7083C5DBB92}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{775292E6-4DD0-446C-B917-5E27962B1AF0}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7784369D-D2B1-4F86-BBDE-05B59336B8E2}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7962C34D-580C-4168-B37D-11BD8532E761}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7A217C21-E30E-49C3-956A-9801828E7AEB}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7D132F5E-6B25-4D26-9D63-954AE0609506}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7D542172-0ACA-48A9-B342-87888A8372EE}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E222F3B-D1E4-47D0-9ED0-6C5F3B280285}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E7DDF3F-7498-4EB1-B189-797827062888}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{7E94F26B-B909-4941-9130-8DDD61977A4B}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{80822FE5-725C-4F9B-ABD4-0D9523AD8C8F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{81CC1FF0-30DC-479D-8FF6-A943A89BA4A5}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8281AB2F-4CF6-4EF7-8150-228074F65FE2}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{829167BD-2857-4FD6-80D5-6698E8383F82}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8355B800-DCC2-41C9-857A-0E63F5AB3E9E}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{861C0410-4697-42B4-A102-19F17C6F27FA}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{86392B1E-C3A8-4C1F-87C8-0431B3BF9F93}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{86581B70-6460-4846-A407-96E810F9DD90}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{872DC44F-E86F-4DE2-AE73-452894129D0C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{88124506-9E48-48B6-8AB2-E267CE48B7DD}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8835B369-8946-4616-919B-32E643F2417F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8A592CA4-DB70-4573-9238-07EC736374A8}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8D75D763-A943-4E1A-B02D-998B09EAAF81}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8D9BF486-BAA6-459C-9E25-42B11C62568F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{8F431B6C-2062-46B8-B6B1-8309D3A1FDD8}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{90FC0EA7-4D7D-4A0C-8FBC-B3D3F3CC73EC}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{91F75464-32E8-4A6A-87F0-6EBEA68C4925}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{920DAC0B-53A9-4DD6-8B69-38068BD8F842}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{92340515-AF42-4AE0-90A0-F5AEB36574E2}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{96059079-9037-4DAC-AD6D-A4C58618E095}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{967536DD-033E-4F09-9A37-CA6ACBE456E0}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{979F67D3-4F08-4C75-883A-33AC58E0D2F0}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{97F9E578-E6B2-4991-B88D-D8F1DCDE140B}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9826E91B-99CC-4EA9-901B-5D66821CF34C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{985189A4-A423-4BD8-ADB8-4948811E0822}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{989E0FCE-F6DB-4AB7-8D72-0FA219955FC6}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{98EC8C92-84B1-4558-AF3B-2070D0C47F89}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{98FF7317-C7C0-4E67-9F8C-5E922AAC1F5F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{996ECF16-EFE5-407B-9615-DBA3D8B6A942}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{999E6196-591A-4F39-91C4-050CCE7795FE}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9A24A226-4213-479A-8902-4C0C1050C1AB}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9B3A01F1-0312-41C0-ACF7-BA58C7A1F116}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9F6A4995-4D89-4B8D-8C4C-57A2948AD664}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{9FB78AD4-8C80-408D-8388-CDE2EEE5AB69}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A0E8627D-D51A-4676-B7FC-AEADBFA6FE19}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A2419EF0-D222-4869-AEA5-4B5FAB6A625E}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A4DE0C52-C1BD-4F4D-98F7-A28A39865B98}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A51241D6-BA54-4796-9B17-9E1CA4BF59D6}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A67341BD-9300-4E15-A852-82E9A6297179}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A6FD4982-1E95-449F-8A44-1C0AD964DD88}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A7116CF3-8832-4DB8-9E86-25562786A6A7}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A88742A8-8A68-4655-A69B-804EFDF15133}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A933E9C8-0405-45B4-9988-58EC563077F3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{A95E21D1-0B45-4E31-8AB8-466547155288}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AAB58BB8-F46A-4D68-84E5-16DBF5474E48}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB35ED35-D0CE-42FE-A240-83CC7762C341}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB4F61F4-0655-4CBE-A88A-73712DECC2A3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AB910F2C-09CA-49D8-AB57-B5E36BC2756D}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AC2402CE-CE5A-446B-9A4E-BF2A7C62DADA}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AF4CB8A4-BCE2-416D-86D0-6B82FFEF84B2}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{AF8CBD4A-917A-4632-8AFF-14ABA8FD01DF}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B0FE29A3-6E42-4184-9B49-39C075AB2307}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B2318EAC-416F-425C-9832-99A249A11576}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B2F36011-08B1-4307-BBE1-705AC42C0A8E}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B5B3FDFC-D596-4F81-A17B-0D68101C5830}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B6032455-9ABA-4D83-A575-8791E59471D1}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B7DEC381-C980-4A9A-A968-C88F4F61427F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B8C7CAAB-D0B5-4830-96E6-1984382E6442}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{B9F1C8F9-ABC4-4CD6-A6A9-81C19ED93A44}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BB567315-D678-445D-98C0-F361C6849DB7}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BE692022-D3A3-4953-905D-9FE204910C4D}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BE75401A-CA58-44BE-A040-82177A93EDB1}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{BF6DE305-24D3-42BB-AD89-66DDE6F42A6C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C22CF54D-7FE5-4553-A104-EA634F7B8215}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C3854701-3DA3-4E2C-B199-DC807FBACA92}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C458830B-C2F4-4810-9911-55A5EBE8820B}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C56CE98E-6394-4424-BB15-A0EDE1564230}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C624B7EE-B27D-4D88-A717-1EBA7D90BCD1}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C63F761A-4B01-4E3D-A659-4BF90271F3D5}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C72F5DBD-6EBE-4576-A5E9-E071EDDEB290}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C783AC9A-4C0F-4F2B-84C3-5429D280B36D}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{C99AA38E-BF2F-4F99-A2E1-466383F83E10}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{CFE2DF3C-9647-4163-BDE9-80436DD0DE18}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1079905-4CFA-4D8D-881B-BF0B39A9D175}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1524D66-0BC3-4B5B-A878-F9CC80F6BC9A}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D1CEBD73-2F97-44F5-85A1-222E4C904B89}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D300D924-4636-447D-BD9D-F381A03ADCB1}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3665EC1-BC34-49B8-931F-87187EB64FFF}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3C55E6A-3F1F-499E-B00C-B7B3CD965564}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D3D9BA71-5CA7-4D4A-9022-E5CE66C98F0E}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D471BA3E-0D25-4C2B-BB11-4AC13217A370}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D491FB06-5229-4B44-A387-5C526FC4F3A9}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D6C9D66B-A137-4141-B325-16733073DBF3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D7671A35-C4ED-4982-B094-67686940B25C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D79EE6A3-DD7F-4A2F-99A3-71FB1CB79BC7}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D87CE7D8-1BF3-4353-A956-2BFBFA0F5C2F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{D9062EC1-27E3-46B6-A76A-2D98BCD7AC09}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DA02389A-82E5-4BD7-A978-F546AB5D869F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DA5A3BE7-2EA1-4DD1-9225-7631257D8232}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DAB6F8A6-C31E-474F-9BAE-7A5EA73B02CF}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DB91E6F1-D674-4C29-92FC-36C54D64D1A2}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DC25708B-4742-4E9C-8C84-EB87A2337897}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DCA74457-88A7-4452-A193-038A613CF6E4}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{DD96C9B8-1CA6-4BA1-ACC0-7E33631BA9D3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E07F1766-1354-4574-B66D-33F49CB01F71}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E0C6F95E-98A4-4909-A53B-1D9ABF569FED}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E2E55586-23B5-46F0-97AC-2A40DC5211CC}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E32267B9-8A5A-4415-8859-E83965D940A1}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E3A088A2-52B3-4B45-BC43-30D30B0DF7EC}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E3E2F16B-CC68-472A-A785-33100F24BF42}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E47F7AC1-FBB5-4FC1-8D4F-C30C2593448F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E82A2B4A-7469-4E23-89A6-D82D577BD232}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E8BF4EC1-83C4-4934-9168-833A1FE9884C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E90AFE39-30F6-4F5E-B694-CC2813D158A3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E937D622-C969-42DC-85BD-B87A81737624}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E9418E1B-4AC3-4740-801C-FA0E3F25A45E}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{E9561C0F-EDD6-4772-959A-03931E3066C3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EB503035-51DB-428B-8378-D3F8B2C7E389}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EBA4FC68-3E43-48E0-8966-2896CB29CEC0}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EC7BFF69-6348-4AD4-A057-CB76C198219C}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{ED5DEE0C-62C7-4ABC-A8FC-FB91683F5472}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EE806F14-1D31-4ECF-B605-D4F67EDD5995}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{EFC0BEED-30A6-44F1-9742-179C0B583C19}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F045DDDB-E096-4424-819F-D1F0A37B9ED5}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F18F54F1-DE4D-4274-AEFE-49CFCE58A3DE}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F27DE02D-D90F-4D6F-9C0E-CC5DCE6C1CA6}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F46C0F15-41DF-4ACC-8034-A207E067BDB9}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F5A137CA-93E7-463C-B567-265E42447FB3}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F83ECA74-2920-45E8-A147-0315CA7C1663}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F9783BA1-F515-4401-93A2-3A1F7261ADED}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{F9823311-FF5D-496B-807F-941CB7669AF5}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FA291353-0F8B-48E0-8C2C-43FACE088744}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FAD3C3A8-0445-4FA2-BD2D-E00C9D48EBF2}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FE338805-31C8-4541-B3F8-B76362AFB509}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FE993800-AC4C-46DC-B39E-E698E549307F}

