| Trickblade | 29.06.2015 14:50 |
Hi Schrauber,
habe alles erledigt und hier kommen die Logfiles:
Mbam: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 29.06.2015
Suchlauf-Zeit: 14:23:20
Logdatei: mbam suchlauf.txt
Administrator: Ja
Version: 2.01.6.1022
Malware Datenbank: v2015.06.29.01
Rootkit Datenbank: v2015.06.26.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Besitzer
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 388161
Verstrichene Zeit: 35 Min, 21 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(Keine schädliche Elemente gefunden)
Module: 0
(Keine schädliche Elemente gefunden)
Registrierungsschlüssel: 17
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\IB Updater, In Quarantäne, [0b6a5070632763d3432e7eb840c4ff01],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, In Quarantäne, [c4b1962a51397abc8ce467cf788cc23e],
PUP.Optional.Babylon.A, HKLM\SOFTWARE\WOW6432NODE\babylontoolbar, In Quarantäne, [a7ce19a74347e155211c75e98e77d12f],
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, In Quarantäne, [185d4d732565191dcb4dcf5f21e3c33d],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\IB Updater, In Quarantäne, [1263b0103b4f95a1f180c571e91bd32d],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SweetIM, In Quarantäne, [e2932a9696f4290d94a9709c33d1c43c],
PUP.Optional.Claro.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dcillohgikpecbmgioknapdpcjofaafl, In Quarantäne, [c1b49a261c6ec96d7e796b8bc43fad53],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, In Quarantäne, [c0b560600981fd39046ce353e61eb848],
PUP.Optional.SweetIM.A, HKU\S-1-5-18\SOFTWARE\SweetIM, In Quarantäne, [64119c241e6c1b1b4cf018f4c53ff50b],
PUP.Optional.InstallBrain.A, HKU\S-1-5-18\SOFTWARE\WNLT, In Quarantäne, [4530f3cd7a1067cf1f830e5531d4c838],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [1f566b559befdf57ff977fdd8a7bca36],
PUP.Optional.Delta.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\delta LTD, In Quarantäne, [e194efd1ef9bd264d46aa3bb42c3c739],
PUP.Optional.FileScout.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\FileScout, In Quarantäne, [ff76546c583259ddf0991d78ef16a45c],
PUP.Optional.InstallCore.C, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\InstallCore, In Quarantäne, [da9b4e727812cc6ae2957f16af5647b9],
PUP.Optional.SaveSense.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\SaveSenseLive, In Quarantäne, [680d2d9349412115c5796cffc14429d7],
PUP.Optional.Incredibar.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}, In Quarantäne, [fa7bfdc3bcce3afcace84e3fe22309f7],
PUP.Optional.BProtector.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, In Quarantäne, [c5b038881d6d38fee6f2134c669f1ae6],
Registrierungswerte: 14
PUP.Optional.Claro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}, In Quarantäne, [a9cc3789593170c66248353eed166a96],
PUP.Optional.Claro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{9E131A93-EED7-4BEB-B015-A0ADB30B5646}, Claro LTD Toolbar, In Quarantäne, [a9cc3789593170c66248353eed166a96]
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, In Quarantäne, [7500bf014248191dd1f14c28ab58df21],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, In Quarantäne, [7500bf014248191dd1f14c28ab58df21]
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, In Quarantäne, [7500bf014248191dd1f14c28ab58df21]
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, In Quarantäne, [d5a0ead6127877bff3cff38132d123dd],
PUP.Optional.IBUpdater.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, In Quarantäne, [beb716aa7e0c1a1c4211356023e2be42]
PUP.Optional.IBUpdater.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, In Quarantäne, [0e6701bf0585ba7c4310494c51b4a759]
PUP.Optional.InstallBrain.A, HKU\S-1-5-18\SOFTWARE\WNLT|URL, MYSTART, In Quarantäne, [4530f3cd7a1067cf1f830e5531d4c838]
PUP.Optional.Incredibar.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|FaviconURL, hxxp://mystart.incredibar.com/favicon.ico, In Quarantäne, [fa7bfdc3bcce3afcace84e3fe22309f7]
PUP.Optional.Incredibar.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|FaviconURLFallback, hxxp://mystart.incredibar.com/favicon.ico, In Quarantäne, [96df338d9bef52e40391e9a428dd7e82]
PUP.Optional.Incredibar.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|TopResultURL, hxxp://mystart.incredibar.com/?a=6R8HWzicd2&loc=skw&search={searchTerms}&i=26, In Quarantäne, [e392695790faf4427c18157826dfb14f]
PUP.Optional.Incredibar.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|TopResultURLFallback, hxxp://mystart.incredibar.com/?a=6R8HWzicd2&loc=skw&search={searchTerms}&i=26, In Quarantäne, [a6cf5b6546442d09cfc5018c14f1f808]
PUP.Optional.Incredibar.A, HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|URL, hxxp://mystart.incredibar.com/?a=6R8HWzicd2&loc=skw&search={searchTerms}&i=26, In Quarantäne, [eb8a5a66503a65d1781cf19ce124dd23]
Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)
Ordner: 12
PUP.Optional.Claro.A, C:\Users\Besitzer\AppData\Roaming\Claro, In Quarantäne, [f5809729800aa294639314e24db6a15f],
PUP.Optional.OpenCandy, C:\Users\Besitzer\AppData\Roaming\OpenCandy, In Quarantäne, [65102e92d9b16ccac2f70db6e71cf709],
PUP.Optional.OpenCandy, C:\Users\Besitzer\AppData\Roaming\OpenCandy\919399CDC15E4EAFAC49F28672EAB1F4, In Quarantäne, [65102e92d9b16ccac2f70db6e71cf709],
PUP.Optional.OpenCandy, C:\Users\Besitzer\AppData\Roaming\OpenCandy\DE8EDF71C3FA4A4893764FB95114CCE0, In Quarantäne, [65102e92d9b16ccac2f70db6e71cf709],
PUP.Optional.SaveSense.A, C:\Users\Besitzer\AppData\Local\SaveSenseLive, In Quarantäne, [a9cca0206e1cd75f8e6e82420cf728d8],
PUP.Optional.SaveSense.A, C:\Users\Besitzer\AppData\Local\SaveSenseLive\CrashReports, In Quarantäne, [a9cca0206e1cd75f8e6e82420cf728d8],
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\LocalLow\Incredibar.com, In Quarantäne, [2f46a51b2367d0665618b02907fc827e],
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\LocalLow\Incredibar.com\incredibar, In Quarantäne, [2f46a51b2367d0665618b02907fc827e],
PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService, In Quarantäne, [da9bfcc45f2b42f48df76f6af40f2fd1],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6\bh, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
Dateien: 81
PUP.Optional.OpenCandy.A, C:\Users\Besitzer\AppData\Roaming\OpenCandy\919399CDC15E4EAFAC49F28672EAB1F4\LatestDLMgr.exe, In Quarantäne, [9cd9249cf892350197aad96c7f8205fb],
PUP.Optional.Babylon.A, C:\Users\Besitzer\AppData\Roaming\OpenCandy\DE8EDF71C3FA4A4893764FB95114CCE0\DeltaTB.exe, In Quarantäne, [d1a45f614b3f73c3c60951edea17c13f],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, In Quarantäne, [88ed219f92f8e056739f2df6857b2fd1],
PUP.Optional.DownloadGuide.A, C:\Users\Besitzer\Downloads\SUPERAntiSpyware_CB-DL-Manager.exe, In Quarantäne, [e293ac1464266ccaa5f180e739c908f8],
PUP.Optional.Downloader, C:\Users\Besitzer\Downloads\AunPlayer - CHIP-Installer.exe, In Quarantäne, [fc79fbc5ed9d84b2208a501cfe024ab6],
PUP.Optional.OpenCandy.A, C:\Users\Besitzer\Downloads\media.player.codec.pack.v4.2.9.setup.exe, In Quarantäne, [b2c37a466e1ca98dd59355ef0ef205fb],
PUP.Optional.Claro.A, C:\Users\Besitzer\AppData\Roaming\Claro\claro.crx, In Quarantäne, [f5809729800aa294639314e24db6a15f],
