Trojaner-Board
Seite 2 von 7 1 2 34 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   langsames internet (https://www.trojaner-board.de/124738-langsames-internet.html)

fuba2012 28.09.2012 16:23
Hi,
so da bin ich wieder. Die ganze Prozedur dauerte ein paar Stunden aber ich denke das ich es korrekt durchgeführt habe. Ergebnis: der Explorer läßt sich starten ist aber genauso langsam wie firefox, der unverändet geblieben ist.

Gruß fuba2012

schrauber 28.09.2012 17:04
naja, wenigstens etwas ;)

Gehst du via LAN oder WLAN online?

fuba2012 28.09.2012 17:38
über wlan

fuba2012

schrauber 28.09.2012 18:14
Kannst du das mal bitte über lan verbinden?

fuba2012 28.09.2012 18:31
firefox und explorer auch über kabel langsam und chrome funktioniert normal gut

schrauber 28.09.2012 18:47
Du hast in Chrome mehr Surf-Speed als in FF/IE?

Poste mal bitte ein frisches OTL logfile.

fuba2012 28.09.2012 19:03
jetzt hab ich 'ne Fehlermeldung. Um diese Anwendung (OTL.exe) ausführen zu können brauche ich: .NET Framework v4.0.30319. Was jetzt?

schrauber 28.09.2012 19:04
Geh mal bitte zu Windows Update und installier alles was angeboten wird.

fuba2012 28.09.2012 19:19
komisch, wenn ich den scan wegklicken wollte ist er dann trotzdem durchgelaufen. Hier das Ergebnis. Ich weiß nicht ob wir framework jetzt noch brauchen?

Code:
OTL logfile created on: 28.09.2012 19:57:55 - Run 4
OTL by OldTimer - Version 3.2.64.0    Folder = C:\Users\M. Schniotalle\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,96 Gb Total Physical Memory | 0,87 Gb Available Physical Memory | 22,08% Memory free
7,92 Gb Paging File | 2,79 Gb Available in Paging File | 35,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218,20 Gb Total Space | 133,09 Gb Free Space | 61,00% Space Free | Partition Type: NTFS
 
Computer Name: MSCHNIOTALLE-PC | User Name: M. Schniotalle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.09.22 13:47:19 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2012.09.20 17:13:17 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe
PRC - [2012.08.10 18:59:52 | 004,440,896 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\M. Schniotalle\AppData\Local\Akamai\netsession_win.exe
PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.01.23 06:43:08 | 000,247,728 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2012.01.23 06:43:08 | 000,092,592 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2011.04.17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
PRC - [2011.03.28 12:40:56 | 001,611,160 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
PRC - [2011.03.07 14:33:34 | 000,591,272 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE
PRC - [2011.02.07 09:56:11 | 000,138,192 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
PRC - [2010.02.23 11:01:28 | 000,329,168 | ---- | M] () -- C:\Program Files (x86)\Verbindungsassistent\WTGService.exe
PRC - [2010.02.09 13:34:00 | 001,807,680 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
PRC - [2009.12.15 22:14:22 | 000,498,160 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2009.09.17 21:05:00 | 000,656,624 | ---- | M] (SoftThinks) -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
PRC - [2009.09.11 19:38:14 | 000,614,400 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
PRC - [2009.06.25 04:19:50 | 000,140,520 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009.06.09 18:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Programme\Dell\DellDock\DockLogin.exe
PRC - [2009.06.05 03:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009.06.05 03:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
PRC - [2007.05.21 12:12:48 | 000,078,696 | ---- | M] () -- C:\Program Files (x86)\MySecurityCenter\Programs\service.exe
PRC - [2005.03.09 21:57:14 | 000,081,920 | ---- | M] (Lime Wire, LLC) -- C:\Program Files (x86)\LimeWire\LimeWire.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.09.25 11:42:58 | 000,460,312 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\ppGoogleNaClPluginChrome.dll
MOD - [2012.09.25 11:42:57 | 012,278,808 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll
MOD - [2012.09.25 11:42:55 | 004,005,912 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\pdf.dll
MOD - [2012.09.25 11:41:39 | 000,578,072 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\libglesv2.dll
MOD - [2012.09.25 11:41:38 | 000,123,416 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\libegl.dll
MOD - [2012.09.25 11:41:27 | 000,156,712 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avutil-51.dll
MOD - [2012.09.25 11:41:26 | 000,275,496 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avformat-54.dll
MOD - [2012.09.25 11:41:24 | 002,168,360 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avcodec-54.dll
MOD - [2011.06.24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.06.24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2010.02.09 13:34:00 | 001,807,680 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
MOD - [2010.02.09 13:34:00 | 000,365,888 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\de\DataSafeOnline.resources.dll
MOD - [2010.02.09 13:34:00 | 000,275,776 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll
MOD - [2010.02.09 13:34:00 | 000,152,896 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll
MOD - [2010.02.09 13:34:00 | 000,095,552 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll
MOD - [2010.02.09 13:34:00 | 000,046,400 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\de\SdbUI.resources.dll
MOD - [2010.02.09 13:34:00 | 000,017,728 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll
MOD - [2009.12.15 22:14:22 | 000,498,160 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
MOD - [2009.09.11 20:05:00 | 000,058,608 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll
MOD - [2009.09.11 19:38:14 | 000,614,400 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
MOD - [2005.03.09 21:57:14 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\LimeWire\LimeWire20.dll
MOD - [2005.03.09 21:57:13 | 000,012,279 | ---- | M] () -- C:\Program Files (x86)\LimeWire\GenericWindowsUtils.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2012.08.18 17:41:56 | 000,114,688 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\GFilterSvc.exe -- (GFilterSvc)
SRV:64bit: - [2012.08.18 17:41:55 | 000,106,496 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\perfos64.exe -- (TapiUnautend)
SRV:64bit: - [2010.08.09 04:04:10 | 000,166,704 | ---- | M] (Samsung Electronics CO., LTD.) [On_Demand | Stopped] -- C:\Windows\SysNative\SUPDSvc.exe -- (Samsung UPD Service)
SRV - [2012.09.06 03:25:06 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.01.23 06:43:08 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2011.08.02 11:47:14 | 000,159,232 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\USB Drivers\26_VIA_driver2\amd64\VIAService.exe -- (CDMA Device Service)
SRV - [2011.04.17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe -- (NIS)
SRV - [2011.02.07 09:56:11 | 000,138,192 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE -- (IJPLMSVC)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.23 11:01:28 | 000,329,168 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Verbindungsassistent\WTGService.exe -- (WTGService)
SRV - [2009.09.17 21:05:00 | 000,656,624 | ---- | M] (SoftThinks) [Auto | Running] -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE -- (SftService)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.06.09 18:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Programme\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2009.06.05 03:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON)
SRV - [2007.05.21 12:12:48 | 000,078,696 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\MySecurityCenter\Programs\service.exe -- (MySecurityCenter License Service)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.09.15 12:51:11 | 000,174,200 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2011.04.21 03:37:49 | 000,386,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys -- (SymNetS)
DRV:64bit: - [2011.03.31 05:04:12 | 000,043,640 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\SymIMV.sys -- (SymIM)
DRV:64bit: - [2011.03.31 05:00:09 | 000,744,568 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2011.03.31 05:00:09 | 000,040,568 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2011.03.15 04:31:23 | 000,912,504 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys -- (SymEFA)
DRV:64bit: - [2011.01.27 08:47:10 | 000,450,680 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys -- (SymDS)
DRV:64bit: - [2011.01.27 07:07:06 | 000,171,128 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys -- (SymIRON)
DRV:64bit: - [2010.04.15 14:40:10 | 000,301,688 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.09 04:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.06.05 02:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2009.06.03 05:16:56 | 007,333,472 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009.05.20 05:10:00 | 000,393,728 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.05.14 02:51:40 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (NETw5v64)
DRV:64bit: - [2009.05.08 10:15:18 | 000,215,552 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2009.03.02 15:12:18 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT)
DRV:64bit: - [2006.11.01 20:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2005.11.03 16:40:56 | 000,089,600 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfvfs02.sys -- (sfvfs02)
DRV:64bit: - [2005.08.10 14:46:20 | 000,068,608 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01)
DRV:64bit: - [2005.05.16 15:21:16 | 000,007,168 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02)
DRV - [2012.09.27 21:00:16 | 002,084,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\VirusDefs\20120928.003\ex64.sys -- (NAVEX15)
DRV - [2012.09.27 21:00:16 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Unknown] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11220.sys -- (EraserUtilDrv11220)
DRV - [2012.09.27 21:00:16 | 000,126,112 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\VirusDefs\20120928.003\eng64.sys -- (NAVENG)
DRV - [2012.09.15 13:45:50 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2012.09.14 08:41:34 | 000,513,184 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\IPSDefs\20120927.001\IDSviA64.sys -- (IDSVia64)
DRV - [2012.09.05 00:23:56 | 001,385,120 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\BASHDefs\20120919.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2010.11.18 02:34:58 | 000,025,072 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- c:\Programme\Dell Support Center\pcdsrvc_x64.pkms -- (PCDSRVC{1E208CE0-FB7451FF-06020101}_0)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{3C78FD94-E1BF-4881-812D-05DE5CB559CC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=orgnl&chnl=sware&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0Bzyzy0CtDtD0F0E0DyB0AtN0D0Tzu0CtBtAtCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1283767779
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=orgnl&chnl=sware&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0Bzyzy0CtDtD0F0E0DyB0AtN0D0Tzu0CtBtAtCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1283767779
IE - HKLM\..\SearchScopes\{7B52165A-95FA-F53F-0044-64DC99B02234}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{7FC2AB76-6360-4921-BC0A-EBB47194BC05}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D4 33 5F 01 8B 9D CD 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = hxxp://int.search-results.com/web?q={SEARCHTERMS}&o=15527&l=dis&prt=NIS&chn=retail&geo=DE&ver=18
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.2: "1und1 Suche"
FF - prefs.js..browser.search.order.3: "amazon.de"
FF - prefs.js..browser.search.order.4: "WEB.DE Suche"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: toolbar@web.de:1.6.4
FF - prefs.js..extensions.enabledAddons: {7e111a5c-3d11-4f56-9463-5310c3c69025}:3.8.1.0
FF - prefs.js..extensions.enabledAddons: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.1
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: allglassv2@ambroos.neowin.net:2.1.4
FF - prefs.js..extensions.enabledItems: {95f24680-9e31-11da-a746-0800200c9a66}:0.1.5.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..extensions.enabledItems: {7e111a5c-3d11-4f56-9463-5310c3c69025}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\M. Schniotalle\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\M. Schniotalle\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.09.27 23:01:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\coFFPlgn_2011_7_12_1 [2012.09.28 17:03:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.09.27 23:01:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\IPSFFPlgn\ [2012.09.28 17:04:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.27 22:59:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.09.27 22:59:58 | 000,000,000 | ---D | M]
 