Successfully deleted: [Empty Folder] C:\Users\Mirjam Zanetti\appdata\local\{FFB6E2CD-C493-469D-B29E-013B03779E83}
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 27.07.2014 at 15:30:59.73

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014

Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 27-07-2014 15:34:06

Running from C:\Users\Mirjam Zanetti\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File

BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox

FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff
 

Chrome: 

=======

CHR HomePage: 

CHR DefaultSearchKeyword: ask search

CHR DefaultSearchProvider: Ask Search

CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms}

CHR DefaultNewTabURL: 

CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28]

CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]

CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]

CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-27 15:34 - 2014-07-27 15:34 - 00018910 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt

2014-07-27 15:31 - 2014-07-27 15:30 - 00027492 _____ () C:\Users\Mirjam Zanetti\Desktop\JRT.txt

2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe

2014-07-27 15:12 - 2014-07-27 15:12 - 00006036 _____ () C:\Users\Mirjam Zanetti\Desktop\AdwCleaner[S2].txt

2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe

2014-07-27 14:50 - 2014-07-27 14:50 - 00001160 _____ () C:\Users\Mirjam Zanetti\Desktop\mbam.txt

2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk

2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe

2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe

2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS

2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:52 - 2014-07-27 15:09 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-24 11:52 - 2014-07-27 14:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 09:45 - 2014-07-27 15:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox

2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt

2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-27 15:34 - 00000000 ____D () C:\FRST

2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-27 15:34 - 2014-07-27 15:34 - 00018910 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt

2014-07-27 15:34 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST

2014-07-27 15:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-27 15:30 - 2014-07-27 15:31 - 00027492 _____ () C:\Users\Mirjam Zanetti\Desktop\JRT.txt

2014-07-27 15:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe

2014-07-27 15:18 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-27 15:18 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-27 15:12 - 2014-07-27 15:12 - 00006036 _____ () C:\Users\Mirjam Zanetti\Desktop\AdwCleaner[S2].txt

2014-07-27 15:12 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-27 15:12 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi

2014-07-27 15:09 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-27 15:09 - 2010-11-21 05:47 - 01757666 _____ () C:\Windows\PFRO.log

2014-07-27 15:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-27 15:09 - 2009-07-14 06:51 - 00102932 _____ () C:\Windows\setupact.log

2014-07-27 15:04 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner

2014-07-27 15:04 - 2012-06-29 12:21 - 01261315 _____ () C:\Windows\WindowsUpdate.log

2014-07-27 15:03 - 2013-03-30 16:36 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather

2014-07-27 14:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe

2014-07-27 14:50 - 2014-07-27 14:50 - 00001160 _____ () C:\Users\Mirjam Zanetti\Desktop\mbam.txt

2014-07-27 14:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk

2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe

2014-07-27 13:54 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-07-27 10:35 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi

2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe

2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent

2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype

2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi

2014-07-26 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol

2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim

2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol

2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven

2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol

2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti

2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server

2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS

2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0

2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP

2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012

2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat

2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat

2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox

2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt

2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert

2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport

2014-07-10 14:38 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps

2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET

2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk

2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp

2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
 

Some content of TEMP:

====================

C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe

C:\Users\Mirjam Zanetti\AppData\Local\temp\Quarantine.exe

C:\Users\Sven\AppData\Local\temp\avgnt.exe

C:\Users\Sven\AppData\Local\temp\Quarantine.exe

C:\Users\Tim\AppData\Local\temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-03-25 09:03
 

==================== End Of Log ============================

--- --- ---

schrauber

27.07.2014 20:12

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Terrenay

28.07.2014 12:50

Moin,
ich hab statt ESET wieder nen Vollscan mit Avira gemacht, hoffe das ist in Ordnung ;)

Code:



Avira Free Antivirus

Erstellungsdatum der Reportdatei: Montag, 28. Juli 2014  08:38
 
 

Das Programm läuft als uneingeschränkte Vollversion.

