Trojaner-Board - Facebook-Link angeklickt "Just 14 years Old drunk girl .."

Hallo Schrauber,
bisher keine Auffälligkeiten ;-) ...ich habe aber mal zur Sicherheit über den anderen Rechner first drüberlaufen lassen ...
FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-08-2013 02

Ran by erich (administrator) on 12-08-2013 10:35:47

Running from P:\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

(REINER SCT) C:\Windows\system32\cjpcsc.exe

() C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe

(EgisTec Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\MWLService.exe

(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Prolific Technology Inc.) C:\Windows\system32\IoctlSvc.exe

() C:\Windows\system32\PSIService.exe

(Motorola) C:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe

() C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe

() C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe

() C:\Program Files\CyberLink\Shared Files\RichVideo.exe

(Buhl Data Service GmbH) C:\Program Files\Sceneo\AbsolutTV\Services\PVR\PVRService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(LaCrosse Technology) C:\Program Files\HeavyWeatherWV5\HeavyWeatherService.exe

(X10) C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(OpenLimit SignCubes AG) C:\Program Files\AusweisApp\siqBootLoader.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

() C:\Program Files\Buhl finance\tax Steuersoftware 2013\taxaktuell.exe

(WinZip Computing, S.L.) C:\Program Files\WinZip\WZQKPICK32.EXE

(Microsoft Corporation) C:\Windows\ehome\ehsched.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe

(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Avira Operations GmbH & Co. KG) C:\program files\avira\antivir desktop\ipmGui.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_11_7_700_169_ActiveX.exe

(Microsoft Corporation) C:\Windows\system32\sdclt.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6265376 2008-07-24] (Realtek Semiconductor)

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [ZoneAlarm] - C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe [73832 2013-01-29] (Check Point Software Technologies LTD)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-07] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [ISW] - C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [738984 2012-11-22] (Check Point Software Technologies)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [247728 2011-04-22] (TomTom)

HKCU\...\Run: [] -  [x]

HKCU\...\Run: [AusweisApp] - C:\Program Files\AusweisApp\siqBootLoader.exe [2514560 2013-05-27] (OpenLimit SignCubes AG)

MountPoints2: {61fa1aaf-ccab-11e1-bee8-001f1613fcd5} - G:\setup.exe -a

MountPoints2: {ca929a41-ad8e-11e1-b3b5-806e6f6e6963} - E:\.\windows\setup.exe .\windows

HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)

Lsa: [Notification Packages] 

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\t@x aktuell.lnk

ShortcutTarget: t@x aktuell.lnk -> C:\Program Files\Buhl finance\tax Steuersoftware 2013\taxaktuell.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk

ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files\WinZip\WZQKPICK32.EXE (WinZip Computing, S.L.)

Startup: C:\Users\erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk

ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI

URLSearchHook: (No Name) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File

URLSearchHook: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)

SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050

SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch

SearchScopes: HKCU - {1F096B29-E9DA-4D64-8D63-936BE7762CC5} URL = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=b2971a31000000000000001f160aed3e&tlver=1.4.19.19&affID=17161

SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050

SearchScopes: HKCU - {CF739809-1C6C-47C0-85B9-569DBB141420} URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?gct=&gc=1&q={searchTerms}&crm=1&toolbar=DVS

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MI1933~1\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)

BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MI1933~1\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: AusweisApp 1.8.0.0 - {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} - C:\Program Files\AusweisApp\siqeCardClient.ols (OpenLimit SignCubes AG)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - No Name - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File

Toolbar: HKLM - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)

Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} -  No File

Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

Toolbar: HKCU -DVDVideoSoftTB Toolbar - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)

Toolbar: HKCU -No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File

Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} -  No File

Toolbar: HKCU -ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default

FF user.js: detected! => C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\user.js

FF SelectedSearchEngine: Google

FF Homepage: hxxp://www.google.de/

FF NetworkProxy: "no_proxies_on", "*.local"

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MI1933~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MI1933~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin: @reiner-sct.com/OWOK,version=2.0.0.4 - C:\Program Files\REINER SCT\OWOK\NPAPI-20\nprsct_owok_npapi-2004.dll (REINER Kartengeräte GmbH und Co. KG.)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\11-suche.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\conduit.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\englische-ergebnisse.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\gmx-suche.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\lastminute.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\webde-suche.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\zonealarm.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml

FF Extension: No Name - C:\Users\erich\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com

FF Extension: No Name - C:\Users\erich\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: zonealarm.com - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\ffxtlbr@zonealarm.com

FF Extension: Garmin Communicator - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

FF Extension: DVDVideoSoftTB Community Toolbar - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}

FF Extension: PriceGong - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}

FF Extension: No Name - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi

FF Extension: No Name - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\TrustChecker

FF Extension: ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker

FF HKLM\...\Firefox\Extensions: [{4F3D26C8-9907-48ff-BC74-B8C572D317BF}] C:\Program Files\AusweisApp\mozilla\eCardClientExt_FFxx_Win

FF Extension: AusweisApp - C:\Program Files\AusweisApp\mozilla\eCardClientExt_FFxx_Win

FF HKLM\...\Firefox\Extensions: [{4F0963A3-1658-4fde-9585-23A25CC288BF}] C:\Program Files\AusweisApp\mozilla\eCardClientPIn_FFxx_Win

FF Extension: AusweisApp - C:\Program Files\AusweisApp\mozilla\eCardClientPIn_FFxx_Win
 

========================== Services (Whitelisted) =================
 

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2008-07-03] (ArcSoft Inc.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-07] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-07] (Avira Operations GmbH & Co. KG)

R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144672 2009-08-28] (Apple Inc.)

R2 cjpcsc; C:\Windows\system32\cjpcsc.exe [514128 2012-03-19] (REINER SCT)

R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [497320 2012-11-22] (Check Point Software Technologies)

R2 Motorola Device Manager; C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [116632 2012-07-17] ()

R2 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [304688 2008-08-04] (EgisTec Inc.)