[2012.09.27 23:14:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Extensions
[2011.07.17 12:25:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2012.09.20 17:07:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\m7klgx40.Standard-Benutzer\extensions
[2012.09.27 23:14:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\v9mdlsvp.default\extensions
[2012.09.27 23:14:08 | 000,000,000 | ---D | M] (Update Notifier) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\v9mdlsvp.default\extensions\{95f24680-9e31-11da-a746-0800200c9a66}
[2012.09.27 23:14:07 | 000,000,000 | ---D | M] ("All-Glass Firefox mod, based on Glasser") -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\v9mdlsvp.default\extensions\allglassv2@ambroos.neowin.net
[2011.11.07 21:48:53 | 000,543,495 | ---- | M] () (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\extensions\toolbar@web.de.xpi
[2011.12.15 19:39:23 | 000,644,152 | ---- | M] () (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2010.01.30 12:59:44 | 000,005,591 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\1und1-suche.xml
[2010.01.30 12:59:43 | 000,001,371 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\amazonde.xml
[2010.01.30 12:59:44 | 000,010,605 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\gmx-suche.xml
[2011.06.27 07:24:29 | 000,002,449 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\safesearch.xml
[2010.01.30 12:59:44 | 000,005,588 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\webde-suche.xml
[2012.09.27 22:59:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.09.27 22:59:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012.09.27 22:59:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\ffxtlbr@babylon.com
File not found (No name found) -- C:\USERS\M. SCHNIOTALLE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V9MDLSVP.DEFAULT\EXTENSIONS\{7E111A5C-3D11-4F56-9463-5310C3C69025}
[2012.09.06 03:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.09.22 13:47:27 | 000,129,176 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll
[2012.09.06 04:07:37 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.06 04:07:37 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.09.06 04:07:37 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.09.06 04:07:37 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.14 21:53:00 | 000,000,158 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search the web.src
[2012.09.06 04:07:37 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.09.06 04:07:37 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\gcswf32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility for IJ (Enabled) = C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Java Deployment Toolkit 6.0.350.10 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
 