Online-Dienste stehen zur Verfügung.
 

Lizenznehmer   : Avira Antivirus Free

Seriennummer   : 0000149996-AVHOE-0000001

Plattform      : Windows 7 Home Premium

Windowsversion : (Service Pack 1)  [6.1.7601]

Boot Modus     : Normal gebootet

Benutzername   : Mirjam Zanetti

Computername   : MirjamZanetti
 

Versionsinformationen:

BUILD.DAT      : 14.0.5.464     91868 Bytes  02.07.2014 13:06:00

AVSCAN.EXE     : 14.0.5.396   1042512 Bytes  02.07.2014 11:06:43

AVSCANRC.DLL   : 14.0.5.364     62544 Bytes  02.07.2014 11:06:43

LUKE.DLL       : 14.0.5.336     57936 Bytes  02.07.2014 11:06:46

AVSCPLR.DLL    : 14.0.5.376     89680 Bytes  02.07.2014 11:06:43

AVREG.DLL      : 14.0.5.356    261200 Bytes  02.07.2014 11:06:43

avlode.dll     : 14.0.5.396    588368 Bytes  02.07.2014 11:06:42

avlode.rdf     : 14.0.4.42      65114 Bytes  19.07.2014 17:26:05

XBV00008.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00009.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00010.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00011.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00012.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00013.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00014.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00015.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00016.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00017.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00018.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00019.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00020.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00021.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00022.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00023.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00024.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00025.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00026.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00027.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00028.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00029.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00030.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00031.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00032.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00033.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00034.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00035.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00036.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00037.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00038.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00039.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00040.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00041.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00195.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00196.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:24

XBV00197.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00198.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00199.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00200.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00201.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00202.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00203.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00204.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00205.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00206.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00207.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00208.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00209.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:25

XBV00210.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00211.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00212.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00213.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00214.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00215.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00216.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00217.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00218.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00219.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00220.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00221.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00222.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00223.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:26

XBV00224.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00225.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00226.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00227.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00228.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00229.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00230.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00231.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00232.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00233.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00234.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00235.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00236.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00237.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00238.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:27

XBV00239.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00240.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00241.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00242.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00243.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00244.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00245.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00246.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00247.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00248.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00249.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00250.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00251.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:28