R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)

S2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()

R2 PST Service; C:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola)

R2 Radio.fx; C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()

R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [241734 2008-06-29] ()

R2 srvcPVR; C:\Program Files\Sceneo\AbsolutTV\Services\PVR\PVRService.exe [1801216 2008-02-28] (Buhl Data Service GmbH)

R2 vsmon; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe [2447888 2013-01-29] (Check Point Software Technologies LTD)

R2 WV5Communication; C:\Program Files\HeavyWeatherWV5\HeavyWeatherService.exe [1843712 2011-01-18] (LaCrosse Technology)

R2 x10nets; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [20480 2001-11-12] (X10)

S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [x]
 

==================== Drivers (Whitelisted) ====================
 

R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-04-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-04-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-02] (Avira Operations GmbH & Co. KG)

R1 bizVSerial; C:\Windows\System32\drivers\bizVSerialNT.sys [14949 2007-05-31] (franson.biz)

R3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [28144 2011-03-29] (REINER SCT)

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14216 2010-07-15] ()

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [8456 2010-07-15] ()

S2 FPSensor; C:\Windows\System32\Drivers\FPSensor.sys [26920 2008-08-28] (LTT)

R0 FPWinIo; C:\Windows\System32\DRIVERS\FPWinIo.sys [66856 2008-08-28] ()

R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [27056 2012-11-22] (Check Point Software Technologies)

S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [29272 2010-09-07] (Abelssoft GmbH)

R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [133208 2012-01-09] (Kaspersky Lab ZAO)

R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11352 2012-01-09] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [468272 2012-01-09] (Kaspersky Lab)

S3 motandroidusb; C:\Windows\System32\Drivers\motoandroid.sys [25856 2009-07-10] (Motorola)

S3 MTOnlPktAlyX; C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [17536 2006-10-09] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

R2 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [19504 2008-08-04] (Egis Incorporated.)

R2 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2008-08-04] (Egis Incorporated.)

R2 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [59952 2008-08-04] (Egis Incorporated.)

S3 PhilCap; C:\Windows\System32\DRIVERS\PhilCap.sys [908896 2007-07-31] (NXP Semiconductors Germany GmbH)

S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [89256 2008-05-16] (MCCI Corporation)

S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [15016 2008-05-16] (MCCI Corporation)

S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [120744 2008-05-16] (MCCI Corporation)

S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [114216 2008-05-16] (MCCI Corporation)

S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [25512 2008-05-16] (MCCI Corporation)

S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [110632 2008-05-16] (MCCI Corporation)

S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [115752 2008-05-16] (MCCI Corporation)

S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1753984 2008-07-10] ()

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [451160 2012-12-13] (Check Point Software Technologies LTD)

R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)

S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-12 10:27 - 2013-08-12 10:27 - 00000000 ____D C:\FRST

2013-08-12 10:25 - 2013-08-12 10:25 - 01068593 _____ (Farbar) P:\Desktop\FRST.exe

2013-08-11 21:03 - 2013-08-11 21:03 - 00000000 ____D C:\Users\KLAPPE~1\AppData\Local\{57797632-B8D8-4AEC-9DEB-898112A6D03B}

2013-08-10 22:41 - 2013-08-11 21:34 - 00000000 ____D C:\Users\erich\.ausweisapp

2013-08-10 22:41 - 2013-08-10 22:41 - 00000807 _____ C:\Users\Public\Desktop\AusweisApp.lnk

2013-08-10 22:41 - 2013-08-10 22:41 - 00000807 _____ C:\ProgramData\Desktop\AusweisApp.lnk

2013-08-10 22:40 - 2013-08-10 22:41 - 00000000 ____D C:\Program Files\AusweisApp

2013-08-10 22:37 - 2013-08-10 22:39 - 63411200 _____ P:\Desktop\AusweisApp_011100_Windows.msi

2013-08-10 22:24 - 2013-08-10 22:24 - 00000026 _____ C:\Windows\cJCC.INI

2013-08-10 21:57 - 2013-08-10 22:14 - 00652880 _____ P:\Desktop\rsct_owok_npapi_windows-2004-1.exe

2013-08-10 21:52 - 2013-08-10 21:53 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-08-10 21:33 - 2013-08-10 21:33 - 00002077 _____ C:\Users\Public\Desktop\Google Earth.lnk

2013-08-10 21:33 - 2013-08-10 21:33 - 00002077 _____ C:\ProgramData\Desktop\Google Earth.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00005226 _____ C:\Windows\DPINST.LOG

2013-08-10 21:27 - 2013-08-10 21:27 - 00000932 _____ C:\Users\Public\Desktop\cyberJack Gerätemanager,  Funktionstest.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00000932 _____ C:\ProgramData\Desktop\cyberJack Gerätemanager,  Funktionstest.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00000396 _____ C:\Windows\hbcikrnl.ini

2013-08-10 21:27 - 2011-03-29 11:08 - 00028144 _____ (REINER SCT) C:\Windows\system32\Drivers\cjusb.sys

2013-08-10 21:27 - 2009-11-09 09:48 - 00061952 _____ ( REINER SCT) C:\Windows\system32\cjtpl.cpl

2013-08-10 21:25 - 2013-08-10 21:58 - 00000000 ____D C:\Program Files\REINER SCT

2013-08-10 21:25 - 2012-03-19 21:58 - 00514128 _____ (REINER SCT) C:\Windows\system32\cjpcsc.exe

2013-08-10 21:25 - 2012-02-22 15:50 - 00058442 _____ C:\Windows\system32\cjbc_en.lan

2013-08-10 21:25 - 2012-02-22 15:48 - 00063069 _____ C:\Windows\system32\cjbc_de.lan

2013-08-10 21:25 - 2012-02-19 19:32 - 00713648 _____ (REINER SCT) C:\Windows\system32\cjpcscui.exe

2013-08-10 21:25 - 2012-02-14 11:48 - 00786352 _____ (REINER SCT) C:\Windows\system32\cjpcsc32.dll

2013-08-10 21:25 - 2012-02-14 11:48 - 00352688 _____ (REINER SCT) C:\Windows\system32\ctrsct32.dll

2013-08-10 21:25 - 2012-02-14 11:48 - 00215472 _____ ( Reiner Kartengeräte GmbH & Co.KG) C:\Windows\system32\cjeca32.dll

2013-08-10 21:25 - 2012-02-14 11:48 - 00208816 _____ (Reiner Kartengeräte GmbH) C:\Windows\system32\cjppa32.dll

2013-08-10 21:25 - 2012-02-14 11:48 - 00053680 _____ (REINER SCT) C:\Windows\system32\cjKbBase.dll

2013-08-10 21:25 - 2012-02-14 11:47 - 00063408 _____ (REINER SCT) C:\Windows\system32\cjpcscli.exe

2013-08-10 21:25 - 2011-07-22 07:50 - 00359856 _____ (REINER SCT) C:\Windows\system32\zkasigct.dll

2013-08-10 21:25 - 2010-02-10 19:39 - 00269824 ____N (REINER SCT) C:\Windows\system32\rsct_pnp.dll