O1 HOSTS File: ([2012.09.20 21:22:28 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [Apoint] C:\Programme\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [setc] C:\Program Files (x86)\MySecurityCenter\Programs\setc.exe (MySecurityCenter)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\M. Schniotalle\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4:64bit: - HKLM..\RunOnce: [NoIE4StubProcessing] C:\Windows\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f File not found
O4 - Startup: C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk =  File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - Reg Error: Key error. File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9FCD61D1-A933-45FC-A46D-26E41D523C5B}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE687837-BCDD-47F0-9DD3-7B2E77E57300}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.09.28 20:00:22 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\Shared
[2012.09.28 08:46:44 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2012.09.28 08:43:55 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oem
[2012.09.28 08:43:24 | 000,000,000 | ---D | C] -- C:\Windows\de-DE
[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer
[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\de-DE
[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\de
[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\0407
[2012.09.28 08:43:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE
[2012.09.28 08:43:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\0407
[2012.09.28 08:43:21 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\de
[2012.09.28 08:40:59 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui
[2012.09.28 08:40:40 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui
[2012.09.28 08:40:40 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui
[2012.09.28 08:40:40 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui
[2012.09.28 08:30:36 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~Q
[2012.09.28 08:25:34 | 000,000,000 | -H-D | C] -- C:\$INPLACE.~TR
[2012.09.27 23:47:02 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.09.27 23:38:40 | 000,000,000 | -HSD | C] -- C:\Recovery
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2012.09.27 22:51:31 | 000,000,000 | --SD | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Videos
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Saved Games
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Pictures
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Music
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Links
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Favorites
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Downloads
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Documents
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Desktop
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Vorlagen
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Verlauf
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Temporary Internet Files
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Startmenü
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\SendTo
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Recent
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Netzwerkumgebung
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Lokale Einstellungen
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Videos
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Musik
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Eigene Dateien
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Bilder
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Druckumgebung
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Cookies
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Anwendungsdaten
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Anwendungsdaten
[2012.09.27 22:51:31 | 000,000,000 | -H-D | C] -- C:\Users\M. Schniotalle\AppData
[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Temp
[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Microsoft
[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Media Center Programs
[2012.09.27 22:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\DellTPad
[2012.09.27 22:47:43 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2012.09.27 20:51:45 | 000,693,265 | ---- | C] (Farbar) -- C:\Users\M. Schniotalle\Desktop\FSS.exe
[2012.09.27 20:34:56 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2012.09.27 19:58:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
[2012.09.27 19:58:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tweaking.com
[2012.09.27 19:37:52 | 000,181,064 | ---- | C] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2012.09.27 19:37:05 | 000,000,000 | ---D | C] -- C:\Tweaking.com_Windows_Repair_Logs
[2012.09.27 19:07:04 | 000,751,391 | ---- | C] (Farbar) -- C:\Users\M. Schniotalle\Desktop\MiniToolBox.exe
[2012.09.27 19:01:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2012.09.22 22:51:12 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb
[2012.09.22 16:33:57 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\M. Schniotalle\Desktop\aswMBR.exe
[2012.09.22 13:47:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared
[2012.09.22 13:47:22 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2012.09.22 13:47:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
[2012.09.22 13:13:14 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LimeWire
[2012.09.22 13:10:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012.09.22 12:51:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LimeWire
[2012.09.22 12:50:26 | 000,000,000 | ---D | C] -- C:\LiWi
[2012.09.22 12:40:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012.09.22 11:37:32 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012.09.20 21:50:12 | 002,322,184 | ---- | C] (ESET) -- C:\Users\M. Schniotalle\Desktop\esetsmartinstaller_enu.exe
[2012.09.20 21:11:42 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012.09.20 21:11:42 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012.09.20 21:11:42 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012.09.20 21:11:38 | 000,000,000 | ---D | C] -- C:\ComboFix
[2012.09.20 21:11:33 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.09.20 21:11:15 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012.09.20 21:04:12 | 004,754,465 | R--- | C] (Swearware) -- C:\Users\M. Schniotalle\Desktop\ComboFix.exe
[2012.09.20 17:13:08 | 000,600,064 | ---- | C] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe
[2012.09.19 19:52:53 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Malwarebytes
[2012.09.19 19:52:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.09.19 19:34:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DownloadManager
[2012.09.19 18:44:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2012.09.19 18:44:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2012.09.18 21:22:44 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\convert
[2012.09.16 19:20:23 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Real
[2012.09.16 17:27:57 | 000,200,976 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysWow64\drivers\tmcomm.sys
[2012.09.16 14:36:41 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Apps
[2012.09.15 19:52:18 | 000,386,168 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys
[2012.09.15 19:52:17 | 000,912,504 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys
[2012.09.15 19:52:17 | 000,744,568 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys
[2012.09.15 19:52:17 | 000,450,680 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys
[2012.09.15 19:52:17 | 000,171,128 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys
[2012.09.15 19:52:17 | 000,040,568 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys
[2012.09.15 19:51:58 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64\1207020.003
[2012.09.15 14:01:45 | 000,043,640 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SymIMV.sys
[2012.09.15 12:51:11 | 000,174,200 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2012.09.15 12:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2012.09.15 12:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2012.09.15 12:50:49 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64
[2012.09.15 12:50:47 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
[2012.09.15 12:50:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Internet Security
[2012.09.15 12:50:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
[2012.09.15 11:10:19 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Freeware.de
[2012.09.10 18:47:58 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\WildTangent
[2012.09.08 15:24:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2010.01.14 19:46:35 | 008,656,832 | ---- | C] (Dell, Inc.                                                  ) -- C:\Users\M. Schniotalle\AppData\Roaming\DataSafeDotNet.exe
 
========== Files - Modified Within 30 Days ==========
 
[2012.09.28 19:31:01 | 000,001,156 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000UA.job
[2012.09.28 19:13:16 | 000,001,126 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.09.28 17:52:10 | 002,182,120 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\Cat.DB
[2012.09.28 17:13:20 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.28 17:13:20 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.28 17:13:00 | 000,001,122 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.09.28 17:08:44 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.09.28 17:08:44 | 000,654,166 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.09.28 17:08:44 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.09.28 17:08:44 | 000,130,006 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.09.28 17:08:44 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.09.28 17:03:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.09.28 17:02:52 | 3190,050,816 | -HS- | M] () -- C:\hiberfil.sys
[2012.09.28 08:43:11 | 000,295,922 | ---- | M] () -- C:\Windows\SysNative\perfi007.dat
[2012.09.28 08:43:11 | 000,038,104 | ---- | M] () -- C:\Windows\SysNative\perfd007.dat
[2012.09.27 23:35:17 | 000,039,252 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2012.09.27 23:35:17 | 000,039,252 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2012.09.27 23:22:12 | 000,022,960 | ---- | M] () -- C:\Windows\SysNative\emptyregdb.dat
[2012.09.27 23:18:43 | 000,311,432 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.09.27 22:50:19 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2012.09.27 22:50:13 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012.09.27 21:31:31 | 000,026,405 | ---- | M] () -- C:\Windows\diagwrn.xml
[2012.09.27 21:31:31 | 000,001,890 | ---- | M] () -- C:\Windows\diagerr.xml
[2012.09.27 20:51:53 | 000,693,265 | ---- | M] (Farbar) -- C:\Users\M. Schniotalle\Desktop\FSS.exe
[2012.09.27 20:36:41 | 000,196,608 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2012.09.27 20:34:59 | 000,181,064 | ---- | M] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2012.09.27 19:58:10 | 000,002,249 | ---- | M] () -- C:\Users\Public\Desktop\Tweaking.com - Windows Repair (All in One).lnk
[2012.09.27 19:45:50 | 000,006,640 | ---- | M] () -- C:\bootsqm.dat
[2012.09.27 19:07:16 | 000,751,391 | ---- | M] (Farbar) -- C:\Users\M. Schniotalle\Desktop\MiniToolBox.exe
[2012.09.26 23:03:52 | 000,000,512 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\MBR.dat
[2012.09.23 08:32:32 | 000,000,564 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2012.09.22 16:34:39 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\M. Schniotalle\Desktop\aswMBR.exe
[2012.09.22 13:47:58 | 000,001,318 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2012.09.22 13:47:22 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2012.09.22 12:40:25 | 000,001,098 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.09.22 11:31:00 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000Core.job
[2012.09.20 21:50:28 | 002,322,184 | ---- | M] (ESET) -- C:\Users\M. Schniotalle\Desktop\esetsmartinstaller_enu.exe
[2012.09.20 21:22:28 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012.09.20 21:04:49 | 004,754,465 | R--- | M] (Swearware) -- C:\Users\M. Schniotalle\Desktop\ComboFix.exe
[2012.09.20 20:31:27 | 000,512,737 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\adwcleaner.exe
[2012.09.20 17:13:17 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe
[2012.09.19 19:40:20 | 000,002,051 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\JDownloader.lnk
[2012.09.19 18:45:17 | 000,001,981 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.09.16 17:54:36 | 000,102,400 | ---- | M] () -- C:\Windows\RegBootClean.exe
[2012.09.16 13:17:34 | 000,002,458 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk
[2012.09.15 12:51:11 | 000,174,200 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2012.09.15 12:51:11 | 000,007,488 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2012.09.15 12:51:11 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2012.09.15 10:57:25 | 000,001,314 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\Norton-Installationsdateien.lnk
 