XBV00252.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:29

XBV00253.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:29

XBV00254.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:29

XBV00255.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 14:51:29

XBV00000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 11:06:47

XBV00001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 11:06:47

XBV00002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 11:06:47

XBV00003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 11:06:47

XBV00004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 11:06:47

XBV00005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 11:06:47

XBV00006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 11:06:47

XBV00007.VDF   : 7.11.152.100  4193792 Bytes  02.06.2014 11:06:47

XBV00042.VDF   : 8.11.153.142   710656 Bytes  06.06.2014 11:06:47

XBV00043.VDF   : 8.11.155.44  1013760 Bytes  16.06.2014 11:06:47

XBV00044.VDF   : 8.11.159.102  1662976 Bytes  08.07.2014 14:50:53

XBV00045.VDF   : 8.11.159.104    13824 Bytes  08.07.2014 14:50:53

XBV00046.VDF   : 8.11.159.108    13312 Bytes  08.07.2014 14:50:53

XBV00047.VDF   : 8.11.159.112    30720 Bytes  09.07.2014 14:50:54

XBV00048.VDF   : 8.11.159.114     6144 Bytes  09.07.2014 14:50:54

XBV00049.VDF   : 8.11.159.116    10240 Bytes  09.07.2014 14:50:54

XBV00050.VDF   : 8.11.159.118     5632 Bytes  09.07.2014 14:50:54

XBV00051.VDF   : 8.11.159.122     7168 Bytes  09.07.2014 14:50:54

XBV00052.VDF   : 8.11.159.126   180736 Bytes  09.07.2014 14:50:58

XBV00053.VDF   : 8.11.159.148   174080 Bytes  09.07.2014 14:51:04

XBV00054.VDF   : 8.11.159.168     2560 Bytes  09.07.2014 14:51:04

XBV00055.VDF   : 8.11.159.188    15360 Bytes  09.07.2014 14:51:05

XBV00056.VDF   : 8.11.159.210    25600 Bytes  09.07.2014 14:51:05

XBV00057.VDF   : 8.11.159.212     7168 Bytes  09.07.2014 14:51:05

XBV00058.VDF   : 8.11.159.218    27648 Bytes  10.07.2014 14:51:06

XBV00059.VDF   : 8.11.159.220     2048 Bytes  10.07.2014 14:51:06

XBV00060.VDF   : 8.11.159.222    29696 Bytes  10.07.2014 14:51:07

XBV00061.VDF   : 8.11.159.224   167936 Bytes  10.07.2014 14:51:13

XBV00062.VDF   : 8.11.159.226    35328 Bytes  10.07.2014 14:51:14

XBV00063.VDF   : 8.11.159.230   186368 Bytes  10.07.2014 20:49:51

XBV00064.VDF   : 8.11.159.250    16896 Bytes  10.07.2014 20:49:51

XBV00065.VDF   : 8.11.159.252     2048 Bytes  10.07.2014 20:49:51

XBV00066.VDF   : 8.11.160.16     6144 Bytes  10.07.2014 20:49:51

XBV00067.VDF   : 8.11.160.40    17408 Bytes  10.07.2014 10:12:52

XBV00068.VDF   : 8.11.160.42     2048 Bytes  11.07.2014 10:12:54

XBV00069.VDF   : 8.11.160.46   179200 Bytes  11.07.2014 10:12:55

XBV00070.VDF   : 8.11.160.48   203264 Bytes  11.07.2014 14:37:58

XBV00071.VDF   : 8.11.160.50     6144 Bytes  11.07.2014 14:37:58

XBV00072.VDF   : 8.11.160.52     2048 Bytes  11.07.2014 14:37:58

XBV00073.VDF   : 8.11.160.54     2048 Bytes  11.07.2014 14:37:58

XBV00074.VDF   : 8.11.160.58    22016 Bytes  11.07.2014 14:37:58

XBV00075.VDF   : 8.11.160.60     2048 Bytes  11.07.2014 14:37:58

XBV00076.VDF   : 8.11.160.62     8192 Bytes  11.07.2014 14:37:58

XBV00077.VDF   : 8.11.160.66   198656 Bytes  12.07.2014 14:38:00

XBV00078.VDF   : 8.11.160.68     7168 Bytes  12.07.2014 14:38:00

XBV00079.VDF   : 8.11.160.70    14848 Bytes  12.07.2014 14:38:00

XBV00080.VDF   : 8.11.160.72     7168 Bytes  12.07.2014 14:38:00

XBV00081.VDF   : 8.11.160.92    40448 Bytes  13.07.2014 14:37:40

XBV00082.VDF   : 8.11.160.112     2048 Bytes  13.07.2014 14:37:40

XBV00083.VDF   : 8.11.160.130   193024 Bytes  13.07.2014 14:37:42

XBV00084.VDF   : 8.11.160.132     2048 Bytes  13.07.2014 14:37:42

XBV00085.VDF   : 8.11.160.152    20480 Bytes  13.07.2014 20:37:37

XBV00086.VDF   : 8.11.160.154     2048 Bytes  13.07.2014 20:37:37

XBV00087.VDF   : 8.11.160.156    20992 Bytes  14.07.2014 08:37:41

XBV00088.VDF   : 8.11.160.158     2560 Bytes  14.07.2014 08:37:41

XBV00089.VDF   : 8.11.160.160    11264 Bytes  14.07.2014 14:37:42

XBV00090.VDF   : 8.11.160.162     2560 Bytes  14.07.2014 14:37:42

XBV00091.VDF   : 8.11.160.166    14336 Bytes  14.07.2014 14:37:42

XBV00092.VDF   : 8.11.160.168     5120 Bytes  14.07.2014 14:37:42

XBV00093.VDF   : 8.11.160.178     7168 Bytes  14.07.2014 20:37:41

XBV00094.VDF   : 8.11.160.180     2048 Bytes  14.07.2014 20:37:41

XBV00095.VDF   : 8.11.160.182     2048 Bytes  14.07.2014 20:37:41

XBV00096.VDF   : 8.11.160.188   256000 Bytes  14.07.2014 02:37:43

XBV00097.VDF   : 8.11.160.190     7680 Bytes  14.07.2014 02:37:43

XBV00098.VDF   : 8.11.160.194    18432 Bytes  15.07.2014 08:37:38

XBV00099.VDF   : 8.11.160.212   184832 Bytes  15.07.2014 19:24:53

XBV00100.VDF   : 8.11.160.230   289792 Bytes  15.07.2014 19:24:55

XBV00101.VDF   : 8.11.160.232     2048 Bytes  15.07.2014 19:24:55

XBV00102.VDF   : 8.11.160.234   176128 Bytes  15.07.2014 19:24:56

XBV00103.VDF   : 8.11.160.254    18432 Bytes  15.07.2014 17:26:06

XBV00104.VDF   : 8.11.161.16     6144 Bytes  16.07.2014 17:26:06

XBV00105.VDF   : 8.11.161.32     2048 Bytes  16.07.2014 17:26:06

XBV00106.VDF   : 8.11.161.34     2048 Bytes  16.07.2014 17:26:06

XBV00107.VDF   : 8.11.161.52    26624 Bytes  16.07.2014 17:26:07

XBV00108.VDF   : 8.11.161.68   184832 Bytes  16.07.2014 17:26:08

XBV00109.VDF   : 8.11.161.84     2048 Bytes  16.07.2014 17:26:08

XBV00110.VDF   : 8.11.162.2      2560 Bytes  16.07.2014 17:26:08

XBV00111.VDF   : 8.11.162.6     16896 Bytes  16.07.2014 17:26:08

XBV00112.VDF   : 8.11.162.8     24064 Bytes  16.07.2014 17:26:08

XBV00113.VDF   : 8.11.162.10     2560 Bytes  16.07.2014 17:26:09

XBV00114.VDF   : 8.11.162.14    41472 Bytes  17.07.2014 17:26:09

XBV00115.VDF   : 8.11.162.16     2048 Bytes  17.07.2014 17:26:09

XBV00116.VDF   : 8.11.162.18   215040 Bytes  17.07.2014 17:26:10

XBV00117.VDF   : 8.11.162.22   184320 Bytes  17.07.2014 17:26:12