2013-08-10 21:25 - 2009-03-09 17:17 - 00274224 ____N (REINER SCT) C:\Windows\system32\gkapi.dll

2013-08-10 21:25 - 2008-03-25 09:24 - 00060702 ____N C:\Windows\system32\rsct_pv_start.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00060702 ____N C:\Windows\system32\rsct_mv_start.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00013084 ____N C:\Windows\system32\rsct_key_clear.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00013026 ____N C:\Windows\system32\rsct_key_err.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00004636 ____N C:\Windows\system32\rsct_key_1.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00000656 ____N C:\Windows\system32\rsct_key.wav

2013-08-10 21:25 - 2008-03-19 13:48 - 00033136 ____N C:\Windows\system32\rsct_pv_stop.wav

2013-08-10 21:25 - 2008-03-19 13:48 - 00033136 ____N C:\Windows\system32\rsct_mv_stop.wav

2013-08-10 21:25 - 2007-11-07 12:20 - 00344064 ____N (REINER SCT) C:\Windows\system32\SetupHBCI.exe

2013-08-10 21:25 - 2007-11-07 12:20 - 00196608 ____N (REINER SCT) C:\Windows\system32\rsct_pnp.exe

2013-08-10 21:25 - 2007-05-31 07:38 - 00434252 ____N (Microsoft Corporation) C:\Windows\system32\MSVCRTD.DLL

2013-08-10 21:25 - 2007-05-31 07:38 - 00167936 ____N () C:\Windows\system32\SerialXP.dll

2013-08-10 21:25 - 2007-05-31 07:38 - 00151552 ____N (REINER SCT) C:\Windows\system32\OcfCopy.exe

2013-08-10 21:25 - 2007-05-31 07:38 - 00053248 ____N (REINER SCT) C:\Windows\system32\cjtrm.dll

2013-08-10 21:25 - 2007-05-31 07:38 - 00041472 ____N (IBM Corporation) C:\Windows\system32\ocfpcsc1.dll

2013-08-10 21:25 - 2007-05-31 07:38 - 00027648 ____N C:\Windows\system32\win32com.dll

2013-08-10 21:25 - 2007-05-31 07:38 - 00014949 ____N (franson.biz) C:\Windows\system32\Drivers\bizVSerialNT.sys

2013-08-10 21:24 - 2013-08-10 21:25 - 00000000 ____D C:\ProgramData\REINER SCT

2013-08-10 21:21 - 2013-08-10 21:20 - 11042768 _____ (Macrovision Corporation) P:\Desktop\bc_6_10_0_SP_2.exe

2013-08-10 21:06 - 2013-08-10 21:06 - 00000000 ____D C:\Users\KLAPPE~1\AppData\Local\{98F9AF9B-4A33-4106-BB3C-04283FEBF4AC}

2013-07-28 13:41 - 2013-07-28 13:41 - 00001999 _____ C:\Users\Public\Desktop\t@x 2013.lnk

2013-07-28 13:41 - 2013-07-28 13:41 - 00001999 _____ C:\ProgramData\Desktop\t@x 2013.lnk

2013-07-28 13:39 - 2013-07-28 13:39 - 00000000 ____D C:\Users\KLAPPE~1\AppData\Local\{5762BFD1-AF0A-451C-A8F2-22668383F0E1}

2013-07-28 13:29 - 2013-07-28 13:28 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-07-28 13:29 - 2013-07-28 13:28 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-07-28 13:29 - 2013-07-28 13:28 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-07-28 13:29 - 2013-07-28 13:28 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-07-28 12:55 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-07-28 12:55 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-07-28 12:55 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-07-28 12:55 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-07-28 12:55 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-07-28 12:55 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-07-28 12:55 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-07-28 12:55 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-07-28 12:55 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-07-28 12:55 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-07-28 12:55 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-07-28 12:55 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-07-28 12:54 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-07-28 12:54 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-07-28 12:54 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-07-28 12:54 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-07-28 12:45 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-07-28 12:45 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-07-28 12:45 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-07-28 12:45 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-07-28 12:45 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-07-28 12:45 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-07-28 12:45 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-07-28 12:45 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-07-28 12:45 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-07-28 12:45 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-07-28 12:45 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-07-28 12:45 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
 

==================== One Month Modified Files and Folders =======
 

2013-08-12 10:35 - 2013-08-12 10:32 - 00028888 _____ P:\Desktop\Addition.txt

2013-08-12 10:35 - 2008-08-28 07:26 - 00000438 ____H C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job

2013-08-12 10:29 - 2010-02-01 14:42 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-12 10:27 - 2013-08-12 10:27 - 00000000 ____D C:\FRST

2013-08-12 10:25 - 2013-08-12 10:25 - 01068593 _____ (Farbar) P:\Desktop\FRST.exe

2013-08-12 10:20 - 2008-11-09 23:02 - 01380769 _____ C:\Windows\WindowsUpdate.log

2013-08-12 10:11 - 2006-11-02 14:37 - 00000000 ___RD C:\Users\Public\Recorded TV

2013-08-12 10:10 - 2010-02-01 14:41 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-12 10:10 - 2008-08-28 06:22 - 00000000 ____D C:\ProgramData\NVIDIA

2013-08-12 10:10 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-12 10:10 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-12 10:10 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-12 10:09 - 2012-06-10 13:59 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-08-11 22:07 - 2008-08-28 04:21 - 00000012 _____ C:\Windows\bthservsdp.dat

2013-08-11 22:07 - 2006-11-02 15:01 - 00032558 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-11 21:34 - 2013-08-10 22:41 - 00000000 ____D C:\Users\erich\.ausweisapp

2013-08-11 21:03 - 2013-08-11 21:03 - 00000000 ____D C:\Users\erich\AppData\Local\{57797632-B8D8-4AEC-9DEB-898112A6D03B}

2013-08-10 22:41 - 2013-08-10 22:41 - 00000807 _____ C:\Users\Public\Desktop\AusweisApp.lnk

2013-08-10 22:41 - 2013-08-10 22:41 - 00000807 _____ C:\ProgramData\Desktop\AusweisApp.lnk

2013-08-10 22:41 - 2013-08-10 22:40 - 00000000 ____D C:\Program Files\AusweisApp

2013-08-10 22:41 - 2008-11-09 23:01 - 00000000 ____D C:\Users\erich

2013-08-10 22:39 - 2013-08-10 22:37 - 63411200 _____ P:\Desktop\AusweisApp_011100_Windows.msi

2013-08-10 22:24 - 2013-08-10 22:24 - 00000026 _____ C:\Windows\cJCC.INI

2013-08-10 22:14 - 2013-08-10 21:57 - 00652880 _____ P:\Desktop\rsct_owok_npapi_windows-2004-1.exe