========== Files Created - No Company Name ==========
 
[2012.09.28 08:43:55 | 000,000,024 | RH-- | C] () -- C:\Windows\DELL_version
[2012.09.28 08:43:37 | 000,654,166 | ---- | C] () -- C:\Windows\SysNative\perfh007.dat
[2012.09.28 08:43:37 | 000,295,922 | ---- | C] () -- C:\Windows\SysNative\perfi007.dat
[2012.09.28 08:43:37 | 000,130,006 | ---- | C] () -- C:\Windows\SysNative\perfc007.dat
[2012.09.28 08:43:37 | 000,038,104 | ---- | C] () -- C:\Windows\SysNative\perfd007.dat
[2012.09.27 23:40:27 | 000,001,407 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012.09.27 23:40:18 | 000,001,441 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012.09.27 23:36:39 | 3190,050,816 | -HS- | C] () -- C:\hiberfil.sys
[2012.09.27 23:22:12 | 000,022,960 | ---- | C] () -- C:\Windows\SysNative\emptyregdb.dat
[2012.09.27 22:51:09 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012.09.27 22:51:06 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012.09.27 22:50:19 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2012.09.27 22:50:13 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012.09.27 21:21:53 | 000,026,405 | ---- | C] () -- C:\Windows\diagwrn.xml
[2012.09.27 21:21:53 | 000,001,890 | ---- | C] () -- C:\Windows\diagerr.xml
[2012.09.27 20:32:35 | 000,303,616 | ---- | C] ( ) -- C:\SetACL.exe
[2012.09.27 19:58:10 | 000,002,249 | ---- | C] () -- C:\Users\Public\Desktop\Tweaking.com - Windows Repair (All in One).lnk
[2012.09.27 19:45:50 | 000,006,640 | ---- | C] () -- C:\bootsqm.dat
[2012.09.22 17:06:19 | 000,000,512 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\MBR.dat
[2012.09.22 13:47:58 | 000,001,318 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2012.09.22 12:40:25 | 000,001,098 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.09.22 12:40:24 | 000,001,110 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012.09.22 11:26:32 | 000,001,156 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000UA.job
[2012.09.22 11:26:31 | 000,001,104 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000Core.job
[2012.09.20 21:11:42 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012.09.20 21:11:42 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012.09.20 21:11:42 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012.09.20 21:11:42 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012.09.20 21:11:42 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012.09.20 20:31:11 | 000,512,737 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\adwcleaner.exe
[2012.09.19 19:35:51 | 000,002,051 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\JDownloader.lnk
[2012.09.19 19:35:37 | 000,002,015 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2012.09.19 19:35:36 | 000,001,951 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
[2012.09.19 19:35:33 | 000,001,928 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2012.09.19 18:45:17 | 000,002,471 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2012.09.19 18:45:17 | 000,001,981 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.09.16 17:54:36 | 000,102,400 | ---- | C] () -- C:\Windows\RegBootClean.exe
[2012.09.16 13:16:57 | 002,182,120 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\Cat.DB
[2012.09.15 19:52:18 | 000,007,458 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnet64.cat
[2012.09.15 19:52:18 | 000,001,445 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnet.inf
[2012.09.15 19:52:17 | 000,007,492 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\iron.cat
[2012.09.15 19:52:17 | 000,007,462 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.cat
[2012.09.15 19:52:17 | 000,007,460 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.cat
[2012.09.15 19:52:17 | 000,007,458 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.cat
[2012.09.15 19:52:17 | 000,003,373 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa.inf
[2012.09.15 19:52:17 | 000,002,792 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds.inf
[2012.09.15 19:52:17 | 000,001,438 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.inf
[2012.09.15 19:52:17 | 000,001,422 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.inf
[2012.09.15 19:52:17 | 000,000,772 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\iron.inf
[2012.09.15 19:52:00 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.cat
[2012.09.15 19:51:58 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\isolate.ini
[2012.09.15 12:51:11 | 000,007,488 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2012.09.15 12:51:11 | 000,000,855 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2012.09.15 12:51:08 | 000,002,458 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk
[2012.02.10 21:58:47 | 000,471,040 | ---- | C] () -- C:\Windows\ssndii.exe
[2011.11.16 17:22:34 | 000,258,864 | ---- | C] () -- C:\Windows\SUPDRun.exe
[2011.10.27 17:15:20 | 000,001,650 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\MyMicroBalanceConfig.ini
[2011.07.26 17:26:46 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011.07.26 17:26:46 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011.07.26 17:26:46 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011.07.26 17:26:46 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011.06.04 15:18:01 | 000,299,520 | ---- | C] () -- C:\Windows\krtunins.exe
[2010.01.16 21:21:53 | 000,019,881 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\UserTile.png
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
========== LOP Check ==========
 
[2012.09.27 23:13:55 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Amazon
[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audacity
[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audio Record Edit Toolbox Pro
[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audio Recorder for Free
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Canon
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\convert
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\elsterformular
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\flightgear.org
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\fltk.org
[2010.12.14 17:30:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\GetRightToGo
[2012.09.27 23:14:08 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\PCDr
[2012.09.27 23:14:09 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Product_RM
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Registry Mechanic
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\SAD-Office-Vorlagen
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\SAD-Shared
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Samsung
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Subversion
[2012.08.22 08:55:50 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\temp
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Tific
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\TomTom
[2012.09.27 23:14:17 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Verbindungsassistent
[2012.09.27 23:14:17 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\WildTangent
[2010.01.14 21:06:01 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Windows Live Writer
 
========== Purity Check ==========
 
 

< End of report >

schrauber 28.09.2012 19:24
Downloade Dir bitte AdwCleaner auf deinen Desktop.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Suche.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

fuba2012 28.09.2012 19:51
hier ist der adw cleaner logfile:

gruß fuba2012

Code:
# AdwCleaner v2.003 - Datei am 09/28/2012 um 20:49:42 erstellt
# Aktualisiert am 23/09/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium  (64 bits)
# Benutzer : M. Schniotalle - MSCHNIOTALLE-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\M. Schniotalle\Desktop\adwcleaner.exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****


***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v15.0.1 (de)

Profilname : fußball
Datei : C:\Users\M. Schniotalle\AppData\Roaming\Mozilla\Firefox\Profiles\v9mdlsvp.default\prefs.js

[OK] Die Datei ist sauber.