XBV00118.VDF   : 8.11.162.40   258048 Bytes  17.07.2014 17:26:14

XBV00119.VDF   : 8.11.162.42     3584 Bytes  17.07.2014 17:26:14

XBV00120.VDF   : 8.11.162.58     3072 Bytes  17.07.2014 17:26:14

XBV00121.VDF   : 8.11.162.78     2048 Bytes  17.07.2014 17:26:14

XBV00122.VDF   : 8.11.162.94     2048 Bytes  17.07.2014 17:26:14

XBV00123.VDF   : 8.11.162.110    35840 Bytes  17.07.2014 17:26:14

XBV00124.VDF   : 8.11.162.112     2048 Bytes  18.07.2014 17:26:14

XBV00125.VDF   : 8.11.162.130    23040 Bytes  18.07.2014 17:26:14

XBV00126.VDF   : 8.11.162.134   184320 Bytes  18.07.2014 17:26:16

XBV00127.VDF   : 8.11.162.136     2048 Bytes  18.07.2014 17:26:16

XBV00128.VDF   : 8.11.162.152   231424 Bytes  18.07.2014 17:26:22

XBV00129.VDF   : 8.11.162.154     2048 Bytes  18.07.2014 17:26:22

XBV00130.VDF   : 8.11.162.170   108032 Bytes  18.07.2014 17:26:25

XBV00131.VDF   : 8.11.162.172     9728 Bytes  18.07.2014 17:26:25

XBV00132.VDF   : 8.11.162.174     2048 Bytes  18.07.2014 17:26:25

XBV00133.VDF   : 8.11.162.188    20992 Bytes  18.07.2014 17:26:25

XBV00134.VDF   : 8.11.162.192     2048 Bytes  18.07.2014 17:26:25

XBV00135.VDF   : 8.11.162.194     2048 Bytes  18.07.2014 17:26:26

XBV00136.VDF   : 8.11.162.200    19968 Bytes  18.07.2014 17:26:26

XBV00137.VDF   : 8.11.162.204     2048 Bytes  18.07.2014 17:26:26

XBV00138.VDF   : 8.11.162.212     2048 Bytes  18.07.2014 17:26:26

XBV00139.VDF   : 8.11.162.228   227840 Bytes  19.07.2014 17:26:27

XBV00140.VDF   : 8.11.162.244     2048 Bytes  19.07.2014 17:26:27

XBV00141.VDF   : 8.11.163.2     31232 Bytes  19.07.2014 17:26:28

XBV00142.VDF   : 8.11.163.16    62464 Bytes  20.07.2014 16:13:15

XBV00143.VDF   : 8.11.163.20   202752 Bytes  20.07.2014 16:13:17

XBV00144.VDF   : 8.11.163.22     2048 Bytes  20.07.2014 16:13:17

XBV00145.VDF   : 8.11.163.26    50176 Bytes  21.07.2014 10:13:04

XBV00146.VDF   : 8.11.163.28    23040 Bytes  21.07.2014 10:13:05

XBV00147.VDF   : 8.11.163.42     6144 Bytes  21.07.2014 10:13:05

XBV00148.VDF   : 8.11.163.44     2560 Bytes  21.07.2014 10:13:05

XBV00149.VDF   : 8.11.163.56     5120 Bytes  21.07.2014 10:13:05

XBV00150.VDF   : 8.11.163.68     8192 Bytes  21.07.2014 16:13:27

XBV00151.VDF   : 8.11.163.74   213504 Bytes  21.07.2014 16:13:28

XBV00152.VDF   : 8.11.163.78    22528 Bytes  22.07.2014 04:13:04

XBV00153.VDF   : 8.11.163.82     2560 Bytes  22.07.2014 10:13:30

XBV00154.VDF   : 8.11.163.84   181248 Bytes  22.07.2014 10:13:31

XBV00155.VDF   : 8.11.163.86     9728 Bytes  22.07.2014 10:13:31

XBV00156.VDF   : 8.11.163.92     2560 Bytes  22.07.2014 16:13:16

XBV00157.VDF   : 8.11.163.98   230400 Bytes  22.07.2014 22:13:15

XBV00158.VDF   : 8.11.163.100     2048 Bytes  22.07.2014 22:13:15

XBV00159.VDF   : 8.11.163.102     2048 Bytes  22.07.2014 22:13:15

XBV00160.VDF   : 8.11.163.108    22528 Bytes  22.07.2014 22:13:15

XBV00161.VDF   : 8.11.163.112    17920 Bytes  22.07.2014 04:13:11

XBV00162.VDF   : 8.11.163.116     2048 Bytes  23.07.2014 04:13:11

XBV00163.VDF   : 8.11.163.130   194048 Bytes  23.07.2014 10:13:40

XBV00164.VDF   : 8.11.163.142    20992 Bytes  23.07.2014 10:13:40

XBV00165.VDF   : 8.11.163.154    11776 Bytes  23.07.2014 16:13:16

XBV00166.VDF   : 8.11.163.158    17920 Bytes  23.07.2014 16:13:16

XBV00167.VDF   : 8.11.163.164     2048 Bytes  23.07.2014 16:13:17

XBV00168.VDF   : 8.11.163.170    14848 Bytes  23.07.2014 07:42:57

XBV00169.VDF   : 8.11.163.174   193024 Bytes  23.07.2014 07:43:00

XBV00170.VDF   : 8.11.163.176     3072 Bytes  23.07.2014 07:43:01

XBV00171.VDF   : 8.11.163.178     3072 Bytes  23.07.2014 07:43:01

XBV00172.VDF   : 8.11.163.184   199168 Bytes  24.07.2014 07:43:09

XBV00173.VDF   : 8.11.163.186   421376 Bytes  24.07.2014 13:42:49

XBV00174.VDF   : 8.11.163.198     2048 Bytes  24.07.2014 13:42:49

XBV00175.VDF   : 8.11.163.200     2048 Bytes  24.07.2014 13:42:49

XBV00176.VDF   : 8.11.163.212   212992 Bytes  24.07.2014 19:42:59

XBV00177.VDF   : 8.11.163.222    34816 Bytes  24.07.2014 19:42:59

XBV00178.VDF   : 8.11.163.226     2048 Bytes  24.07.2014 19:42:59

XBV00179.VDF   : 8.11.163.230    21504 Bytes  24.07.2014 08:55:39

XBV00180.VDF   : 8.11.163.234    18944 Bytes  25.07.2014 08:55:39

XBV00181.VDF   : 8.11.163.236     6656 Bytes  25.07.2014 08:55:39

XBV00182.VDF   : 8.11.163.238     2048 Bytes  25.07.2014 08:55:39

XBV00183.VDF   : 8.11.163.240   198144 Bytes  25.07.2014 08:55:39

XBV00184.VDF   : 8.11.163.244    38400 Bytes  25.07.2014 08:55:39

XBV00185.VDF   : 8.11.163.246     2048 Bytes  25.07.2014 08:55:39

XBV00186.VDF   : 8.11.163.248     6144 Bytes  25.07.2014 08:55:39

XBV00187.VDF   : 8.11.163.252    11776 Bytes  25.07.2014 08:55:39

XBV00188.VDF   : 8.11.163.254     2048 Bytes  25.07.2014 08:55:39

XBV00189.VDF   : 8.11.164.2      2048 Bytes  26.07.2014 08:55:39

XBV00190.VDF   : 8.11.164.6      5120 Bytes  26.07.2014 14:55:17

XBV00191.VDF   : 8.11.164.8      2048 Bytes  26.07.2014 14:55:17

XBV00192.VDF   : 8.11.164.20    32768 Bytes  26.07.2014 08:39:11

XBV00193.VDF   : 8.11.164.30     2048 Bytes  26.07.2014 08:39:11

XBV00194.VDF   : 8.11.164.42    37376 Bytes  27.07.2014 14:38:27

LOCAL001.VDF   : 8.11.164.42 108966400 Bytes  27.07.2014 14:38:45

Engineversion  : 8.3.22.12 

AEVDF.DLL      : 8.3.0.4       118976 Bytes  02.07.2014 11:06:41

AESCRIPT.DLL   : 8.2.0.12      426184 Bytes  21.07.2014 16:13:27

AESCN.DLL      : 8.3.2.2       139456 Bytes  21.07.2014 16:13:25

AESBX.DLL      : 8.2.20.24    1409224 Bytes  02.07.2014 11:06:41

AERDL.DLL      : 8.2.0.138     704888 Bytes  02.07.2014 11:06:41

AEPACK.DLL     : 8.4.0.42      786632 Bytes  10.07.2014 14:50:04

AEOFFICE.DLL   : 8.3.0.14      213192 Bytes  21.07.2014 16:13:25

AEHEUR.DLL     : 8.1.4.1166   7233736 Bytes  21.07.2014 16:13:24

AEHELP.DLL     : 8.3.1.0       278728 Bytes  02.07.2014 11:06:41

AEGEN.DLL      : 8.1.7.28      450752 Bytes  02.07.2014 11:06:41