PUP.Optional.BProtector.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\bprotector_extensions.sqlite, In Quarantäne, [581db50bcbbf9d99a6e0e811f50ec23e],
PUP.Optional.BProtector.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\bprotector_prefs.js, In Quarantäne, [5a1bbe02f298ac8adaac9663e91a14ec],
PUP.Optional.BitGuard.A, C:\Windows\System32\Tasks\BitGuard, In Quarantäne, [96df30905b2f8baba36837f2f2126a96],
PUP.Optional.MyStartSearch.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\searchplugins\MyStart Search.xml, In Quarantäne, [462f9d233e4c50e6fb7088b311f36d93],
PUP.Optional.OpenCandy, C:\Users\Besitzer\AppData\Roaming\OpenCandy\919399CDC15E4EAFAC49F28672EAB1F4\3135.ico, In Quarantäne, [65102e92d9b16ccac2f70db6e71cf709],
PUP.Optional.OpenCandy, C:\Users\Besitzer\AppData\Roaming\OpenCandy\919399CDC15E4EAFAC49F28672EAB1F4\TuneUpUtilities2013-2200218-p3v0.exe, In Quarantäne, [65102e92d9b16ccac2f70db6e71cf709],
PUP.Optional.OpenCandy, C:\Users\Besitzer\AppData\Roaming\OpenCandy\919399CDC15E4EAFAC49F28672EAB1F4\TuneUpUtilities2013-2200218_de-DE.exe, In Quarantäne, [65102e92d9b16ccac2f70db6e71cf709],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaApp.dll, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaEng.dll, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6\deltasrv.exe, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6\GUninstaller.exe, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6\uninstall.exe, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll, In Quarantäne, [c8ad962ac9c10a2c78f742b25aa921df],
PUP.Optional.Babylon.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.newTab", true);), Ersetzt,[63124e72ed9dd4622add4b44dc2a52ae]
PUP.Optional.Babylon.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the appli), Ersetzt,[086db40cb1d99f97e621eca307ff02fe]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.incredibar.actvtyRptTime", "1350932522350");), Ersetzt,[72032d93147663d352bad3bce620f907]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (not edit this file.
*
* If you make changes ), Ersetzt,[9fd6754b0e7c0036b5574b440bfbad53]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If ), Ersetzt,[43327d43b6d40a2c22ea7b146a9ca858]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If you make ch), Ersetzt,[b3c22c94ddad8fa76ba11c7348be01ff]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make ), Ersetzt,[f283cdf3ee9ce35333d9b4dbeb1b4eb2]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (eferences
/* Do not edit this file.
*
* If), Ersetzt,[65103888305a2412b9539cf3cb3bcd33]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If you m), Ersetzt,[571effc13f4bda5c27e5bdd239cd5ea2]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you ), Ersetzt,[89ec8739b7d3ed49d834711e8e78758b]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If you make), Ersetzt,[c7ae4e728dfd8ea87597c4cbf016fd03]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make c), Ersetzt,[b2c3665ab3d790a6f7154e4142c4e917]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you make changes to this file w), Ersetzt,[6c094f714347d6609d6ff09f72942bd5]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (s file.
*
* If you make changes to this fil), Ersetzt,[ed885d63fa90ca6c9f6dace34fb78779]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (eferences
/* Do not edit this file.
*
* If you make changes to this fi), Ersetzt,[5e179c24d4b6a096709c3d5275918977]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (is file.
*
* If you make changes to this file while the application is), Ersetzt,[de97724e5634a39328e49ef129dd36ca]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: ( this file.
*
* If you make changes to this file while t), Ersetzt,[87ee9b25107a54e268a4eea165a10af6]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (/* Do not edit this file.
*
* If you make changes), Ersetzt,[363f13ad206a91a58d7f018efc0a3cc4]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you make changes to ), Ersetzt,[caab9f211a70d462ff0dfa95a561c33d]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ot edit this file.
*
* If you make changes to thi), Ersetzt,[9fd6655b5f2b82b4fb1199f66b9ba25e]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you mak), Ersetzt,[98ddf7c9cac0ef47c349eca32adc1fe1]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you), Ersetzt,[87ee635d3d4dbf77a7657f101aec32ce]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If you ), Ersetzt,[b0c5219f05851e18e8243f5007ffe020]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (nces
/* Do not edit this file.
*
* I), Ersetzt,[215408b8c5c51c1a60ac2c63aa5c3fc1]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (r Preferences
/* Do not edit this file.
*
* If y), Ersetzt,[4035bf01b5d52610d3391b74ab5bd52b]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (s
/* Do not edit this file.
*
* If you make ), Ersetzt,[235204bc216972c41fedc9c629dd10f0]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you make ch), Ersetzt,[e590bd03d6b4162077957916c244728e]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you ma), Ersetzt,[462f823eb6d4c6705bb1a6e9986e916f]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
*
* If ), Ersetzt,[76ff754b810955e10507612ed33349b7]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* I), Ersetzt,[74019d2397f345f134d8a2ed82844fb1]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: ( Preferences
/* Do not edit this file.
*
*), Ersetzt,[2352437d5832092dd636f699ff0706fa]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If yo), Ersetzt,[e68fa917167470c657b50c83df27ef11]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* th), Ersetzt,[9cd90bb5fa90fe38f21a3956b45242be]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (this file while the application is running,
* the ch), Ersetzt,[6213c000008aee48e527fb94f51127d9]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (es
/* Do not edit this file.
*
* If you make changes to), Ersetzt,[690c794772185fd77696b3dc29dd03fd]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
*
* If you make changes t), Ersetzt,[264fc4fc8505d85eb05c157ade2841bf]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make c), Ersetzt,[274e922ed5b5a4921af23d5264a28f71]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (es
/* Do not edit this file.
*
* If you make changes to ), Ersetzt,[bfb6b010b4d6171ff11bdbb4897dbf41]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (Do not edit this file.
*
* If you make changes ), Ersetzt,[076eedd34644f83ef517315efa0c04fc]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you m), Ersetzt,[9dd8299722681e1826e6444b80861be5]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (nces
/* Do not edit this file.
*
* If you make changes to this file w), Ersetzt,[5d18417fa3e7b97d0408cec1bc4a10f0]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (his file.
*
* If you make changes to this file while the a), Ersetzt,[43327b452a602b0bda32deb15caae719]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
*
* If you make changes to ), Ersetzt,[d79e655b602ab2847a92a8e79a6c52ae]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (s
/* Do not edit this file.