Profilname : Standard-Benutzer [Profil par défaut]
Datei : C:\Users\M. Schniotalle\AppData\Roaming\Mozilla\Firefox\Profiles\m7klgx40.Standard-Benutzer\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v22.0.1229.79

Datei : C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [59374 octets] - [20/09/2012 20:32:55]
AdwCleaner[S1].txt - [58778 octets] - [20/09/2012 20:52:08]
AdwCleaner[R2].txt - [1241 octets] - [28/09/2012 20:49:42]

########## EOF - C:\AdwCleaner[R2].txt - [1301 octets] ##########

schrauber 28.09.2012 19:54
Fixen mit OTL
  • Starte die OTL.exe.
  • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
  • Kopiere folgendes Skript:
Code:
:OTL
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=orgnl&chnl=sware&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0Bzyzy0CtDtD0F0E0DyB0AtN0D0Tzu0CtBtAtCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1283767779
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://start.funmoods.com/results.php?f=4&q={searchTerms}&a=orgnl&chnl=sware&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0Bzyzy0CtDtD0F0E0DyB0AtN0D0Tzu0CtBtAtCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1283767779
IE - HKLM\..\SearchScopes\{7B52165A-95FA-F53F-0044-64DC99B02234}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKCU\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = hxxp://int.search-results.com/web?q={SEARCHTERMS}&o=15527&l=dis&prt=NIS&chn=retail&geo=DE&ver=18
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
:Commands
[emptytemp]

Besser? frisches OTL log bitte.

fuba2012 28.09.2012 20:26
tut mir ja echt Leid aber gut bzw. besser ist anders. Firefox und IE sind eher 'ne Zumutung. Aber Chrome ist nach wie vor okay.

gruß

fuba2012

Code:
OTL logfile created on: 28.09.2012 21:15:45 - Run 5
OTL by OldTimer - Version 3.2.64.0    Folder = C:\Users\M. Schniotalle\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,96 Gb Total Physical Memory | 2,35 Gb Available Physical Memory | 59,21% Memory free
7,92 Gb Paging File | 6,21 Gb Available in Paging File | 78,43% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218,20 Gb Total Space | 131,89 Gb Free Space | 60,44% Space Free | Partition Type: NTFS
Drive D: | 173,94 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: MSCHNIOTALLE-PC | User Name: M. Schniotalle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.09.22 13:47:19 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2012.09.20 17:13:17 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe
PRC - [2012.08.10 18:59:52 | 004,440,896 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\M. Schniotalle\AppData\Local\Akamai\netsession_win.exe
PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.01.23 06:43:08 | 000,247,728 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2012.01.23 06:43:08 | 000,092,592 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2011.04.17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
PRC - [2011.03.28 12:40:56 | 001,611,160 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
PRC - [2011.03.07 14:33:34 | 000,591,272 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE
PRC - [2011.02.07 09:56:11 | 000,138,192 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
PRC - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
PRC - [2010.02.23 11:01:28 | 000,329,168 | ---- | M] () -- C:\Program Files (x86)\Verbindungsassistent\WTGService.exe
PRC - [2010.02.09 13:34:00 | 001,807,680 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
PRC - [2009.12.15 22:14:56 | 001,169,904 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\Roxio Burn.exe
PRC - [2009.12.15 22:14:22 | 000,498,160 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2009.09.17 21:05:00 | 000,656,624 | ---- | M] (SoftThinks) -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
PRC - [2009.09.11 19:38:14 | 000,614,400 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
PRC - [2009.06.25 04:19:50 | 000,140,520 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009.06.09 18:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Programme\Dell\DellDock\DockLogin.exe
PRC - [2009.06.05 03:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009.06.05 03:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
PRC - [2007.05.21 12:12:48 | 000,078,696 | ---- | M] () -- C:\Program Files (x86)\MySecurityCenter\Programs\service.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.09.28 20:57:14 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\675c8bd801698993255d100c3b350d4b\System.Web.Services.ni.dll
MOD - [2012.09.28 20:51:50 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\009c50fb69919b90fb233cb4c35d0ad7\System.Windows.Forms.ni.dll
MOD - [2012.09.28 20:51:40 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ebefde27b0ef7f39bb49c493b34a602c\System.Drawing.ni.dll
MOD - [2012.09.28 20:51:12 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5c85c9c42e1b8a8760de82ecb4c7d582\System.Xml.ni.dll
MOD - [2012.09.28 20:51:07 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb079eab134fd1a752ad91db13274110\System.Configuration.ni.dll
MOD - [2012.09.28 20:51:06 | 007,952,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\2ebb3c259eab50af565e3a8dba6ad20e\System.ni.dll
MOD - [2012.09.28 20:50:57 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\5858678a79aae31262b0214424245d06\mscorlib.ni.dll
MOD - [2012.09.25 11:42:58 | 000,460,312 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\ppGoogleNaClPluginChrome.dll
MOD - [2012.09.25 11:42:55 | 004,005,912 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\pdf.dll
MOD - [2012.09.25 11:41:39 | 000,578,072 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\libglesv2.dll
MOD - [2012.09.25 11:41:38 | 000,123,416 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\libegl.dll
MOD - [2012.09.25 11:41:27 | 000,156,712 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avutil-51.dll
MOD - [2012.09.25 11:41:26 | 000,275,496 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avformat-54.dll
MOD - [2012.09.25 11:41:24 | 002,168,360 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avcodec-54.dll
MOD - [2011.06.24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.06.24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2010.02.09 13:34:00 | 001,807,680 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
MOD - [2010.02.09 13:34:00 | 000,365,888 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\de\DataSafeOnline.resources.dll
MOD - [2010.02.09 13:34:00 | 000,275,776 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll
MOD - [2010.02.09 13:34:00 | 000,152,896 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll
MOD - [2010.02.09 13:34:00 | 000,095,552 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll
MOD - [2010.02.09 13:34:00 | 000,046,400 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\de\SdbUI.resources.dll
MOD - [2010.02.09 13:34:00 | 000,017,728 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll
MOD - [2009.12.15 22:14:56 | 001,169,904 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\Roxio Burn.exe
MOD - [2009.12.15 22:14:22 | 000,498,160 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
MOD - [2009.12.15 22:13:56 | 000,588,272 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\BBEngineAS.dll
MOD - [2009.11.15 22:58:50 | 000,375,280 | ---- | M] () -- c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
MOD - [2009.09.11 20:05:00 | 000,058,608 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll
MOD - [2009.09.11 19:38:14 | 000,614,400 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
MOD - [2009.06.10 23:41:46 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2012.08.18 17:41:56 | 000,114,688 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\GFilterSvc.exe -- (GFilterSvc)
SRV:64bit: - [2012.08.18 17:41:55 | 000,106,496 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\perfos64.exe -- (TapiUnautend)
SRV:64bit: - [2010.08.09 04:04:10 | 000,166,704 | ---- | M] (Samsung Electronics CO., LTD.) [On_Demand | Stopped] -- C:\Windows\SysNative\SUPDSvc.exe -- (Samsung UPD Service)
SRV - [2012.09.06 03:25:06 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.01.23 06:43:08 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2011.08.02 11:47:14 | 000,159,232 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\USB Drivers\26_VIA_driver2\amd64\VIAService.exe -- (CDMA Device Service)
SRV - [2011.04.17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe -- (NIS)
SRV - [2011.02.07 09:56:11 | 000,138,192 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE -- (IJPLMSVC)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.23 11:01:28 | 000,329,168 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Verbindungsassistent\WTGService.exe -- (WTGService)
SRV - [2009.09.17 21:05:00 | 000,656,624 | ---- | M] (SoftThinks) [Auto | Running] -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE -- (SftService)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.06.09 18:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Programme\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2009.06.05 03:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON)
SRV - [2007.05.21 12:12:48 | 000,078,696 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\MySecurityCenter\Programs\service.exe -- (MySecurityCenter License Service)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.09.15 12:51:11 | 000,174,200 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2012.03.01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.06.15 09:10:14 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011.04.21 03:37:49 | 000,386,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys -- (SymNetS)
DRV:64bit: - [2011.03.31 05:04:12 | 000,043,640 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\SymIMV.sys -- (SymIM)
DRV:64bit: - [2011.03.31 05:00:09 | 000,744,568 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2011.03.31 05:00:09 | 000,040,568 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2011.03.15 04:31:23 | 000,912,504 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys -- (SymEFA)
DRV:64bit: - [2011.01.27 08:47:10 | 000,450,680 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys -- (SymDS)
DRV:64bit: - [2011.01.27 07:07:06 | 000,171,128 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys -- (SymIRON)
DRV:64bit: - [2010.04.15 14:40:10 | 000,301,688 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2009.09.28 09:22:00 | 000,395,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.09 04:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.06.03 05:16:56 | 007,333,472 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.05.14 02:51:40 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (NETw5v64)
DRV:64bit: - [2009.05.08 10:15:18 | 000,215,552 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2009.03.02 15:12:18 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT)
DRV:64bit: - [2006.11.01 20:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2005.11.03 16:40:56 | 000,089,600 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfvfs02.sys -- (sfvfs02)
DRV:64bit: - [2005.08.10 14:46:20 | 000,068,608 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01)
DRV:64bit: - [2005.05.16 15:21:16 | 000,007,168 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02)
DRV - [2012.09.27 21:00:16 | 002,084,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\VirusDefs\20120928.003\ex64.sys -- (NAVEX15)
DRV - [2012.09.27 21:00:16 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012.09.27 21:00:16 | 000,126,112 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\VirusDefs\20120928.003\eng64.sys -- (NAVENG)
DRV - [2012.09.15 13:45:50 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2012.09.14 08:41:34 | 000,513,184 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\IPSDefs\20120927.001\IDSviA64.sys -- (IDSVia64)
DRV - [2012.09.05 00:23:56 | 001,385,120 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\BASHDefs\20120919.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2010.11.18 02:34:58 | 000,025,072 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- c:\Programme\Dell Support Center\pcdsrvc_x64.pkms -- (PCDSRVC{1E208CE0-FB7451FF-06020101}_0)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{3C78FD94-E1BF-4881-812D-05DE5CB559CC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{7FC2AB76-6360-4921-BC0A-EBB47194BC05}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D4 33 5F 01 8B 9D CD 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.2: "1und1 Suche"
FF - prefs.js..browser.search.order.3: "amazon.de"
FF - prefs.js..browser.search.order.4: "WEB.DE Suche"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: toolbar@web.de:1.6.4
FF - prefs.js..extensions.enabledAddons: {7e111a5c-3d11-4f56-9463-5310c3c69025}:3.8.1.0
FF - prefs.js..extensions.enabledAddons: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.1
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: allglassv2@ambroos.neowin.net:2.1.4
FF - prefs.js..extensions.enabledItems: {95f24680-9e31-11da-a746-0800200c9a66}:0.1.5.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems:
FF - prefs.js..extensions.enabledItems: {7e111a5c-3d11-4f56-9463-5310c3c69025}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\M. Schniotalle\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\M. Schniotalle\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.09.27 23:01:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\coFFPlgn_2011_7_12_1 [2012.09.28 21:08:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.09.27 23:01:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\IPSFFPlgn\ [2012.09.28 21:08:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.27 22:59:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.09.27 22:59:58 | 000,000,000 | ---D | M]
 