2013-08-10 21:58 - 2013-08-10 21:25 - 00000000 ____D C:\Program Files\REINER SCT

2013-08-10 21:53 - 2013-08-10 21:52 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-08-10 21:33 - 2013-08-10 21:33 - 00002077 _____ C:\Users\Public\Desktop\Google Earth.lnk

2013-08-10 21:33 - 2013-08-10 21:33 - 00002077 _____ C:\ProgramData\Desktop\Google Earth.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00005226 _____ C:\Windows\DPINST.LOG

2013-08-10 21:27 - 2013-08-10 21:27 - 00000932 _____ C:\Users\Public\Desktop\cyberJack Gerätemanager,  Funktionstest.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00000932 _____ C:\ProgramData\Desktop\cyberJack Gerätemanager,  Funktionstest.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00000396 _____ C:\Windows\hbcikrnl.ini

2013-08-10 21:25 - 2013-08-10 21:24 - 00000000 ____D C:\ProgramData\REINER SCT

2013-08-10 21:25 - 2008-08-28 06:25 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2013-08-10 21:20 - 2013-08-10 21:21 - 11042768 _____ (Macrovision Corporation) P:\Desktop\bc_6_10_0_SP_2.exe

2013-08-10 21:06 - 2013-08-10 21:06 - 00000000 ____D C:\Users\erichE~1\AppData\Local\{98F9AF9B-4A33-4106-BB3C-04283FEBF4AC}

2013-07-28 19:54 - 2006-11-02 12:33 - 00006100 _____ C:\Windows\system32\PerfStringBackup.INI

2013-07-28 13:55 - 2008-08-28 12:33 - 00001713 _____ C:\Windows\WISO.INI

2013-07-28 13:55 - 2008-08-28 12:33 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH

2013-07-28 13:41 - 2013-07-28 13:41 - 00001999 _____ C:\Users\Public\Desktop\t@x 2013.lnk

2013-07-28 13:41 - 2013-07-28 13:41 - 00001999 _____ C:\ProgramData\Desktop\t@x 2013.lnk

2013-07-28 13:41 - 2011-09-18 12:27 - 00000000 ____D C:\Users\erich\AppData\Local\Buhl

2013-07-28 13:39 - 2013-07-28 13:39 - 00000000 ____D C:\Users\erich\AppData\Local\{5762BFD1-AF0A-451C-A8F2-22668383F0E1}

2013-07-28 13:33 - 2011-09-18 12:24 - 00000000 ____D C:\Program Files\Buhl finance

2013-07-28 13:29 - 2008-08-28 12:26 - 00000000 ____D C:\Program Files\Common Files\Java

2013-07-28 13:28 - 2013-07-28 13:29 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-07-28 13:28 - 2013-07-28 13:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-07-28 13:28 - 2013-07-28 13:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-07-28 13:28 - 2013-07-28 13:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-07-28 13:28 - 2012-06-03 17:24 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npdeployJava1.dll

2013-07-28 13:28 - 2011-09-09 19:51 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll

2013-07-28 13:28 - 2008-08-28 12:26 - 00000000 ____D C:\Program Files\Java

2013-07-28 13:14 - 2006-11-02 14:47 - 00375376 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-28 13:12 - 2011-10-12 12:49 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-28 13:10 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer

2013-07-28 13:08 - 2008-08-28 10:53 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-07-28 12:57 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-07-28 12:53 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
 

Files to move or delete:

====================

C:\ProgramData\nvModes.dat
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-12 10:16
 

==================== End Of Log ============================

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-08-2013 02
Ran by erich at 2013-08-12 10:36:34
Running from P:\Desktop
Boot Mode: Normal
==========================================================