*
* If you make), Ersetzt,[ec898b35b2d85fd750bc4e41ad5942be]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you ), Ersetzt,[3d38d2ee02883105c646e8a7cb3bf808]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you m), Ersetzt,[0d689b25addda0968a82d3bc37cfcd33]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If), Ersetzt,[3b3a6b55ee9c3303f11b226d20e606fa]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (Preferences
/* Do not edit this file.
*
* If you m), Ersetzt,[cbaaf6ca2c5e0531c844f79842c47888]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make chan), Ersetzt,[e194b40cd0ba7abc8b8190fff90dd22e]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make change), Ersetzt,[0174d9e792f8cf67828a2d62eb1b35cb]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make change), Ersetzt,[3243615f6228a492808c454a6b9b619f]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make), Ersetzt,[c6afbe022862b18525e757388f77cc34]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (nces
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the ch), Ersetzt,[205507b96b1f0a2cd339840b3acc0cf4]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (is file while the application is running,
* the change), Ersetzt,[91e4ffc1b6d44aecd23a375830d68977]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make changes to thi), Ersetzt,[babb4b75008a7cbadb318708f80ef010]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (o not edit this file.
*
* If you make changes to th), Ersetzt,[660f4a763654aa8c3cd0a2edca3c639d]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (s
/* Do not edit this file.
*
* If you make changes to thi), Ersetzt,[d69f5b65c3c767cfc4482d62c343c53b]
PUP.Optional.Incredibar.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: ( not edit this file.
*
* If you make changes to this), Ersetzt,[8ee7ab15dcae74c269a3ade2c541926e]
PUP.Optional.Softonic.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.sweetim.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home.mywebsearch.com\":\"searchfor\",\"search.mywebsearch.com\":\"searchfor\",\"search.mindspark.com\":\"searchfor\",\"search.conduit.com\":\"q\",\"search.zugo.com\":\"p\",\"www2.mystart.com\":\"q\",\"www.mystart.com\":\"q\",\"www.bigseekpro.com\":\"q\",\"bigseekpro.com\":\"q\",\"bigspeedpro.com\":\"q\",\"search.esnips.com\":\"searchQuery\",\"search.foxtab.com\":\"q\",\"search.brothersoft.com\":\"keyword\",\"search.softonic.com\":\"q\",\"www.dogpile.com\":\"q\",\"search.infospace.com\":\"q\",\"search.iobit.com\":\"q\",\"search.iminent.com\":\"\",\"search.facemoods.com\":\"s\",\"www.plusnetwork.com\":\"q\",\"www.alothome.com\":\"q\",\"alothome.com\":\"q\",\"search.alothome.com\":\"q\",\"search.chatvibes.com\":\"q\",\"search.blekko.com\":\"\",\"www.searchnu.com\":\"q\",\"searchnu.com\":\"q\",\"search.icq.com\":\"q\",\"search.etype.com\":\"query\",\"isearch.babylon.com\":\"q\",\"search.utorrent.com\":\"\",\"search.bittorrent.com\":\"\",\"search.bearshare.com\":\"q\",\"search.bearshare.net\":\"q\",\"searchya.com\":\"q\",\"int.search-results.com\":\"q\",\"search.searchcompletion.com\":\"q\",\"www.adoresearch.com\":\"q\",\"www.searchcore.net\":\"q\",\"googosearch.info\":\"terms\",\"bar.searchqu.com\":\"q\",\"search.speedbit.com\":\"q\",\"search.toggle.com\":\"q\",\"click.searchnation.net\":\"query\",\"isearch.whitesmoke.com\":\"q\",\"search.handycafe.com\":\"q\",\"searchassist.babylon.com\":\"q\",\"searchnation.net\":\"query\",\"video.searchcompletion.com\":\"q\",\"www.searchbrowsing.com\":\"q\",\"search.anchorfree.net\":\"q\",\"search.hotspotshield.com\":\"q\",\"dts.search-results.com\":\"q\",\"uk.search-results.com\":\"q\",\"search.chatzum.com\":\"q\",\"search.phpnuke.org\":\"q\",\"www.i-mysearch.com\":\"q\",\"search.smartaddressbar.com\":\"q\",\"www.search-guru.com\":\"q\",\"mysearch.sweetim.com\":\"q\",\"searchgby.com\":\"\",\"thespecialsearch.com\":\"q\",\"search.bpath.com\":\"q\",\"start.funmoods.com\":\"s\",\"fr.search-results.com\":\"q\",\"de.search-results.com\":\"q\",\"it.search-results.com\":\"q\",\"es.search-results.com\":\"q\",\"search.imesh.com\":\"q\",\"search.swagbucks.com\":\"q\",\"isearch.avg.com\":\"q\",\"search.avg.com\":\"q\",\"search.yippy.com\":\"query\",\"cludr.com\":\"q\",\"search.vmn.net\":\"q\",\"www.gigablast.com\":\"q\",\"www.metacrawler.com\":\"q\",\"www.webcrawler.com\":\"q\",\"www.ixquick.com\":\"\",\"www.search.com\":\"q\",\"www.excite.com\":\"q\",\"duckduckgo.com\":\"q\",\"search.lycos.com\":\"q\",\"webfetch.com\":\"q\",\"monstercrawler.com\":\"q\",\"go.com\":\"p\",\"hotbot.com\":\"keyword\",\"home.myplaycity.com\":\"s\",\"www.findamo.com\":\"q\",\"search.gboxapp.com\":\"q\",\"start.iplay.com\":\"q\",\"home.speedbit.com\":\"q\",\"home.sweetim.com\":\"q\",\"search.alot.com\":\"q\",\"search.searchplusnetwork.com\":\"q\",\"www.searchqu.net\":\"\",\"us.yhs4.search.yahoo.com\":\"p\",\"search.insiteapp.com\":\"q\",\"somoto.com\":\"q\",\"blekko.com\":\"\",\"uk.yhs4.search.yahoo.com\":\"p\",\"fr.yhs4.search.yahoo.com\":\"p\",\"suggestor.netliker.com\":\"\",\"search.netliker.com\":\"\",\"insta-search.com\":\"q\",\"www.fast-search.biz\":\"q\",\"start.facemoods.com\":\"s\",\"search.coolnovo.com\":\"\",\"chromeplus.info\":\"q\",\"in.yhs4.search.yahoo.com\":\"p\",\"in.yhs.search.yahoo.com\":\"p\",\"www.searchble.com\":\"keyword\",\"home.allgameshome.com\":\"s\",\"forsearch.net\":\"q\",\"allssearch.com\":\"q\",\"search.snap.do\":\"q\",\"us.yhs.search.yahoo.com\":\"p\",\"uk.yhs.search.yahoo.com\":\"p\",\"fr.yhs.search.yahoo.com\":\"p\",\"search.smartsearchbox.net\":\"\",\"search.seznam.cz\":\"q\",\"search.funmoods.com\":\"s\",\"search.avira.com\":\"q\",\"search.jzip.com\":\"q\",\"search.findeer.com\":\"\",\"search-faster.com\":\"\",\"dnssearch.rr.com\":\"search\",\"search.rr.com\":\"q\",\"search.kalloutsearch4.com\":\"q\",\"kalloutsearch4.com\":\"Keywords\",\"search.rapidns.net\":\"SearchQuery\",\"websearch.4shared.com\":\"q\",\"images.search.conduit.com\":\"q\",\"search.cpchero.biz\":\"q\",\"search.kikin.com\":\"q\",\"www.engine-search.biz\":\"q\",\"www.mysearchresults.com\":\"q\",\"search.vdc.com.vn\":\"SearchQuery\",\"search.charter.net\":\"search\",\"search-vbc.com\":\"keywords\",\"search.pch.com\":\"q\",\"search.pantip.com\":\"\",\"www.startsearcher.com\":\"q\",\"search.icafemanager.com\":\"q\",\"aolsearcht10.search.aol.com\":\"q\",\"search.free.fr\":\"\",\"www.similarsitesearch.com\":\"URL\",\"qoqole.com\":\"q\",\"www.claro-search.com\":\"q\",\"isearch.claro-search.com\":\"q\",\"www.uncoverthenet.com/search\":\"q\",\"www.searchcanvas.com\":\"q\",\"search.etoolkit.com\":\"q\",\"www.searchalgo.com\":\"q\",\"bestsearchall.com\":\"q\",\"bestorganicsearch.com\":\"q\",\"mysearchproperties.com\":\"q\",\"search.treasuretrooper.com\":\"q\",\"btsearch.name\":\"q\",\"optu.search-help.net\":\"search\",\"search.clinck.in\":\"q\",\"search.shareazaweb.net\":\"q\",\"search.solarmash.com\":\"q\",\"search.surfcanyon.com\":\"q\",\"search.tedata.net\":\"SearchQuery\",\"www.gooofullsearch.com\":\"keywords\",\"www.alnaddy.com\":\"q\",\"searchsafer.com\":\"q\",\"www.searchqu.com\":\"q\",\"searchfunmoods.com\":\"s\",\"www.searchfunmoods.com\":\"s\",\"www.searchya.com\":\"q\",\"search.lphant.net\":\"\",\"searchremagnified.com\":\"\",\"www.pagequeryresults.com\":\"\",\"www.searchqueryresults.com\":\"\",\"domainhelp.search.com\":\"q\",\"search.b1.org\":\"q\",\"search.pontofrio.com.br\":\"q\",\"search.maxonline.com.sg\":\"q\",\"search.us.com\":\"k\",\"www.picsearch.com\":\"q\",\"www.search-document.com\":\"q\",\"www.searchsafer.com\":\"q\",\"www.website-unavailable.com\":\"q\",\"fantastigames.metacrawler.com\":\"q\"}|||8641354293813101");), Ersetzt,[3d381da3d7b357df4dc6197662a4ab55]
PUP.Optional.Softonic.A, C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\prefs.js, Gut: (), Schlecht: (Url", "");
user_pref("extensions.delta.vrsn", "1.8.24.6");