[2012.09.27 23:14:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Extensions
[2011.07.17 12:25:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2012.09.20 17:07:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\m7klgx40.Standard-Benutzer\extensions
[2012.09.27 23:14:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\v9mdlsvp.default\extensions
[2012.09.27 23:14:08 | 000,000,000 | ---D | M] (Update Notifier) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\v9mdlsvp.default\extensions\{95f24680-9e31-11da-a746-0800200c9a66}
[2012.09.27 23:14:07 | 000,000,000 | ---D | M] ("All-Glass Firefox mod, based on Glasser") -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\v9mdlsvp.default\extensions\allglassv2@ambroos.neowin.net
[2011.11.07 21:48:53 | 000,543,495 | ---- | M] () (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\extensions\toolbar@web.de.xpi
[2011.12.15 19:39:23 | 000,644,152 | ---- | M] () (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2010.01.30 12:59:44 | 000,005,591 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\1und1-suche.xml
[2010.01.30 12:59:43 | 000,001,371 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\amazonde.xml
[2010.01.30 12:59:44 | 000,010,605 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\gmx-suche.xml
[2011.06.27 07:24:29 | 000,002,449 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\safesearch.xml
[2010.01.30 12:59:44 | 000,005,588 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\firefox\profiles\v9mdlsvp.default\searchplugins\webde-suche.xml
[2012.09.27 22:59:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.09.27 22:59:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012.09.27 22:59:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\ffxtlbr@babylon.com
File not found (No name found) -- C:\USERS\M. SCHNIOTALLE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V9MDLSVP.DEFAULT\EXTENSIONS\{7E111A5C-3D11-4F56-9463-5310C3C69025}
[2012.09.06 03:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.09.22 13:47:27 | 000,129,176 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll
[2012.09.06 04:07:37 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.06 04:07:37 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.09.06 04:07:37 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.09.06 04:07:37 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.14 21:53:00 | 000,000,158 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search the web.src
[2012.09.06 04:07:37 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.09.06 04:07:37 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\gcswf32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility for IJ (Enabled) = C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Java Deployment Toolkit 6.0.350.10 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
 