AEEXP.DLL      : 8.4.2.6       237760 Bytes  02.07.2014 11:06:41

AEEMU.DLL      : 8.1.3.2       393587 Bytes  02.07.2014 11:06:41

AEDROID.DLL    : 8.4.2.24      442568 Bytes  02.07.2014 11:06:41

AECORE.DLL     : 8.3.2.2       241864 Bytes  21.07.2014 16:13:03

AEBB.DLL       : 8.1.1.4        53619 Bytes  02.07.2014 11:06:41

AVWINLL.DLL    : 14.0.5.320     24144 Bytes  02.07.2014 11:06:44

AVPREF.DLL     : 14.0.5.320     50256 Bytes  02.07.2014 11:06:43

AVREP.DLL      : 14.0.5.320    219216 Bytes  02.07.2014 11:06:43

AVARKT.DLL     : 14.0.5.368    226384 Bytes  02.07.2014 11:06:42

AVEVTLOG.DLL   : 14.0.5.320    182352 Bytes  02.07.2014 11:06:42

SQLITE3.DLL    : 14.0.5.320    452176 Bytes  02.07.2014 11:06:47

AVSMTP.DLL     : 14.0.5.320     76368 Bytes  02.07.2014 11:06:44

NETNT.DLL      : 14.0.5.320     13392 Bytes  02.07.2014 11:06:46

RCIMAGE.DLL    : 14.0.5.320   4998224 Bytes  02.07.2014 11:06:46

RCTEXT.DLL     : 14.0.5.322     73808 Bytes  02.07.2014 11:06:46
 

Konfiguration für den aktuellen Suchlauf:

Job Name..............................: Vollständige Systemprüfung

Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp

Protokollierung.......................: standard

Primäre Aktion........................: Interaktiv

Sekundäre Aktion......................: Ignorieren

Durchsuche Masterbootsektoren.........: ein

Durchsuche Bootsektoren...............: ein

Bootsektoren..........................: C:, D:, 

Durchsuche aktive Programme...........: ein

Laufende Programme erweitert..........: ein

Durchsuche Registrierung..............: ein

Suche nach Rootkits...................: ein

Integritätsprüfung von Systemdateien..: aus

Prüfe alle Dateien....................: Alle Dateien

Durchsuche Archive....................: ein

Rekursionstiefe einschränken..........: 20

Archiv Smart Extensions...............: ein

Makrovirenheuristik...................: ein

Dateiheuristik........................: erweitert
 

Beginn des Suchlaufs: Montag, 28. Juli 2014  08:38
 

Der Suchlauf über die Bootsektoren wird begonnen:

Bootsektor 'HDD0(C:, D:)'

    [INFO]      Es wurde kein Virus gefunden!
 

Der Suchlauf nach versteckten Objekten wird begonnen.
 

Der Suchlauf über gestartete Prozesse wird begonnen:

Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht

Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '77' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '87' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '78' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '163' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '89' Modul(e) wurden durchsucht

Durchsuche Prozess 'atieclxx.exe' - '43' Modul(e) wurden durchsucht

Durchsuche Prozess 'spoolsv.exe' - '97' Modul(e) wurden durchsucht

Durchsuche Prozess 'sched.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '61' Modul(e) wurden durchsucht

Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'avguard.exe' - '107' Modul(e) wurden durchsucht

Durchsuche Prozess 'HD-LogRotatorService.exe' - '34' Modul(e) wurden durchsucht

Durchsuche Prozess 'dtsrvc.exe' - '25' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '50' Modul(e) wurden durchsucht

Durchsuche Prozess 'GREGsvc.exe' - '23' Modul(e) wurden durchsucht

Durchsuche Prozess 'UpdaterService.exe' - '29' Modul(e) wurden durchsucht

Durchsuche Prozess 'LMIGuardianSvc.exe' - '44' Modul(e) wurden durchsucht

Durchsuche Prozess 'mbamscheduler.exe' - '40' Modul(e) wurden durchsucht

Durchsuche Prozess 'mbamservice.exe' - '52' Modul(e) wurden durchsucht

Durchsuche Prozess 'NOBuAgent.exe' - '30' Modul(e) wurden durchsucht

Durchsuche Prozess 'pdisrvc.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'sqlwriter.exe' - '33' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '68' Modul(e) wurden durchsucht

Durchsuche Prozess 'WLIDSVC.EXE' - '75' Modul(e) wurden durchsucht

Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '131' Modul(e) wurden durchsucht

Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht

Durchsuche Prozess 'EscSvc64.exe' - '27' Modul(e) wurden durchsucht

Durchsuche Prozess 'hamachi-2.exe' - '73' Modul(e) wurden durchsucht

Durchsuche Prozess 'taskhost.exe' - '39' Modul(e) wurden durchsucht

Durchsuche Prozess 'mbam.exe' - '96' Modul(e) wurden durchsucht

Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht

Durchsuche Prozess 'Explorer.EXE' - '160' Modul(e) wurden durchsucht

Durchsuche Prozess 'ScanToPCActivationApp.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht

Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'GoogleUpdate.exe' - '58' Modul(e) wurden durchsucht

Durchsuche Prozess 'Avira.OE.Systray.exe' - '136' Modul(e) wurden durchsucht

Durchsuche Prozess 'avgnt.exe' - '122' Modul(e) wurden durchsucht

Durchsuche Prozess 'jusched.exe' - '36' Modul(e) wurden durchsucht

Durchsuche Prozess 'hamachi-2-ui.exe' - '58' Modul(e) wurden durchsucht

Durchsuche Prozess 'avcenter.exe' - '147' Modul(e) wurden durchsucht

Durchsuche Prozess 'NASvc.exe' - '46' Modul(e) wurden durchsucht

Durchsuche Prozess 'avscan.exe' - '117' Modul(e) wurden durchsucht

Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'wuauclt.exe' - '37' Modul(e) wurden durchsucht

Durchsuche Prozess 'SeaPort.exe' - '55' Modul(e) wurden durchsucht

Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht

Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht

Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'csrss.exe' - '16' Modul(e) wurden durchsucht

Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht

Durchsuche Prozess 'lsass.exe' - '64' Modul(e) wurden durchsucht

Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht

Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht
 

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:

Die Registry wurde durchsucht ( '11298' Dateien ).
 