user_pref("extensions.delta.vrsnTs", "1.8.24.618:13:27");
user_pref("extensions.delta.vrsni", "1.8.24.6");
user_pref("extensions.delta_i.babExt", "");
user_pref("extensions.delta_i.babTrack", "affID=121565&tsp=4994");
user_pref("extensions.delta_i.srcExt", "ss");
user_pref("extensions.downloadyoutubemp4.download-youtube-dash-enabled", "0");
user_pref("extensions.downloadyoutubemp4.download-youtube-script-url", "https://s.ytimg.com/yts/jsbin/html5player-de_DE-vflHl1Y15/html5player.js");
user_pref("extensions.downloadyoutubemp4.download-youtube-signature-code", "-2,25,14,-1,0");
user_pref("extensions.downloadyoutubevideosasmp.firstrun", false);
user_pref("extensions.downloadyoutubevideosasmp.userId", "c3a184ad-854a-414f-92e3-c16f208b9b91");
user_pref("extensions.downloadyoutubevideosasmp.version", "5.7");
user_pref("extensions.enabledAddons", "%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:38.0.5");
user_pref("extensions.getAddons.cache.lastUpdate", 1435293738);
user_pref("extensions.getAddons.databaseSchema", 5);
user_pref("extensions.hotfix.lastVersion", "20150402.01");
user_pref("extensions.incredibar.actvtyRptTime", "1350932522350");
user_pref("extensions.incredibar.admin", false);
user_pref("extensions.incredibar.aflt", "orgnl");
user_pref("extensions.incredibar.afterInstallRpt", "sent");
user_pref("extensions.incredibar.cntry", "DE");
user_pref("extensions.incredibar.dfltlng", "EN");
user_pref("extensions.incredibar.dfltsrch", "false");
user_pref("extensions.incredibar.did", "10665");
user_pref("extensions.incredibar.envrmnt", "production");
user_pref("extensions.incredibar.excTlbr", false);
user_pref("extensions.incredibar.hdrMd5", "0C0A62AD34D7A10973D3D23FD7EE8A7C");
user_pref("extensions.incredibar.hmpg", false);
user_pref("extensions.incredibar.hrdid", "7c6809c600000000000078e400139dfa");
user_pref("extensions.incredibar.id", "7c6809c600000000000078e400139dfa");
user_pref("extensions.incredibar.installerproductid", "26");
user_pref("extensions.incredibar.instlday", "15625");
user_pref("extensions.incredibar.instlref", "");
user_pref("extensions.incredibar.isdcmntcmplt", "false");
user_pref("extensions.incredibar.keywordurl", "");
user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1417:28:32");
user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
user_pref("extensions.incredibar.newtab", "false");
user_pref("extensions.incredibar.newtaburl", "");
user_pref("extensions.incredibar.noFFXTlbr", false);
user_pref("extensions.incredibar.ppd", "");
user_pref("extensions.incredibar.prdct", "incredibar");
user_pref("extensions.incredibar.productid", "26");
user_pref("extensions.incredibar.prtnrid", "Incredibar");
user_pref("extensions.incredibar.sg", "none");
user_pref("extensions.incredibar.smplgrp", "none");
user_pref("extensions.incredibar.srch", "");
user_pref("extensions.incredibar.srchprvdr", "");
user_pref("extensions.incredibar.tlbrid", "base");
user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6R8HWzicd2&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar.upn2", "6R8HWzicd2");
user_pref("extensions.incredibar.upn2n", "92825213857773432");
user_pref("extensions.incredibar.vrsn", "1.5.11.14");
user_pref("extensions.incredibar.vrsni", "1.5.11.14");
user_pref("extensions.incredibar.vrsnts", "1.5.11.1417:28:32");
user_pref("extensions.incredibar_i.aflt", "orgnl");
user_pref("extensions.incredibar_i.dfltLng", "");
user_pref("extensions.incredibar_i.did", "10665");
user_pref("extensions.incredibar_i.excTlbr", false);
user_pref("extensions.incredibar_i.id", "7c6809c600000000000078e400139dfa");
user_pref("extensions.incredibar_i.installerproductid", "26");
user_pref("extensions.incredibar_i.instlDay", "15625");
user_pref("extensions.incredibar_i.instlRef", "");
user_pref("extensions.incredibar_i.ms_url_id", "");
user_pref("extensions.incredibar_i.newTab", false);
user_pref("extensions.incredibar_i.ppd", "");
user_pref("extensions.incredibar_i.prdct", "incredibar");
user_pref("extensions.incredibar_i.productid", "26");
user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
user_pref("extensions.incredibar_i.smplGrp", "none");
user_pref("extensions.incredibar_i.tlbrId", "base");
user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8HWzicd2&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar_i.upn2", "6R8HWzicd2");
user_pref("extensions.incredibar_i.upn2n", "92825213857773432");
user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1417:28:32");
user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
user_pref("extensions.lastAppVersion", "38.0.5");
user_pref("extensions.lastPlatformVersion", "38.0.5");
user_pref("extensions.pendingOperations", false);
user_pref("extensions.savesense.channel", "_ironppi19012014");
user_pref("extensions.savesense.installId", "_v26400219953933094810912014012321415017");
user_pref("extensions.savesense.installIdSource", "_inst");
user_pref("extensions.savesense.lastHeartBitDate", "2014_9_18");
user_pref("extensions.savesense.partner", "_ironppi");
user_pref("extensions.savesense.sampleGroup", "7");
user_pref("extensions.shownSelectionUI", true);
user_pref("extensions.ui.dictionary.hidden", true);
user_pref("extensions.ui.experiment.hidden", true);
user_pref("extensions.ui.lastCategory", "addons://list/extension");
user_pref("extensions.ui.locale.hidden", true);
user_pref("extensions.vidbar.first-time", false);
user_pref("extensions.vidbar.version", "6.0");
user_pref("extensions.vidbar.version-requestName", "6.0");
user_pref("extensions.vidbar.version-requestSelect", "notset");
user_pref("extensions.vidbar.welcomeshown", true);
user_pref("extensions.xpiState", "{\"app-profile\":{\"{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}\":{\"d\":\"C:\\\\Users\\\\Besitzer\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\zk3ie2kc.default\\\\extensions\\\\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi\",\"e\":true,\"v\":\"1.8.3.1-signed\",\"st\":1434216125389}},\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"e\":false,\"v\":\"38.0.5\",\"st\":1421873104162,\"mt\":1434656147780}}}");
user_pref("gecko.buildID", "20150525141253");
user_pref("gecko.mstone", "38.0.5");
user_pref("gfx.blacklist.suggested-driver-version", "257.21");
user_pref("gfx.direct3d.last_used_feature_level_idx", 0);
user_pref("idle.lastDailyNotification", 1435580709);
user_pref("intl.charsetmenu.browser.cache", "windows-1251, ISO-8859-15, ISO-8859-2, windows-1252, UTF-8");
user_pref("lightweightThemes.isThemeSelected", true);
user_pref("lightweightThemes.persisted.footerURL", true);
user_pref("lightweightThemes.persisted.headerURL", true);
user_pref("lightweightThemes.usedThemes", "[{\"id\":\"375248\",\"name\":\"Skyrim - Dovahkiin\",\"headerURL\":\"https://addons.mozilla.org/_files/289809/Skyrim-PersonaHeader2.jpg?1299536532\",\"footerURL\":\"https://addons.mozilla.org/_files/289809/Skyrim-PersonaFooter.jpg?1299536532\",\"textcolor\":\"#a6a6a6\",\"accentcolor\":\"#080808\",\"iconURL\":\"https://addons.mozilla.org/_files/289809/preview_small.jpg?1299536532\",\"previewURL\":\"https://addons.mozilla.org/_files/289809/preview.jpg?1299536532\",\"author\":\"tobikiri\",\"updateURL\":\"https://versioncheck.addons.mozilla.org/en-US/themes/update-check/375248?src=gp\",\"version\":\"0\",\"updateDate\":1374919212953,\"installDate\":1323010860205}]");
user_pref("media.gmp-eme-adobe.lastUpdate", 1434657173);
user_pref("media.gmp-eme-adobe.version", "11");
user_pref("media.gmp-gmpopenh264.lastUpdate", 1434657173);
user_pref("media.gmp-gmpopenh264.version", "1.4");
user_pref("media.gmp-manager.buildID", "20150525141253");
user_pref("media.gmp-manager.lastCheck", 1435580350);
user_pref("network.cookie.prefsMigrated", true);
user_pref("network.predictor.cleaned-up", true);
user_pref("pdfjs.migrationVersion", 2);
user_pref("pdfjs.previousHandler.alwaysAskBeforeHandling", true);