O1 HOSTS File: ([2012.09.20 21:22:28 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [Apoint] C:\Programme\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [setc] C:\Program Files (x86)\MySecurityCenter\Programs\setc.exe (MySecurityCenter)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\M. Schniotalle\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - Startup: C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk =  File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - Reg Error: Key error. File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE687837-BCDD-47F0-9DD3-7B2E77E57300}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.09.28 21:05:50 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.09.28 20:00:22 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\Shared
[2012.09.28 08:46:44 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2012.09.28 08:43:55 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oem
[2012.09.28 08:43:24 | 000,000,000 | ---D | C] -- C:\Windows\de-DE
[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer
[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\de-DE
[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\de
[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\0407
[2012.09.28 08:43:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE
[2012.09.28 08:43:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\0407
[2012.09.28 08:43:21 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\de
[2012.09.28 08:40:59 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui
[2012.09.28 08:40:40 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui
[2012.09.28 08:40:40 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui
[2012.09.28 08:40:40 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui
[2012.09.28 08:30:36 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~Q
[2012.09.28 08:25:34 | 000,000,000 | -H-D | C] -- C:\$INPLACE.~TR
[2012.09.27 23:38:40 | 000,000,000 | -HSD | C] -- C:\Recovery
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2012.09.27 22:51:31 | 000,000,000 | --SD | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Videos
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Saved Games
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Pictures
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Music
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Links
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Favorites
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Downloads
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Documents
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Desktop
[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Vorlagen
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Verlauf
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Temporary Internet Files
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Startmenü
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\SendTo
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Recent
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Netzwerkumgebung
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Lokale Einstellungen
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Videos
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Musik
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Eigene Dateien
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Bilder
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Druckumgebung
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Cookies
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Anwendungsdaten
[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Anwendungsdaten
[2012.09.27 22:51:31 | 000,000,000 | -H-D | C] -- C:\Users\M. Schniotalle\AppData
[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Temp
[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Microsoft
[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Media Center Programs
[2012.09.27 22:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\DellTPad
[2012.09.27 22:47:43 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2012.09.27 20:51:45 | 000,693,265 | ---- | C] (Farbar) -- C:\Users\M. Schniotalle\Desktop\FSS.exe
[2012.09.27 20:34:56 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2012.09.27 19:58:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
[2012.09.27 19:58:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tweaking.com
[2012.09.27 19:37:52 | 000,181,064 | ---- | C] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2012.09.27 19:37:05 | 000,000,000 | ---D | C] -- C:\Tweaking.com_Windows_Repair_Logs
[2012.09.27 19:07:04 | 000,751,391 | ---- | C] (Farbar) -- C:\Users\M. Schniotalle\Desktop\MiniToolBox.exe
[2012.09.27 19:01:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2012.09.22 22:51:12 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb
[2012.09.22 16:33:57 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\M. Schniotalle\Desktop\aswMBR.exe
[2012.09.22 13:47:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared
[2012.09.22 13:47:22 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2012.09.22 13:47:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
[2012.09.22 13:13:14 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LimeWire
[2012.09.22 13:10:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012.09.22 12:51:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LimeWire
[2012.09.22 12:50:26 | 000,000,000 | ---D | C] -- C:\LiWi
[2012.09.22 12:40:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012.09.22 11:37:32 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012.09.20 21:50:12 | 002,322,184 | ---- | C] (ESET) -- C:\Users\M. Schniotalle\Desktop\esetsmartinstaller_enu.exe
[2012.09.20 21:11:42 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012.09.20 21:11:42 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012.09.20 21:11:42 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012.09.20 21:11:38 | 000,000,000 | ---D | C] -- C:\ComboFix
[2012.09.20 21:11:33 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.09.20 21:11:15 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012.09.20 21:04:12 | 004,754,465 | R--- | C] (Swearware) -- C:\Users\M. Schniotalle\Desktop\ComboFix.exe
[2012.09.20 17:13:08 | 000,600,064 | ---- | C] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe
[2012.09.19 19:52:53 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Malwarebytes
[2012.09.19 19:52:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.09.19 19:34:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DownloadManager
[2012.09.19 18:44:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2012.09.19 18:44:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2012.09.18 21:22:44 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\convert
[2012.09.16 19:20:23 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Real
[2012.09.16 17:27:57 | 000,200,976 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysWow64\drivers\tmcomm.sys
[2012.09.16 14:36:41 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Apps
[2012.09.15 19:52:18 | 000,386,168 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys
[2012.09.15 19:52:17 | 000,912,504 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys
[2012.09.15 19:52:17 | 000,744,568 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys
[2012.09.15 19:52:17 | 000,450,680 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys
[2012.09.15 19:52:17 | 000,171,128 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys
[2012.09.15 19:52:17 | 000,040,568 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys
[2012.09.15 19:51:58 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64\1207020.003
[2012.09.15 14:01:45 | 000,043,640 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SymIMV.sys
[2012.09.15 12:51:11 | 000,174,200 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2012.09.15 12:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2012.09.15 12:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2012.09.15 12:50:49 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64
[2012.09.15 12:50:47 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
[2012.09.15 12:50:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Internet Security
[2012.09.15 12:50:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
[2012.09.15 11:10:19 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Freeware.de
[2012.09.10 18:47:58 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\WildTangent
[2012.09.08 15:24:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2010.01.14 19:46:35 | 008,656,832 | ---- | C] (Dell, Inc.                                                  ) -- C:\Users\M. Schniotalle\AppData\Roaming\DataSafeDotNet.exe
 
========== Files - Modified Within 30 Days ==========
 
[2012.09.28 21:15:48 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.28 21:15:48 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.28 21:13:00 | 000,001,126 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.09.28 21:08:33 | 000,001,122 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.09.28 21:07:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.09.28 21:07:28 | 3190,050,816 | -HS- | M] () -- C:\hiberfil.sys
[2012.09.28 20:49:21 | 000,002,052 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012.09.28 20:48:43 | 001,611,160 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.09.28 20:48:43 | 000,696,370 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.09.28 20:48:43 | 000,651,648 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.09.28 20:48:43 | 000,147,634 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.09.28 20:48:43 | 000,120,580 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.09.28 20:47:49 | 002,187,610 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\Cat.DB
[2012.09.28 20:47:19 | 000,513,501 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\adwcleaner.exe
[2012.09.28 20:32:03 | 000,311,432 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.09.28 20:19:51 | 001,589,182 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.09.28 19:31:01 | 000,001,156 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000UA.job
[2012.09.28 17:50:55 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2012.09.28 17:50:54 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2012.09.28 08:43:11 | 000,295,922 | ---- | M] () -- C:\Windows\SysNative\perfi007.dat
[2012.09.28 08:43:11 | 000,038,104 | ---- | M] () -- C:\Windows\SysNative\perfd007.dat
[2012.09.27 23:35:17 | 000,039,252 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2012.09.27 23:35:17 | 000,039,252 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2012.09.27 23:22:12 | 000,022,960 | ---- | M] () -- C:\Windows\SysNative\emptyregdb.dat
[2012.09.27 22:50:19 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2012.09.27 22:50:13 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012.09.27 21:31:31 | 000,026,405 | ---- | M] () -- C:\Windows\diagwrn.xml
[2012.09.27 21:31:31 | 000,001,890 | ---- | M] () -- C:\Windows\diagerr.xml
[2012.09.27 20:51:53 | 000,693,265 | ---- | M] (Farbar) -- C:\Users\M. Schniotalle\Desktop\FSS.exe
[2012.09.27 20:36:41 | 000,196,608 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2012.09.27 20:34:59 | 000,181,064 | ---- | M] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2012.09.27 19:58:10 | 000,002,249 | ---- | M] () -- C:\Users\Public\Desktop\Tweaking.com - Windows Repair (All in One).lnk
[2012.09.27 19:45:50 | 000,006,640 | ---- | M] () -- C:\bootsqm.dat
[2012.09.27 19:07:16 | 000,751,391 | ---- | M] (Farbar) -- C:\Users\M. Schniotalle\Desktop\MiniToolBox.exe
[2012.09.26 23:03:52 | 000,000,512 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\MBR.dat
[2012.09.23 08:32:32 | 000,000,564 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2012.09.22 16:34:39 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\M. Schniotalle\Desktop\aswMBR.exe
[2012.09.22 13:47:58 | 000,001,318 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2012.09.22 13:47:22 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2012.09.22 12:40:25 | 000,001,098 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.09.22 11:31:00 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000Core.job
[2012.09.20 21:50:28 | 002,322,184 | ---- | M] (ESET) -- C:\Users\M. Schniotalle\Desktop\esetsmartinstaller_enu.exe
[2012.09.20 21:22:28 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012.09.20 21:04:49 | 004,754,465 | R--- | M] (Swearware) -- C:\Users\M. Schniotalle\Desktop\ComboFix.exe
[2012.09.20 17:13:17 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe
[2012.09.19 19:40:20 | 000,002,051 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\JDownloader.lnk
[2012.09.19 18:45:17 | 000,001,981 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.09.16 17:54:36 | 000,102,400 | ---- | M] () -- C:\Windows\RegBootClean.exe
[2012.09.16 13:17:34 | 000,002,458 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk
[2012.09.15 12:51:11 | 000,174,200 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2012.09.15 12:51:11 | 000,007,488 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2012.09.15 12:51:11 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2012.09.15 10:57:25 | 000,001,314 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\Norton-Installationsdateien.lnk
 