==================== Installed Programs =======================

Adobe Flash Player 11 ActiveX (Version: 11.7.700.169)
Adobe Flash Player 11 Plugin (Version: 11.7.700.169)
Adobe Photoshop Elements 6.0 (Version: 6.0)
Adobe Reader 9.5.4 - Deutsch (Version: 9.5.4)
Adobe Shockwave Player 11 (Version: 11)
Apple Application Support (Version: 2.0.1)
Apple Mobile Device Support (Version: 2.6.0.32)
Apple Software Update (Version: 2.1.3.127)
ArcSoft Software Suite (Version: 1.0)
Auslogics Disk Defrag (Version: version 3.1)
AusweisApp (Version: 1.11.0)
Avira Free Antivirus (Version: 13.0.0.3885)
BlazePhoto 2.0
CCleaner (Version: 4.00)
Corel MediaOne (Version: 2.00.0000)
CorelDRAW Essential Edition 3
CorelDRAW Essential Edition 3 (Version: 3.0)
cyberJack Base Components (Version: 6.10.0)
CyberLink MediaShow (Version: 4.1.2014)
CyberLink PhotoNow (Version: 1.1.5203)
CyberLink PowerDirector (Version: 7.0.2014)
CyberLink PowerProducer (Version: 5.0815)
CyberLink YouCam (Version: 2.0.1916)
D3DX10 (Version: 15.4.2368.0902)
DE (Version: 3.0)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DHTML Editing Component (Version: 6.02.0001)
DivX Web Player (Version: 1.5.0)
DVDFab 8.1.3.6 (01/12/2011) Qt
DVDVideoSoft Toolbar (Version: )
DVDVideoSoftTB Toolbar (Version: )
EASEUS Partition Master 6.5.2 Home Edition
e-Wörterbücher
FOTOParadies (Version: 3.5.0.1)
Foxlink Webcam (Version: 5.8.48000.201_WHQL)
Free Audio CD Burner version 1.4.7
Free YouTube Download 2.3
Free YouTube to MP3 Converter version 3.10.17.221 (Version: 3.10.17.221)
Garmin BaseCamp (Version: 3.2.2)
Garmin USB Drivers (Version: 2.3.0.0)
Google Earth (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.153)
Hardcopy (C:\Program Files\Hardcopy) (Version: 2010.05.10)
Heavy Weather Pro WS 2800 EU
iPhone-Konfigurationsprogramm (Version: 2.1.0.163)
iTunes (Version: 9.0.1.8)
Japanese Fonts Support For Adobe Reader 9 (Version: 9.0.0)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 37 (Version: 6.0.370)
Java(TM) 6 Update 7 (Version: 1.6.0.70)
JetDrive (Version: 5.4)
Joe (Version: 3.05.0100)
Junk Mail filter update (Version: 15.4.3502.0922)
Letstrade (Version: 1.00.0000)
LetsTrade Komponenten
MakeDisc (Version: 3.0.2601)
Malwarebytes Anti-Malware Version 1.65.1.1000 (Version: 1.65.1.1000)
Max Local Application (Version: 1.3.6)
Mediaport
Meine Dienste Software (Version: 1.0.2.3)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Automated Troubleshooting Services Shim
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (Version: 14.0.6123.5001)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual J# .NET Redistributable Package 1.1 (Version: 1.1.4322)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0)
Microsoft XML Parser (Version: 8.70.1104.04)
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1)
MotoHelper MergeModules (Version: 1.2.0)
Motorola Device Manager (Version: 2.2.28)
Motorola Device Software Update (Version: 1.0.40)
Motorola Mobile Drivers Installation 5.9.0 (Version: 5.9.0)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVC80_x86 (Version: 1.0.1.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
MyPhoneExplorer (Version: 1.8.4)
MyWinLocker 3 (Version: 3.1.20.0)
NCH Toolbox
Nero 8 Essentials (Version: 8.3.124)
neroxml (Version: 1.0.0)
Netzmanager (Version: 1.071)
Nokia Connectivity Cable Driver (Version: 7.1.78.0)
Nokia PC Suite (Version: 7.1.40.1)
Nokia Suite (Version: 3.4.49.0)
NVIDIA 3D Vision Treiber 266.58 (Version: 266.58)
NVIDIA Display Control Panel (Version: 6.14.12.6658)
NVIDIA Grafiktreiber 266.58 (Version: 266.58)
NVIDIA HD-Audiotreiber 1.1.13.1 (Version: 1.1.13.1)
NVIDIA Install Application (Version: 2.265.36.0)
NVIDIA PhysX (Version: 9.10.0514)
NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6658)
OWOK 2.0.0.4 NPAPI (Version: 2.0.0.4)
PC Connectivity Solution (Version: 12.0.17.0)
PHOTOfunSTUDIO -viewer- (Version: 2.01.000)
PowerDVD (Version: 7.0.3118.0)
QuickTime (Version: 7.70.80.34)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5672)
Realtek USB 2.0 Card Reader (Version: 3.0.1.3)
Rossmann Fotowelt Software 4.12.1 (Version: 4.12.1)
Sceneo AbsolutTV
Segoe UI (Version: 15.4.2271.0615)
Sony Ericsson PC Suite 5.009.00 (Version: 5.009.00)
SWR RadioRecorder
System Requirements Lab
t@x 2008 Standard (Version: 15.00.0000)
t@x 2009 Standard (Version: 16.00.6228)
t@x 2010 Standard (Version: 17.00.6531)
t@x 2011 (Version: 18.00.6928)
t@x 2012 (Version: 19.00.7303)
t@x 2013 (Version: 20.00.8137)
TomTom HOME 2.8.2.2264 (Version: 2.8.2.2264)
TomTom HOME Visual Studio Merge Modules (Version: 1.0.2)
T-Online 6.0
T-Online WLAN-Access Finder
TVsweeper 3 (Version: 3.0.3)
Uninstall 1.0.0.1
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
Update Manager (Version: 4.60)
Update Service (Version: 2.9.2.12)
VC80CRTRedist - 8.0.50727.762 (Version: 1.0.0)
VCRedistSetup (Version: 1.0.0)
WavePad Sound Editor
WEB.DE MailCheck für Mozilla Firefox (Version: 2.1.4.1420)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows-Treiberpaket - Nokia Modem (06/01/2009 7.01.0.4) (Version: 06/01/2009 7.01.0.4)
Windows-Treiberpaket - Nokia Modem (10/05/2009 4.2) (Version: 10/05/2009 4.2)
Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0)
WinZip 17.0 (Version: 17.0.10283)
WISO Mein Geld 2008 Professional (Version: 9.00.01.0023)
WISO Monats-CD
X10 Hardware(TM)
XMedia Recode Version 3.1.3.6 (Version: 3.1.3.6)
ZoneAlarm Antivirus (Version: 10.2.081.000)
ZoneAlarm Firewall (Version: 11.0.000.038)
ZoneAlarm Firewall (Version: 11.0.000.057)
ZoneAlarm Free Firewall (Version: 11.0.000.057)
ZoneAlarm LTD Toolbar
ZoneAlarm Security (Version: 11.0.000.038)
ZoneAlarm Security (Version: 11.0.000.057)

==================== Restore Points =========================

13-06-2013 14:04:48 Windows Update
07-07-2013 12:45:30 Windows Update
10-07-2013 17:39:50 Geplanter Prüfpunkt
28-07-2013 10:27:25 Windows Update
28-07-2013 10:52:56 Windows Update
28-07-2013 11:26:13 Removed Java(TM) 6 Update 37
28-07-2013 11:28:11 Installed Java 7 Update 25
28-07-2013 11:32:54 Installiert t@x 2013
10-08-2013 19:19:55 Windows Update
10-08-2013 19:25:33 Installiert cyberJack Base Components
10-08-2013 19:27:29 Gerätetreiber-Paketinstallation: REINER SCT Smartcard-Leser
10-08-2013 20:40:18 AusweisApp wird installiert
12-08-2013 08:22:41 Windows-Sicherung