 

Der Suchlauf über die ausgewählten Dateien wird begonnen:
 

Beginne mit der Suche in 'C:\' <Acer>

Beginne mit der Suche in 'D:\' <DATA>
 
 

Ende des Suchlaufs: Montag, 28. Juli 2014  13:16

Benötigte Zeit:  4:38:30 Stunde(n)
 

Der Suchlauf wurde vollständig durchgeführt.
 

 106320 Verzeichnisse wurden überprüft

 2498227 Dateien wurden geprüft

      0 Viren bzw. unerwünschte Programme wurden gefunden

      0 Dateien wurden als verdächtig eingestuft

      0 Dateien wurden gelöscht

      0 Viren bzw. unerwünschte Programme wurden repariert

      0 Dateien wurden in die Quarantäne verschoben

      0 Dateien wurden umbenannt

      0 Dateien konnten nicht durchsucht werden

 2498227 Dateien ohne Befall

  26157 Archive wurden durchsucht

      0 Warnungen

      0 Hinweise

 1732524 Objekte wurden beim Rootkitscan durchsucht

      0 Versteckte Objekte wurden gefunden

Code:

 Results of screen317's Security Check version 0.99.85  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop   

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 WinTuneUp 1.0    

 Visual Studio Extensions for Windows Library for JavaScript 

 Java 7 Update 65  

 JavaScript Tooling    

 Java version out of Date! 

 Adobe Flash Player 14.0.0.145  

 Adobe Reader XI  

 Google Chrome 35.0.1916.114  

 Google Chrome 36.0.1985.125  
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbam.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes Anti-Malware mbamscheduler.exe   

 Symantec Norton Online Backup NOBuAgent.exe  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Wieso Java nicht up to date ist weiss ich nicht, habs grad letztens geupdatet und es sollte sich ja eig auch automatisch updaten, oder nicht?

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014

Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 28-07-2014 13:41:32

Running from C:\Users\Mirjam Zanetti\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File

BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox

FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff
 

Chrome: 

=======

CHR HomePage: 

CHR DefaultSearchKeyword: ask search

CHR DefaultSearchProvider: Ask Search

CHR DefaultSearchURL: hxxp://www.search.ask.com/web?p2=%5EBBK%5EOSJ000%5EYY%5ECH&gct=&o=APN11412&tpid=ORJ-V7C&itbv=12.7.0.15&doi=2014-02-07&apn_uid=695C426C-942E-46F5-A9B6-D0BEE434F5D8&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ECH&apn_dbr=cr_32.0.1700.76&psv=&trgb=CR&q={searchTerms}

CHR DefaultNewTabURL: 

CHR Extension: (Inbox Toolbar) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apgjagobplilmcdfelodhgefiidomnfl [2014-05-28]

CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]

CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]

CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2013-08-26]

CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2013-08-26]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-28] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-28 13:41 - 2014-07-28 13:41 - 00019484 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt

2014-07-28 13:41 - 2014-07-28 13:41 - 00001141 _____ () C:\Users\Mirjam Zanetti\Desktop\security.txt

2014-07-28 13:40 - 2014-07-28 13:41 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++

2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe

2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk

2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon

2014-07-27 18:46 - 2014-07-27 18:49 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar

2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe

2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe

2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk

2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe

2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe

2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS

2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:52 - 2014-07-28 12:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-24 11:52 - 2014-07-28 11:57 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 09:45 - 2014-07-28 13:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox

2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt

2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-28 13:41 - 00000000 ____D () C:\FRST

2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-28 13:42 - 2014-07-28 13:41 - 00019484 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt

2014-07-28 13:41 - 2014-07-28 13:41 - 00001141 _____ () C:\Users\Mirjam Zanetti\Desktop\security.txt

2014-07-28 13:41 - 2014-07-28 13:40 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++

2014-07-28 13:41 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST

2014-07-28 13:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe

2014-07-28 13:23 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

2014-07-28 13:09 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-07-28 12:57 - 2014-07-24 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-28 11:57 - 2014-07-24 11:52 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-28 09:47 - 2012-06-29 12:21 - 01291444 _____ () C:\Windows\WindowsUpdate.log

2014-07-28 09:20 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-28 08:42 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-28 08:42 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-28 08:36 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi

2014-07-28 08:34 - 2010-11-21 05:47 - 01759436 _____ () C:\Windows\PFRO.log

2014-07-28 08:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-28 08:34 - 2009-07-14 06:51 - 00102988 _____ () C:\Windows\setupact.log

2014-07-27 19:38 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-07-27 19:05 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps

2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk

2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon

2014-07-27 18:49 - 2014-07-27 18:46 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar

2014-07-27 17:23 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

2014-07-27 16:08 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi

2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe

2014-07-27 15:04 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner

2014-07-27 15:03 - 2013-03-30 16:36 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather

2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe

2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk

2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe

2014-07-27 13:54 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe

2014-07-26 20:48 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent

2014-07-26 20:34 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype

2014-07-26 18:18 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi

2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol

2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim

2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol

2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven

2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol

2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti

2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server

2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS

2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:52 - 2014-07-24 11:52 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-24 11:52 - 2014-07-24 11:52 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0

2014-07-24 11:51 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP

2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012

2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat

2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat

2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox

2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt

2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert

2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport

2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET

2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk

2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp

2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
 

Some content of TEMP:

====================

C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe

C:\Users\Mirjam Zanetti\AppData\Local\temp\Quarantine.exe

C:\Users\Sven\AppData\Local\temp\avgnt.exe

C:\Users\Sven\AppData\Local\temp\Quarantine.exe

C:\Users\Tim\AppData\Local\temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-03-25 09:03
 

==================== End Of Log ============================

--- --- ---

Die Erweiterung ist weiterhin in Chrome installiert, allerdings ist sie deaktiviert und aktiviert sich nicht mehr von allein.

schrauber

29.07.2014 07:19

Java gibt es schon in Version 8.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 

CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]

CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Terrenay

29.07.2014 09:23

Guten Morgen

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-07-2014

Ran by Mirjam Zanetti at 2014-07-29 10:20:28 Run:2

Running from C:\Users\Mirjam Zanetti\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 

CHR Extension: (No Name) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm [2014-06-23]

CHR Extension: (MySearch) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf [2014-06-23]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

         

*****************
 

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} => Value not found.