user_pref("pdfjs.previousHandler.preferredAction", 4);
user_pref("places.database.lastMaintenance", 1435580350);
user_pref("places.history.expiration.transient_current_max_pages", 103537);
user_pref("places.history.expiration.transient_optimal_database_size", 165658786);
user_pref("plugin.disable_full_page_plugin_for_types", "application/pdf");
user_pref("plugin.importedState", true);
user_pref("pref.browser.homepage.disable_button.bookmark_page", false);
user_pref("pref.browser.homepage.disable_button.current_page", false);
user_pref("pref.browser.homepage.disable_button.restore_default", false);
user_pref("pref.privacy.disable_button.view_passwords", false);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_bgcolor", false);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_bgimages", false);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_colorspace", "");
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_command", "");
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_downloadfonts", false);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_duplex", -900601456);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_edge_bottom", 0);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_edge_left", 0);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_edge_right", 0);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_edge_top", 0);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_evenpages", true);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_footercenter", "");
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_footerleft", "&PT");
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_footerright", "&D");
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_headercenter", "");
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_headerleft", "&T");
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_headerright", "&U");
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_in_color", true);
user_pref("print.printer_EPSON_Stylus_SX200_Series.print_margin_bottom", "0.5");
user_pref("print.printer_EPSON_Stylus_SX200_Serie), Ersetzt,[3243efd123670234b55eb8d7fc0a5da3]
Physische Sektoren: 0
(Keine schädliche Elemente gefunden)
(end)
Adw: Code:
# AdwCleaner v4.207 - Bericht erstellt 29/06/2015 um 15:15:00
# Aktualisiert 21/06/2015 von Xplode
# Datenbank : 2015-06-23.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Besitzer - BESITZER-PC
# Gestarted von : C:\Users\Besitzer\Downloads\AdwCleaner_4.207.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\Delta
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Datei Gelöscht : C:\Users\Besitzer\AppData\LocalLow\SkwConfig.bin
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\user.js
***** [ Geplante Tasks ] *****
Task Gelöscht : BitGuard
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKCU\Software\5c55d8d1b435bf47
Schlüssel Gelöscht : HKLM\SOFTWARE\5c55d8d1b435bf47
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\Microsoft\ClaroDirectory
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKU\.DEFAULT\Software\IM
Schlüssel Gelöscht : HKU\.DEFAULT\Software\ImInstaller
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F092B960893592640A90584BCB4B1B9B
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17840
-\\ Mozilla Firefox v38.0.5 (x86 de)
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("avg.install.userHPSettings", "hxxp://www.claro-search.com/?affID=114506&tt=4612_4&babsrc=HP_clro&mntrId=7c6809c600000000000078e400139dfa");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("avg.install.userSPSettings", "Claro Search");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/?a=6R8HWzicd2&i=26&loc=skw");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", true);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.claro-search.com/?affID=114506&tt=4612_4&babsrc=NT_clro&mntrId=7c6809c600000000000078e400139dfa");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.admin", false);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.aflt", "babsst");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.appId", "{C3110516-8EFC-49D6-8B72-69354F332062}");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.dfltLng", "en");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.excTlbr", false);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.id", "7c6809c600000000000078e400139dfa");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.instlDay", "15662");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.instlRef", "sst");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.prdct", "claro");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.prtnrId", "claro");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.tlbrId", "claro");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.tlbrSrchUrl", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.vrsn", "1.8.3.10");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.vrsni", "1.8.3.10");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro_i.smplGrp", "none");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro_i.vrsnTs", "1.8.3.1017:40:26");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.actvtyRptTime", "1350932522350");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.admin", false);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.aflt", "orgnl");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.afterInstallRpt", "sent");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.cntry", "DE");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.dfltlng", "EN");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.dfltsrch", "false");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.did", "10665");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.envrmnt", "production");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.excTlbr", false);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.hdrMd5", "0C0A62AD34D7A10973D3D23FD7EE8A7C");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.hmpg", false);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.hrdid", "7c6809c600000000000078e400139dfa");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.id", "7c6809c600000000000078e400139dfa");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.installerproductid", "26");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.instlday", "15625");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.instlref", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.isdcmntcmplt", "false");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.keywordurl", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1417:28:32");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.newtab", "false");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.newtaburl", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.noFFXTlbr", false);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.ppd", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.prdct", "incredibar");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.productid", "26");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.prtnrid", "Incredibar");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.sg", "none");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.smplgrp", "none");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.srch", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.srchprvdr", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.tlbrid", "base");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6R8HWzicd2&loc=IB_TB&i=26&search=");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.upn2", "6R8HWzicd2");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.upn2n", "92825213857773432");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar.vrsnts", "1.5.11.1417:28:32");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.aflt", "orgnl");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.dfltLng", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.did", "10665");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.excTlbr", false);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.id", "7c6809c600000000000078e400139dfa");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.installerproductid", "26");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.instlDay", "15625");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.instlRef", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.ms_url_id", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.newTab", false);