========== Files Created - No Company Name ==========
 
[2012.09.28 20:49:21 | 000,002,052 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012.09.28 20:46:50 | 000,513,501 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\adwcleaner.exe
[2012.09.28 20:36:44 | 000,001,441 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012.09.28 20:18:19 | 001,589,182 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.09.28 17:50:55 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2012.09.28 17:50:54 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2012.09.28 08:43:55 | 000,000,024 | RH-- | C] () -- C:\Windows\DELL_version
[2012.09.28 08:43:37 | 000,696,370 | ---- | C] () -- C:\Windows\SysNative\perfh007.dat
[2012.09.28 08:43:37 | 000,295,922 | ---- | C] () -- C:\Windows\SysNative\perfi007.dat
[2012.09.28 08:43:37 | 000,147,634 | ---- | C] () -- C:\Windows\SysNative\perfc007.dat
[2012.09.28 08:43:37 | 000,038,104 | ---- | C] () -- C:\Windows\SysNative\perfd007.dat
[2012.09.27 23:40:27 | 000,001,407 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012.09.27 23:36:39 | 3190,050,816 | -HS- | C] () -- C:\hiberfil.sys
[2012.09.27 23:22:12 | 000,022,960 | ---- | C] () -- C:\Windows\SysNative\emptyregdb.dat
[2012.09.27 22:51:09 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012.09.27 22:51:06 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012.09.27 22:50:19 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2012.09.27 22:50:13 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012.09.27 21:21:53 | 000,026,405 | ---- | C] () -- C:\Windows\diagwrn.xml
[2012.09.27 21:21:53 | 000,001,890 | ---- | C] () -- C:\Windows\diagerr.xml
[2012.09.27 20:32:35 | 000,303,616 | ---- | C] ( ) -- C:\SetACL.exe
[2012.09.27 19:58:10 | 000,002,249 | ---- | C] () -- C:\Users\Public\Desktop\Tweaking.com - Windows Repair (All in One).lnk
[2012.09.27 19:45:50 | 000,006,640 | ---- | C] () -- C:\bootsqm.dat
[2012.09.22 17:06:19 | 000,000,512 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\MBR.dat
[2012.09.22 13:47:58 | 000,001,318 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2012.09.22 12:40:25 | 000,001,098 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.09.22 12:40:24 | 000,001,110 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012.09.22 11:26:32 | 000,001,156 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000UA.job
[2012.09.22 11:26:31 | 000,001,104 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000Core.job
[2012.09.20 21:11:42 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012.09.20 21:11:42 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012.09.20 21:11:42 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012.09.20 21:11:42 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012.09.20 21:11:42 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012.09.19 19:35:51 | 000,002,051 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\JDownloader.lnk
[2012.09.19 19:35:37 | 000,002,015 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2012.09.19 19:35:36 | 000,001,951 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
[2012.09.19 19:35:33 | 000,001,928 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2012.09.19 18:45:17 | 000,002,471 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2012.09.19 18:45:17 | 000,001,981 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.09.16 17:54:36 | 000,102,400 | ---- | C] () -- C:\Windows\RegBootClean.exe
[2012.09.16 13:16:57 | 002,187,610 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\Cat.DB
[2012.09.15 19:52:18 | 000,007,458 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnet64.cat
[2012.09.15 19:52:18 | 000,001,445 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnet.inf
[2012.09.15 19:52:17 | 000,007,492 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\iron.cat
[2012.09.15 19:52:17 | 000,007,462 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.cat
[2012.09.15 19:52:17 | 000,007,460 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.cat
[2012.09.15 19:52:17 | 000,007,458 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.cat
[2012.09.15 19:52:17 | 000,003,373 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa.inf
[2012.09.15 19:52:17 | 000,002,792 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds.inf
[2012.09.15 19:52:17 | 000,001,438 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.inf
[2012.09.15 19:52:17 | 000,001,422 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.inf
[2012.09.15 19:52:17 | 000,000,772 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\iron.inf
[2012.09.15 19:52:00 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.cat
[2012.09.15 19:51:58 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\isolate.ini
[2012.09.15 12:51:11 | 000,007,488 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2012.09.15 12:51:11 | 000,000,855 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2012.09.15 12:51:08 | 000,002,458 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk
[2012.02.10 21:58:47 | 000,471,040 | ---- | C] () -- C:\Windows\ssndii.exe
[2011.11.16 17:22:34 | 000,258,864 | ---- | C] () -- C:\Windows\SUPDRun.exe
[2011.10.27 17:15:20 | 000,001,650 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\MyMicroBalanceConfig.ini
[2011.07.26 17:26:46 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011.07.26 17:26:46 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011.07.26 17:26:46 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011.07.26 17:26:46 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011.06.04 15:18:01 | 000,299,520 | ---- | C] () -- C:\Windows\krtunins.exe
[2010.01.16 21:21:53 | 000,019,881 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\UserTile.png
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
========== LOP Check ==========
 
[2012.09.27 23:13:55 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Amazon
[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audacity
[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audio Record Edit Toolbox Pro
[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audio Recorder for Free
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Canon
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\convert
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\elsterformular
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\flightgear.org
[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\fltk.org
[2010.12.14 17:30:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\GetRightToGo
[2012.09.27 23:14:08 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\PCDr
[2012.09.27 23:14:09 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Product_RM
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Registry Mechanic
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\SAD-Office-Vorlagen
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\SAD-Shared
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Samsung
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Subversion
[2012.08.22 08:55:50 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\temp
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Tific
[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\TomTom
[2012.09.27 23:14:17 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Verbindungsassistent
[2012.09.27 23:14:17 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\WildTangent
[2010.01.14 21:06:01 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Windows Live Writer
 
========== Purity Check ==========
 
 

< End of report >

schrauber 29.09.2012 09:03
Irgendwie versteh ich das Ganze noch nit. Die allgemeine Internetverbindung inkl aller Einstellungen fällt raus, da Chrome geht, der andere PC geht. Und diese Einstellungen wurden schon geprüft. Du hast auch kein IpV6 drin.

Starte bitte mal Firefox im Safe Mode, also ohne Erweiterungen, genauso IE im Safe Mode. Kein Stück besser?

fuba2012 29.09.2012 11:58
Guten Morgen,

wenn der Safe Mode ohne add-ons bedeutet dann:
ist der IE die ganze Zeit schon ohne gelaufen - d.h. sie waren deaktiviert und bei mozilla läßt sich der Browser gar nicht mehr starten. Er fragt nach: "Firefox ohne add-ons starten?" beim Ja-Klick schließt er dieses Fenster, lädt kurz und bricht ab, dann passiert nix mehr.

Gruß
fuba2012


Alle Zeitangaben in WEZ +1. Es ist jetzt 14:09 Uhr.
Seite 2 von 7 1 2 34 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131