C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm => Moved successfully.

C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf => Moved successfully.

"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

esgiguard => Service deleted successfully.
 

==== End of Fixlog ====

Erweiterung immer noch da :(

schrauber

29.07.2014 11:45

Terrenay

29.07.2014 17:47

Ja, war mit einem Google Konto verbunden. War das falsch? :o
Auf jeden Fall ist die Erweiterung jetzt weg, nachdem ich Revo benutzt habe :D

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014

Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 29-07-2014 18:44:18

Running from C:\Users\Mirjam Zanetti\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE

(AMD) C:\Windows\System32\atieclxx.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File

BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox

FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff

FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff
 

Chrome: 

=======

CHR StartupUrls: "https://www.google.com/"

CHR Extension: (Google Docs) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-29]

CHR Extension: (Google Drive) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-29]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-29]

CHR Extension: (YouTube) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-29]

CHR Extension: (Google Search) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-29]

CHR Extension: (Avira Browser Safety) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-29]

CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-29]

CHR Extension: (Gmail) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-29]

CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2014-07-29]

CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2014-07-29]

CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2014-07-29]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)

R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)

R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-29] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-29 18:44 - 2014-07-29 18:44 - 00020003 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt

2014-07-29 18:40 - 2014-07-29 18:40 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-29 18:40 - 2014-07-29 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-29 18:35 - 2014-07-29 18:40 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-29 18:35 - 2014-07-29 18:40 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-29 18:35 - 2014-07-29 18:35 - 00003910 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-29 18:35 - 2014-07-29 18:35 - 00003658 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-29 18:34 - 2014-07-29 18:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Deployment

2014-07-29 18:34 - 2014-07-29 18:34 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Apps\2.0

2014-07-29 14:22 - 2014-07-29 14:22 - 00000120 _____ () C:\Windows\wininit.ini

2014-07-28 13:40 - 2014-07-28 13:41 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++

2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe

2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk

2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon

2014-07-27 18:46 - 2014-07-27 18:49 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar

2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe

2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe

2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk

2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe

2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe

2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS

2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 09:45 - 2014-07-29 18:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox

2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt

2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 19:27 - 2014-07-29 18:44 - 00000000 ____D () C:\FRST

2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-07-29 18:45 - 2014-07-29 18:44 - 00020003 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt

2014-07-29 18:44 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST

2014-07-29 18:40 - 2014-07-29 18:40 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-29 18:40 - 2014-07-29 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-29 18:40 - 2014-07-29 18:35 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-29 18:40 - 2014-07-29 18:35 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-29 18:40 - 2012-12-01 11:54 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Google

2014-07-29 18:40 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-07-29 18:35 - 2014-07-29 18:35 - 00003910 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-07-29 18:35 - 2014-07-29 18:35 - 00003658 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-07-29 18:35 - 2014-07-29 18:34 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Deployment

2014-07-29 18:34 - 2014-07-29 18:34 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Apps\2.0

2014-07-29 18:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-07-29 18:23 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi

2014-07-29 18:21 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-29 18:21 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job

2014-07-29 18:20 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent

2014-07-29 18:20 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-07-29 18:16 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype

2014-07-29 14:30 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job

2014-07-29 14:24 - 2013-01-14 21:16 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Mozilla

2014-07-29 14:22 - 2014-07-29 14:22 - 00000120 _____ () C:\Windows\wininit.ini

2014-07-29 14:22 - 2014-01-09 13:11 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup

2014-07-29 14:22 - 2012-12-02 21:30 - 00000000 ____D () C:\Users\Tim\AppData\Local\Google

2014-07-29 14:16 - 2014-01-26 18:18 - 00004078 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA

2014-07-29 14:16 - 2014-01-26 18:18 - 00003682 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core

2014-07-29 14:12 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi

2014-07-29 14:03 - 2012-06-29 12:21 - 01350079 _____ () C:\Windows\WindowsUpdate.log

2014-07-29 10:28 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi

2014-07-29 10:23 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-29 10:23 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-29 10:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-29 10:14 - 2009-07-14 06:51 - 00103044 _____ () C:\Windows\setupact.log

2014-07-28 20:02 - 2013-09-19 11:55 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\.minecraft

2014-07-28 13:41 - 2014-07-28 13:40 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++

2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe

2014-07-28 08:34 - 2010-11-21 05:47 - 01759436 _____ () C:\Windows\PFRO.log

2014-07-27 19:38 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-07-27 19:05 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps

2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk

2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon

2014-07-27 18:49 - 2014-07-27 18:46 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar

2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe

2014-07-27 15:04 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner

2014-07-27 15:03 - 2013-03-30 16:36 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather

2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe

2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk

2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe

2014-07-27 13:54 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe

2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol

2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim

2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol

2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven

2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol

2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti

2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server

2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS

2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt

2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion

2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe

2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk

2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment

2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0

2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira

2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP

2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter

2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe

2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe

2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe

2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012

2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe

2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat

2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat

2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat

2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat

2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira

2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt

2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT

2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe

2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt

2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt

2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe

2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt

2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira

2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe

2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt

2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox

2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt

2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert

2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport

2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe

2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk

2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET

2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe

2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk

2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz

2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp

2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment

2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame

2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame

2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe

2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe

2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc

2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk

2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe

2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download

2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
 

Some content of TEMP:

====================

C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe

C:\Users\Mirjam Zanetti\AppData\Local\temp\Quarantine.exe

C:\Users\Sven\AppData\Local\temp\avgnt.exe

C:\Users\Sven\AppData\Local\temp\Quarantine.exe

C:\Users\Tim\AppData\Local\temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-03-25 09:03
 

==================== End Of Log ============================

--- --- ---

schrauber

30.07.2014 12:34

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Terrenay

31.07.2014 15:13

Hui,
vielen, vielen Dank für die Hilfe! Läuft alles wieder viel schneller und ich kann endlich wieder beruhigt ins Internet :P
Die Programme, die du vorschlägst, lade ich gerade herunter.

Respect übrigens an dich, dass du es schaffst, so vielen Leuten gleichzeitig zu helfen! Die (Computer-)Menschheit wäre aufgeschmissen ohne euch ;)

Auf Wiedersehen! (Naja, hoffentlich nicht, aber man weiss ja nie ^^)

schrauber

01.08.2014 11:44

Gern Geschehen :)

Alle Zeitangaben in WEZ +1. Es ist jetzt 02:52 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131