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.ppd", "");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.prdct", "incredibar");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.productid", "26");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.smplGrp", "none");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.tlbrId", "base");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8HWzicd2&loc=IB_TB&i=26&search=");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.upn2", "6R8HWzicd2");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.upn2n", "92825213857773432");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1417:28:32");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_blackList", "form=CONTLBbabsrc=toolbarbabsrc=tb_ssinvocationType=tb50-ie-aolsoftonic-tbsbox-en-usinvocationType=tb50-ff-aolsoftonic[...]
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_referrer", "hxxp://us.yhs4.search.yahoo.com/yhs/search8641354204507381");
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_temp_referer", "hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&itag=ody&q=hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavi[...]
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.sweetim.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"h[...]
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_blackList", "form=CONTLBbabsrc=toolbarbabsrc=tb_ssinvocationType=tb50-ie-aolsoftonic-tbsbox-en-usinvocationType=tb50-ff-aolsoftonic[...]
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_referrer", "hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&itag=ody&q=hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&[...]
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_temp_referer", "hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&itag=ody&q=hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavi[...]
[zk3ie2kc.default\prefs.js] - Zeile Gelöscht : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home.mywebsearch.com\":\"searc[...]
*************************
AdwCleaner[R0].txt - [13333 Bytes] - [29/06/2015 15:13:19]
AdwCleaner[S0].txt - [13726 Bytes] - [29/06/2015 15:15:00]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13786 Bytes] ##########
JRT: Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.2.1 (06.28.2015:2)
OS: Windows 7 Home Premium x64
Ran by Besitzer on 29.06.2015 at 15:22:21,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
Successfully deleted: [Task] C:\windows\system32\tasks\EasySpeedUpManager
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\ProgramData\tuneup software
Successfully deleted: [Folder] C:\Users\Besitzer\AppData\Roaming\tuneup software
~~~ FireFox
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.06.2015 at 15:25:34,36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by Besitzer (administrator) on BESITZER-PC on 29-06-2015 15:26:58
Running from C:\Users\Besitzer\Downloads
Loaded Profiles: Besitzer (Available Profiles: Besitzer)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9644576 2009-12-15] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2074408 2010-02-26] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePDRShortCut] => C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePPShortCut] => C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe [210216 2009-07-21] (CyberLink Corp.)
HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [75048 2010-01-13] (cyberlink)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2372800 2014-11-26] (Microsoft Corp.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795672 2014-08-12] (CyberLink Corp.)
HKU\S-1-5-21-61187059-1334297750-2548552277-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7799576 2015-05-21] (SUPERAntiSpyware)
HKU\S-1-5-21-61187059-1334297750-2548552277-1000\...\Run: [Codec Pack Update Checker] => "C:\windows\system32\C2MP\UpdateChecker.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2015-01-12]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\C2MP\TrayMenu.exe ()
Startup: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2013-09-20]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-61187059-1334297750-2548552277-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-61187059-1334297750-2548552277-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-61187059-1334297750-2548552277-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?gws_rd=ssl
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-61187059-1334297750-2548552277-1000 -> {5CA7C29B-9046-46D8-A59C-456CC1EFE975} URL = hxxp://www.bing.com/search?FORM=BDKTDF&PC=BDT3&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-61187059-1334297750-2548552277-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-61187059-1334297750-2548552277-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-08-05] (Microsoft Corporation)
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO-x32: CIEDownload Object -> {67BCF957-85FC-4036-8DC4-D4D80E00A77B} -> C:\Program Files (x86)\SMART Technologies\SMART Notebook\NotebookPlugin.dll [2010-01-08] (SMART Technologies ULC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-14] (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-14] (Oracle Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_190.dll [2015-06-24] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_190.dll [2015-06-24] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-08-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-08-14] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-21] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-05-10] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\searchplugins\s-amazon-de.xml [2012-01-20]
FF Extension: Download YouTube Videos as MP4 - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\zk3ie2kc.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2011-11-22]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2015-06-18]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-06-18]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2015-06-18]
FF Extension: SMART Notebook Extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{D6D05E6F-D5C1-4e03-8E33-73F92B05E262} [2015-06-18]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2015-06-18] <==== ATTENTION
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.)
S2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173248 2014-11-26] (Microsoft Corp.)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S2 Rezip; C:\windows\SysWOW64\Rezip.exe [311296 2009-03-05] () [File not signed]
S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()
S2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-31] () [File not signed] <==== ATTENTION
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-05-27] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-05-27] ()
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-29] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [12728 2009-09-29] ()
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
R2 {C5F942FD-1110-4664-86CE-0C6BDA305235}; C:\Program Files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl [32456 2014-08-12] (CyberLink Corp.)