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {03E3C34F-14B7-4B8F-88C4-7BE04ED4A43C} - System32\Tasks\{529F8BC9-5B80-415D-AC19-01D468A83BF6} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {0A871848-FF4D-45D6-B112-0473A4BB217B} - System32\Tasks\{D79EF3FC-D1DF-486F-926C-3EF60F5185B8} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {0ADA3669-1DB2-4CA9-B255-D151F9430FFA} - System32\Tasks\{DBB48689-22E3-48C6-B50C-9BAF610CACF7} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {109F2308-4450-4229-B464-1C8A94C8F004} - System32\Tasks\{CC18812A-71CA-44BC-8D6E-658AD77E1F60} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {1473D5C4-148A-4C4F-93C9-3CB35137CD6D} - System32\Tasks\{EE77E9D0-C76F-464E-920E-39DF873ACA10} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {15CE74D3-7C78-436B-A85F-114EF7D292A0} - System32\Tasks\{39A6AD8C-AF05-4BD5-A3BB-C55282EFC3D3} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {17B5A90E-045E-4CC5-9658-98EDBF3E468F} - System32\Tasks\{CE4B86E1-74D4-4EDE-AF41-695CFEDD1256} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {1BA62AF4-6DA9-45F3-B619-2BCD2D967164} - System32\Tasks\{653397C3-FBD1-4298-8C46-72F9AC28D437} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {1C2609A0-1A42-408A-BAA0-BCC63125DB6E} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {1D90B541-2BB6-41F8-818C-A8ABDB2B4E32} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)
Task: {1E5EB636-321A-486A-9690-6CA9824A5A9F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {22852C06-FFA5-4EB2-B7C3-BFB4EEEB801C} - System32\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804} => C:\Windows\system32\msfeedssync.exe [2011-04-16] (Microsoft Corporation)
Task: {24ABB574-F64A-4B15-8BA5-833681B029A1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-01] (Google Inc.)
Task: {25E94668-15EA-490D-A46A-6215EC4D70D5} - System32\Tasks\{175D33E2-65E7-4A97-8D7E-938C6CD73C70} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {27FB0BC1-093B-415C-9BB6-5FDCBD1BF26F} - System32\Tasks\{CDD6E159-2427-4C36-BE5E-C0A5EF7A1F2A} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {2E5014A3-2AC5-4795-B1B1-6D2D9E63D983} - System32\Tasks\{2357B5E9-F8BA-49F0-8263-E82C4FDF80A3} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {30211503-B720-4213-99B5-F72766640A13} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-01] (Google Inc.)
Task: {30412684-26EC-4994-B52A-1D2D605AFF5C} - System32\Tasks\{55B784CB-72E2-4F68-83F5-BD7E3E17C547} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {32E2F876-8111-412A-A837-8FB1914AA7A0} - System32\Tasks\{A76C9535-5799-41BA-9F5F-283BBE5D3DFD} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {34308CD6-4AAE-4674-8EFD-09A67A52CD1E} - System32\Tasks\{26238B1E-89B5-4F9A-A54A-D83144435B6E} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {3BC00BA7-1A0E-470E-947A-C11861827723} - System32\Tasks\{2F83B801-C109-4621-B713-C0A0E5B8B399} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {4144BBCD-770C-4B27-8865-488607CB4418} - System32\Tasks\{A4122B4F-1540-4415-9930-3620B50C73DC} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {46942B7E-328A-4DA7-ADC6-2111EFCAB60E} - System32\Tasks\{9733A94B-8DB3-4EF9-AFEC-48A7616D48F7} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {46FFEC52-2DA3-43EA-9B51-F6EAAE23373A} - System32\Tasks\Microsoft\Windows\WindowsBackup\CheckFull => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)
Task: {489998A1-18B5-43AA-BDA4-9E2E7B4E8815} - System32\Tasks\{75346B2A-60AD-45F1-A741-C67D02DF7C4F} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {491DDC76-3257-4FB2-A08F-A7419A571C39} - System32\Tasks\{994833DE-FBEB-4073-A722-DE2F4396B8E8} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {4D02ACA5-C95A-491C-A65D-E2BFAE87A28C} - System32\Tasks\{C216069A-91C9-4342-834E-62235652E970} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {4D507124-AB12-4EE0-B2B9-45937249B7B4} - System32\Tasks\{7995EAC5-FB39-4C04-8BCD-03ABD452CF94} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {4F345ADA-7A9D-42AC-86D9-63A8054EA20E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2006-11-02] (Microsoft Corporation)
Task: {51E9D044-D2CE-40E8-B52F-19AAA415DF86} - System32\Tasks\{AAB457C6-568D-4B92-ABD7-46C9170BD502} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {55781CD4-1A0B-40CD-B080-46CF3F7170C0} - System32\Tasks\{FC30FEAA-6937-4665-B403-92F5E1E458B1} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {5584E2CB-C550-4E95-8AB5-DB8913C43ED5} - System32\Tasks\{8E50EE1C-6F43-404B-BBE1-1D1D2C86B4E9} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {597A00C9-0C7D-43BA-8070-8536AABD82C0} - System32\Tasks\{BE34587D-BFA1-4618-866B-E31118F6632C} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {5B4FFD0B-F317-42B7-850C-F5B8D1F2B1BD} - System32\Tasks\{E434F2A8-325B-4FC6-A127-A25E88CA332E} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {645A2BCF-7EAC-4B92-BCEA-1260D75933CE} - System32\Tasks\{B513267C-3874-48B7-A581-2FB01AC5CEDD} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {67BCE78E-37BF-4E9F-AF5B-6EE7CD9C7760} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6AB6937C-6D33-476E-BB0B-639649374FC8} - System32\Tasks\{9879D865-6231-4790-92AD-75D0374C0A7D} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {6AFDD1FA-27AF-413E-BF53-218D370BC005} - System32\Tasks\{4EBFC0D4-3DB8-4475-BC50-C90B3E52C63C} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {6CC60C75-4413-4B44-993A-24AC415F4DA3} - System32\Tasks\{58CFEE96-770A-4297-ACCA-5C3E3EC3453D} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {6EC71DDD-91BC-454E-BB3D-67DE3A6A075E} - System32\Tasks\{BF87861D-6194-4060-89D7-7723AAE1F358} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {6FD546DD-8490-47A7-8B73-45CBF06884A0} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {71A099B4-0842-4EBE-AC9B-BE9F4F2A2845} - System32\Tasks\{9D92FD24-4D3E-4828-9DFA-0281BA1EE50F} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {72D80287-2122-476E-8F59-FA96CFA6D2F2} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-07-17] ()
Task: {79696A62-743F-4777-A6A5-802794669A15} - System32\Tasks\{5288D101-C1F6-4F60-BD90-53A10FC4F3DD} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {80F187AA-F702-4972-B7C4-5ACBC38D2288} - System32\Tasks\{5ED6D75D-9D58-46D9-B773-BFB69A1C59EC} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {848A98F1-CF8A-4DB0-9F89-A97AFFA87E71} - System32\Tasks\{F9793FED-7350-4612-9E8A-2A2D5668B18D} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {88920C42-93D2-4957-BC93-36B40DEEDDAA} - System32\Tasks\{7A9A9679-D78E-406D-BB74-91FB468D690A} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {93325CD8-648C-4B41-99F1-DC50E0F98716} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-07-17] ()
Task: {962E2A73-B62D-492B-9F55-68AB62980FE8} - System32\Tasks\{37FC9A97-F241-4871-BA84-725480E150AF} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {A0817DA5-6822-44A7-9750-8F8C7E62DEFA} - System32\Tasks\{F2C7B223-6A45-4F7D-8030-6DAD9F573AD6} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {A4454D7C-112E-4CC8-9151-C858E707E87F} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {A44638B6-C100-4414-A53C-FD18D540016B} - System32\Tasks\{954F72C3-8E10-4375-BEC6-271BC19E51E3} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {A4E82B37-B763-4D8F-8EF2-1181FF449C48} - System32\Tasks\{6F5E7364-17F9-433D-BEC0-993F8E981E45} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {A6F0CFE3-47D8-4D06-A411-90A364A5A200} - System32\Tasks\{7CAF5716-68DA-4FA3-A2FF-DE2078D96FCE} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\rundll32.exe [2006-11-02] (Microsoft Corporation)
Task: {AB49C5B1-05CC-44CE-A9BF-B21149CEE528} - System32\Tasks\{EBCE7EE3-733A-4B2F-A5F8-2D088B025761} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {AC594E59-6583-4C52-9FA8-6CD4967D8D3F} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)
Task: {AE4EB892-0DA6-4A3F-8392-170897B68C30} - System32\Tasks\{5F67213D-D68B-4225-B626-4BA216183788} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {B5CDC94D-6D75-48B5-8645-2C11FF503E19} - System32\Tasks\{4174666B-EB01-47AA-B317-3499447C6DC9} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {B75B4F71-28B6-40A8-814D-34D64E321EE2} - System32\Tasks\{76CD8C92-D8D0-464F-AF96-991D44A91B17} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {C9D58310-DED7-4BD9-824B-F21CCB4E4CEC} - System32\Tasks\{2159D467-D432-4AAA-87A4-5443550504F0} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {CAED631A-718B-4ECB-9E84-5F61EC8FFBB3} - System32\Tasks\{964181C5-E652-4F10-BA96-0FCDFD182A45} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {D54A4888-2674-442E-9E21-7C34A48BC931} - System32\Tasks\{AA1A02C1-590E-4B79-B563-89786E21F35A} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {D7D7CFE1-4039-4493-A615-8E5F435C6014} - System32\Tasks\{FA10CE71-C015-498B-9062-6560C64E68A1} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {DAFCE53E-0EB3-4D0F-910D-EB660AF09023} - System32\Tasks\{00CC71B1-2539-477D-AFFC-26613A7C9E8C} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {DBC801BC-8E2E-449F-9482-BD1F535DDB6A} - System32\Tasks\{024C4271-E009-44D9-A541-5EC51FBF3C94} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {DE68E019-737F-47BC-890C-2AEFE0853AE3} - System32\Tasks\{F71AE0D5-2FF2-42BC-8629-F4BC595DE4FF} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {E28427A9-80B2-4793-B658-0DC65919858B} - System32\Tasks\{334AAC1A-EC9A-4C9B-A2A8-7095798FD4DF} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {E5F8EF45-B308-4136-B3E3-A60CBC384E91} - System32\Tasks\{CA0B004F-0744-4E4F-8FC3-920ECA303A67} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {EF768DBB-96CC-4B86-825E-F97BDF4ED68B} - System32\Tasks\{07762668-9E0B-4B96-8CF3-206A4C22196E} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {F0FA5226-93E9-4454-B658-0562055DD127} - System32\Tasks\{9FD54709-D165-48E0-8959-CF1974F01CC8} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {F154572A-FEAC-40A8-93AD-337765C90F07} - System32\Tasks\{A88BDE20-25F7-40EB-9D87-9D812F7E97B9} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {F823473E-A2B0-42D1-9400-DF729A959745} - System32\Tasks\{3BB6AC7D-394C-4558-8C06-380522BD3D79} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {F928CB37-9658-489D-A14D-B328DD12A2BE} - System32\Tasks\{A52EE529-161C-4999-9188-C2C4E3C3AF39} => C:\Program Files\Mozilla Firefox\firefox.exe [2013-08-10] (Mozilla Corporation)
Task: {FAC5343F-4A1D-4C11-8B39-5CB8041157D8} - System32\Tasks\Motorola Device Manager Update => C:\Program Files\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-07-17] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job => C:\Windows\system32\msfeedssync.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Could not start eventlog service, could not read events.