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; C:\Program Files (x86)\CyberLink\PowerDVD8\000.fcl [146928 2010-01-13] (CyberLink Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-29 15:26 - 2015-06-29 15:27 - 00015195 _____ C:\Users\Besitzer\Downloads\FRST.txt
2015-06-29 15:25 - 2015-06-29 15:26 - 00000853 _____ C:\Users\Besitzer\Desktop\JRT.txt
2015-06-29 15:22 - 2015-06-29 15:22 - 00000207 _____ C:\windows\tweaking.com-regbackup-BESITZER-PC-Windows-7-Home-Premium-(64-bit).dat
2015-06-29 15:22 - 2015-06-29 15:22 - 00000000 ____D C:\RegBackup
2015-06-29 15:20 - 2015-06-29 15:20 - 02950645 _____ (Malwarebytes Corporation) C:\Users\Besitzer\Desktop\JRT.exe
2015-06-29 15:19 - 2015-06-29 15:19 - 00013879 _____ C:\Users\Besitzer\Desktop\AdwCleaner[S0].txt
2015-06-29 15:13 - 2015-06-29 15:15 - 00000000 ____D C:\AdwCleaner
2015-06-29 15:11 - 2015-06-29 15:11 - 02244096 _____ C:\Users\Besitzer\Downloads\AdwCleaner_4.207.exe
2015-06-29 15:09 - 2015-06-29 15:09 - 00041819 _____ C:\Users\Besitzer\Desktop\mbam.txt
2015-06-29 14:22 - 2015-06-29 15:17 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-29 14:22 - 2015-06-29 14:22 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-29 14:22 - 2015-06-29 14:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-29 14:21 - 2015-06-29 14:22 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-29 14:21 - 2015-06-29 14:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-29 14:21 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-06-29 14:21 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-06-29 14:21 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-06-29 14:20 - 2015-06-29 14:21 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Besitzer\Downloads\mbam-setup-2.1.6.1022.exe
2015-06-26 17:41 - 2015-06-26 17:41 - 00022495 _____ C:\ComboFix.txt
2015-06-26 17:30 - 2015-06-26 17:41 - 00000000 ____D C:\Qoobox
2015-06-26 17:30 - 2011-06-26 08:45 - 00256000 _____ C:\windows\PEV.exe
2015-06-26 17:30 - 2010-11-07 19:20 - 00208896 _____ C:\windows\MBR.exe
2015-06-26 17:30 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2015-06-26 17:30 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2015-06-26 17:30 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2015-06-26 17:30 - 2000-08-31 02:00 - 00098816 _____ C:\windows\sed.exe
2015-06-26 17:30 - 2000-08-31 02:00 - 00080412 _____ C:\windows\grep.exe
2015-06-26 17:30 - 2000-08-31 02:00 - 00068096 _____ C:\windows\zip.exe
2015-06-26 17:29 - 2015-06-26 17:39 - 00000000 ____D C:\windows\erdnt
2015-06-26 17:26 - 2015-06-26 17:26 - 05631168 ____R (Swearware) C:\Users\Besitzer\Desktop\ComboFix.exe
2015-06-26 17:13 - 2015-06-26 17:13 - 00001264 _____ C:\Users\Besitzer\Desktop\Revo Uninstaller.lnk
2015-06-26 17:13 - 2015-06-26 17:13 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-06-26 17:09 - 2015-06-26 17:09 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Besitzer\Downloads\revosetup95.exe
2015-06-25 17:58 - 2015-06-25 17:58 - 00291928 _____ C:\windows\Minidump\062515-22105-01.dmp
2015-06-25 17:48 - 2015-06-25 17:48 - 00009114 _____ C:\Users\Besitzer\Desktop\gmer.log
2015-06-25 17:40 - 2015-06-25 17:40 - 00380416 _____ C:\Users\Besitzer\Downloads\Gmer-19357.exe
2015-06-25 17:35 - 2015-06-25 17:35 - 00039601 _____ C:\Users\Besitzer\Desktop\Addition.txt
2015-06-25 17:33 - 2015-06-29 15:27 - 00000000 ____D C:\FRST
2015-06-25 17:33 - 2015-06-25 17:35 - 00053367 _____ C:\Users\Besitzer\Desktop\FRST.txt
2015-06-25 17:33 - 2015-06-25 17:33 - 02112512 _____ (Farbar) C:\Users\Besitzer\Downloads\FRST64.exe
2015-06-25 17:32 - 2015-06-25 17:32 - 00000478 _____ C:\Users\Besitzer\Desktop\defogger_disable.log
2015-06-25 17:32 - 2015-06-25 17:32 - 00000000 _____ C:\Users\Besitzer\defogger_reenable
2015-06-25 17:31 - 2015-06-25 17:31 - 00050477 _____ C:\Users\Besitzer\Downloads\Defogger.exe
2015-06-24 20:13 - 2015-06-24 20:13 - 00000000 ____D C:\Users\Besitzer\AppData\Local\GWX
2015-06-18 21:56 - 2015-06-18 21:58 - 76813723 _____ C:\Users\Besitzer\Downloads\Witchblade Folge 1 Beginn.mp4
2015-06-18 21:55 - 2015-06-18 22:01 - 321079594 _____ C:\Users\Besitzer\Downloads\Daimidaler, Episode 01, OMU, deutsch, german.mp4
2015-06-18 21:54 - 2015-06-18 21:56 - 88696996 _____ C:\Users\Besitzer\Downloads\Ikki Tousen Xtreme Xecutor, Episode 01.mp4
2015-06-18 21:51 - 2015-06-21 20:25 - 00014586 _____ C:\Users\Besitzer\Desktop\Kündigung 1 und 1.odt
2015-06-18 21:45 - 2015-06-18 21:47 - 43386339 _____ C:\Users\Besitzer\Downloads\Requiem for the Phantom Episode 7 [English Dubbed].mp4
2015-06-18 21:45 - 2015-06-18 21:46 - 43244627 _____ C:\Users\Besitzer\Downloads\Requiem for the Phantom Episode 9 [English Dubbed].mp4
2015-06-18 21:45 - 2015-06-18 21:46 - 38485609 _____ C:\Users\Besitzer\Downloads\Requiem for the Phantom Episode 8 [English Dubbed].mp4
2015-06-18 21:43 - 2015-06-18 21:46 - 49619201 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 11 [FULL EPISODE].mp4
2015-06-18 21:43 - 2015-06-18 21:45 - 53399999 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 13 [FULL EPISODE].mp4
2015-06-18 21:43 - 2015-06-18 21:44 - 51253181 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 12 [FULL EPISODE].mp4
2015-06-18 21:42 - 2015-06-18 21:45 - 51159632 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 10 [FULL EPISODE].mp4
2015-06-18 21:41 - 2015-06-18 21:42 - 51426399 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 9 [FULL EPISODE].mp4
2015-06-18 21:38 - 2015-06-18 21:41 - 53107255 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 6 [FULL EPISODE].mp4
2015-06-18 21:38 - 2015-06-18 21:41 - 50595785 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 7 [FULL EPISODE].mp4
2015-06-18 21:38 - 2015-06-18 21:41 - 49116178 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 8 [FULL EPISODE].mp4
2015-06-18 21:37 - 2015-06-18 21:41 - 51332096 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 3 [FULL EPISODE].mp4
2015-06-18 21:37 - 2015-06-18 21:41 - 49034807 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 5 [FULL EPISODE].mp4
2015-06-18 21:37 - 2015-06-18 21:40 - 51425165 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 2 [FULL EPISODE].mp4
2015-06-18 21:36 - 2015-06-18 21:38 - 53617794 _____ C:\Users\Besitzer\Downloads\CANAAN Episode 1 [FULL EPISODE].mp4
2015-06-18 21:35 - 2015-06-18 21:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-13 19:48 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-06-13 19:48 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-06-13 19:48 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-06-13 19:48 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-06-13 19:48 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-06-13 19:48 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-06-13 19:48 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-06-13 19:48 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-06-13 19:48 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-06-13 19:48 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-06-13 19:48 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-06-13 19:48 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-06-13 19:48 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-06-13 19:48 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-06-13 19:48 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-06-13 19:48 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-06-13 19:48 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-06-13 19:48 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-06-13 19:48 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-06-13 19:48 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-13 19:48 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-06-13 19:48 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-06-13 19:48 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-06-13 19:48 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-06-13 19:48 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-06-13 19:48 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-06-13 19:48 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-06-13 19:48 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-06-13 19:48 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-06-13 19:48 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-06-13 19:48 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-06-13 19:48 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-06-13 19:48 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-06-13 19:48 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-06-13 19:48 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-06-13 19:48 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-06-13 19:48 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-06-13 19:48 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-06-13 19:48 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-06-13 19:48 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-06-13 19:48 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-06-13 19:48 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-06-13 19:48 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-06-13 19:48 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-06-13 19:48 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-06-13 19:48 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-06-13 19:48 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-06-13 19:48 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-06-13 19:48 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-06-13 19:48 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-06-13 19:48 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-06-13 19:48 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-06-13 19:48 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-06-13 19:48 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-06-13 19:48 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-06-13 19:48 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-06-13 19:48 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-06-13 19:48 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-06-13 19:48 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-06-13 19:48 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-06-13 19:48 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-06-13 19:48 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-06-13 19:48 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-06-13 19:48 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-06-13 19:48 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-06-13 19:48 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-06-13 19:48 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-06-13 19:48 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-06-13 19:48 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-06-13 19:48 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2015-06-13 19:48 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\spwmp.dll
2015-06-13 19:48 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\msdxm.ocx
2015-06-13 19:48 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\dxmasf.dll
2015-06-13 19:48 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2015-06-13 19:48 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2015-06-13 19:48 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\spwmp.dll
2015-06-13 19:48 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdxm.ocx
2015-06-13 19:48 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxmasf.dll
2015-06-13 19:48 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2015-06-13 19:46 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-06-13 19:46 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-06-13 19:46 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-06-13 19:46 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\windows\system32\sechost.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-06-13 19:46 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-06-13 19:46 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2015-06-13 19:46 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\tracerpt.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\windows\system32\logman.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\typeperf.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-06-13 19:46 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\relog.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-06-13 19:46 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-06-13 19:46 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\diskperf.exe
2015-06-13 19:46 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-06-13 19:46 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-06-13 19:46 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-06-13 19:46 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\windows\SysWOW64\sechost.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-06-13 19:46 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-06-13 19:46 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\windows\SysWOW64\tracerpt.exe
2015-06-13 19:46 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\logman.exe
2015-06-13 19:46 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-06-13 19:46 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\typeperf.exe
2015-06-13 19:46 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\windows\SysWOW64\relog.exe
2015-06-13 19:46 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-06-13 19:46 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\diskperf.exe
2015-06-13 19:46 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-06-13 19:46 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-06-13 19:46 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-06-13 19:46 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-06-13 19:46 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-06-13 19:46 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-06-13 19:46 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-06-13 19:46 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-06-13 19:46 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-13 19:46 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-13 19:46 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2015-06-13 19:46 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2015-06-13 19:46 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\stream.sys
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-29 15:23 - 2009-07-14 06:45 - 00022976 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-29 15:23 - 2009-07-14 06:45 - 00022976 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-29 15:21 - 2010-04-07 10:41 - 01558245 _____ C:\windows\WindowsUpdate.log
2015-06-29 15:17 - 2009-07-14 06:51 - 00233976 _____ C:\windows\setupact.log
2015-06-29 15:16 - 2012-03-30 22:14 - 00001106 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-29 15:16 - 2010-04-07 11:30 - 00907718 _____ C:\windows\PFRO.log
2015-06-29 15:16 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-06-29 15:00 - 2013-09-13 22:07 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-06-29 14:53 - 2012-03-30 22:14 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-26 17:38 - 2009-07-14 04:34 - 00000215 _____ C:\windows\system.ini
2015-06-26 06:41 - 2014-01-23 23:42 - 00000194 _____ C:\Users\Besitzer\AppData\Roaming\WB.CFG
2015-06-25 17:58 - 2013-08-15 17:17 - 00000000 ____D C:\windows\Minidump
2015-06-25 17:58 - 2013-08-15 17:16 - 610692387 _____ C:\windows\MEMORY.DMP
2015-06-25 17:32 - 2010-05-12 21:58 - 00000000 ____D C:\Users\Besitzer
2015-06-24 19:01 - 2013-09-13 22:07 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-06-24 19:01 - 2012-11-19 23:20 - 00778416 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-06-24 19:01 - 2011-09-08 15:15 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-21 19:44 - 2010-04-08 03:16 - 00699682 _____ C:\windows\system32\perfh007.dat
2015-06-21 19:44 - 2010-04-08 03:16 - 00149790 _____ C:\windows\system32\perfc007.dat
2015-06-21 19:44 - 2009-07-14 07:13 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI
2015-06-21 19:30 - 2012-05-04 10:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-18 22:06 - 2014-11-23 04:18 - 00000000 __SHD C:\Users\Besitzer\AppData\Local\EmieBrowserModeList
2015-06-18 22:06 - 2014-04-24 20:54 - 00000000 __SHD C:\Users\Besitzer\AppData\Local\EmieUserList
2015-06-18 22:06 - 2014-04-24 20:54 - 00000000 __SHD C:\Users\Besitzer\AppData\Local\EmieSiteList
2015-06-18 20:55 - 2009-07-14 07:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2015-06-18 20:53 - 2009-07-14 06:45 - 00384016 _____ C:\windows\system32\FNTCACHE.DAT
2015-06-18 20:50 - 2014-12-12 20:56 - 00000000 ____D C:\windows\system32\appraiser
2015-06-18 20:50 - 2014-04-30 08:15 - 00000000 ___SD C:\windows\system32\CompatTel
2015-06-18 20:50 - 2009-07-14 05:20 - 00000000 ____D C:\windows\PolicyDefinitions
2015-06-13 20:03 - 2010-05-12 22:05 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-13 20:02 - 2013-07-22 20:35 - 00000000 ____D C:\windows\system32\MRT
2015-06-13 19:58 - 2011-09-13 00:50 - 140135120 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-06-13 19:11 - 2014-09-25 22:51 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
==================== Files in the root of some directories =======
2014-01-23 23:42 - 2015-06-26 06:41 - 0000194 _____ () C:\Users\Besitzer\AppData\Roaming\WB.CFG
2012-01-28 23:16 - 2012-01-28 23:53 - 0000070 _____ () C:\Users\Besitzer\AppData\Roaming\wklnhst.dat
2013-09-10 02:14 - 2013-09-10 02:14 - 0005120 _____ () C:\Users\Besitzer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-04-07 10:49 - 2010-04-07 10:50 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2010-04-07 10:47 - 2010-04-07 10:48 - 0000106 _____ () C:\ProgramData\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}.log
2010-04-07 10:44 - 2010-04-07 10:45 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-04-07 10:49 - 2010-04-07 10:49 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log
2010-04-07 10:44 - 2010-04-07 10:44 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2010-04-07 10:45 - 2010-04-07 10:47 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Some files in TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe
C:\Users\Besitzer\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-18 22:15
==================== End of log ============================
Lg! |
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