Windows-Ereignisprotokoll wird gestartet.
Windows-Ereignisprotokoll konnte nicht gestartet werden.

Ein Systemfehler ist aufgetreten.

Systemfehler 3 aufgetreten.

Das System kann den angegebenen Pfad nicht finden.

==================== Memory info ===========================

Percentage of memory in use: 72%
Total physical RAM: 3065.95 MB
Available physical RAM: 842.85 MB
Total Pagefile: 6356.14 MB
Available Pagefile: 3762.85 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:97.45 GB) (Free:33.29 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:16.8 GB) (Free:4.15 GB) FAT32
Drive e: (RSCT_BC_6.10.0) (CDROM) (Total:0.16 GB) (Free:0 GB) CDFS
Drive p: (DATEN) (Fixed) (Total:183.81 GB) (Free:103.99 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: ACBC018E)
Partition 1: (Active) - (Size=97 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=17 GB) - (Type=0C)
Partition 3: (Not Active) - (Size=184 GB) - (Type=OF Extended)

==================== End Of Log ============================

Hoffe, dass der sauber ist ..

LG Mari

Hallo Schrauber,

so ich versuche es jetzt nochmal - habe vom zweiten Rechner die txt-Dateien auf einen Stick gezogen, weil ich dort nur nach der TFC nur noch mein 1. Posting lesen kann ..

hier nun die gewünschten DateienAdwCleaner Logfile:

Code:

# AdwCleaner v2.306 - Datei am 15/08/2013 um 17:48:26 erstellt

# Aktualisiert am 19/07/2013 von Xplode

# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

# Benutzer : erich - erich-PC

# Bootmodus : Normal

# Ausgeführt unter : P:\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\Program Files\Mozilla FireFox\Components\AskSearch.js

Datei Gelöscht : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml

Datei Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\11-suche.xml

Datei Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\Conduit.xml

Datei Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\zonealarm.xml

Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk

Gelöscht mit Neustart : C:\Users\erich\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar

Ordner Gelöscht : C:\Program Files\Babylon

Ordner Gelöscht : C:\Program Files\Conduit

Ordner Gelöscht : C:\Program Files\DVDVideoSoftTB

Ordner Gelöscht : C:\Program Files\Wondershare

Ordner Gelöscht : C:\ProgramData\blekko toolbars

Ordner Gelöscht : C:\ProgramData\search protection

Ordner Gelöscht : C:\Users\erich\AppData\Local\PackageAware

Ordner Gelöscht : C:\Users\erich\AppData\LocalLow\adawaretb

Ordner Gelöscht : C:\Users\erich\AppData\LocalLow\Conduit

Ordner Gelöscht : C:\Users\erich\AppData\LocalLow\DVDVideoSoftTB

Ordner Gelöscht : C:\Users\erich\AppData\LocalLow\PriceGong

Ordner Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\adawaretb

Ordner Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Conduit

Ordner Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\ConduitEngine

Ordner Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\CT2269050

Ordner Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}

Ordner Gelöscht : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\adawaretb

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DVDVideoSoftTB Toolbar

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

Schlüssel Gelöscht : HKLM\Software\adawaretb

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CDD9F4AA-65AF-4DA8-B5A8-F564FFF66E9A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0BF91075-F457-4A8B-99EF-140B52D2F22A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431FB0E5-2CBB-4602-9FE6-F1D64488ADD7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5C9A230D-70A5-11D5-AFB0-0050DAC67890}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8911483C-C00A-4183-9FBC-6C9C00946C15}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C3F058A9-407D-4CD1-8F66-B75605B54B69}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFDCAF05-D29C-4D4D-9836-8CDCD606A6B2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2269050

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\DVDVideoSoftTB

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CDD9F4AA-65AF-4DA8-B5A8-F564FFF66E9A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adawaretb

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi

Schlüssel Gelöscht : HKLM\SOFTWARE\Software

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16502
 

Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=b2971a31000000000000001f160aed3e&tlver=1.4.19.19&affID=17161 --> hxxp://www.google.com
 

-\\ Mozilla Firefox v22.0 (de)
 

Datei : C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\prefs.js
 

C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\user.js ... Gelöscht !
 

Gelöscht : user_pref("CT2269050..clientLogIsEnabled", false);

Gelöscht : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]

Gelöscht : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]

Gelöscht : user_pref("CT2269050.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

Gelöscht : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Gelöscht : user_pref("CT2269050.BrowserCompStateIsOpen_129681780741097243", true);

Gelöscht : user_pref("CT2269050.BrowserCompStateIsOpen_129853623028165512", true);

Gelöscht : user_pref("CT2269050.BrowserCompStateIsOpen_129881141106886992", true);

Gelöscht : user_pref("CT2269050.BrowserCompStateIsOpen_129977890572899945", true);

Gelöscht : user_pref("CT2269050.BrowserCompStateIsOpen_130100683276316706", true);

Gelöscht : user_pref("CT2269050.BrowserCompStateIsOpen_1359634297000", true);

Gelöscht : user_pref("CT2269050.CTID", "CT2269050");

Gelöscht : user_pref("CT2269050.CurrentServerDate", "15-8-2013");

Gelöscht : user_pref("CT2269050.DialogsAlignMode", "LTR");

Gelöscht : user_pref("CT2269050.DialogsGetterLastCheckTime", "Sat Aug 10 2013 21:13:52 GMT+0200");

Gelöscht : user_pref("CT2269050.DownloadReferralCookieData", "");

Gelöscht : user_pref("CT2269050.EMailNotifierPollDate", "Thu Jan 21 2010 10:05:37 GMT+0100");

Gelöscht : user_pref("CT2269050.EnableClickToSearchBox", false);

Gelöscht : user_pref("CT2269050.EnableSearchHistory", false);

Gelöscht : user_pref("CT2269050.EnableSearchSuggest", false);

Gelöscht : user_pref("CT2269050.EnableUsage", false);

Gelöscht : user_pref("CT2269050.ExternalComponentPollDate8877840225553681985", "Wed Jan 20 2010 18:05:50 GMT+01[...]

Gelöscht : user_pref("CT2269050.FirstServerDate", "26-12-2010");

Gelöscht : user_pref("CT2269050.FirstTime", true);

Gelöscht : user_pref("CT2269050.FirstTimeFF3", true);

Gelöscht : user_pref("CT2269050.FirstTimeSettingsDone", true);

Gelöscht : user_pref("CT2269050.FixPageNotFoundErrors", false);

Gelöscht : user_pref("CT2269050.GroupingServerCheckInterval", 1440);

Gelöscht : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Gelöscht : user_pref("CT2269050.HasUserGlobalKeys", true);

Gelöscht : user_pref("CT2269050.Initialize", true);

Gelöscht : user_pref("CT2269050.InitializeCommonPrefs", true);

Gelöscht : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);

Gelöscht : user_pref("CT2269050.InstalledDate", "Wed Jan 20 2010 18:05:49 GMT+0100");

Gelöscht : user_pref("CT2269050.InvalidateCache", false);

Gelöscht : user_pref("CT2269050.IsGrouping", false);

Gelöscht : user_pref("CT2269050.IsMulticommunity", false);

Gelöscht : user_pref("CT2269050.IsOpenThankYouPage", false);

Gelöscht : user_pref("CT2269050.IsOpenUninstallPage", false);

Gelöscht : user_pref("CT2269050.LanguagePackLastCheckTime", "Thu Aug 15 2013 07:48:52 GMT+0200");

Gelöscht : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);

Gelöscht : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]

Gelöscht : user_pref("CT2269050.LastLogin_2.4.0.4", "Mon Jan 25 2010 13:53:47 GMT+0100");

Gelöscht : user_pref("CT2269050.LastLogin_2.7.2.0", "Sun Mar 13 2011 12:08:14 GMT+0100");

Gelöscht : user_pref("CT2269050.LastLogin_3.13.0.6", "Sun Jul 08 2012 15:28:47 GMT+0200");

Gelöscht : user_pref("CT2269050.LastLogin_3.14.1.0", "Wed Aug 22 2012 08:32:12 GMT+0200");

Gelöscht : user_pref("CT2269050.LastLogin_3.15.1.0", "Thu Nov 08 2012 10:48:53 GMT+0100");

Gelöscht : user_pref("CT2269050.LastLogin_3.16.0.100", "Thu Feb 07 2013 17:22:12 GMT+0100");

Gelöscht : user_pref("CT2269050.LastLogin_3.16.0.3", "Fri Jan 18 2013 14:35:59 GMT+0100");

Gelöscht : user_pref("CT2269050.LastLogin_3.18.0.7", "Sun Jul 28 2013 13:30:51 GMT+0200");

Gelöscht : user_pref("CT2269050.LastLogin_3.19.0.3", "Thu Aug 15 2013 07:48:52 GMT+0200");

Gelöscht : user_pref("CT2269050.LatestVersion", "3.19.0.3");

Gelöscht : user_pref("CT2269050.Locale", "en");

Gelöscht : user_pref("CT2269050.LoginCache", 4);

Gelöscht : user_pref("CT2269050.MCDetectTooltipHeight", "83");

Gelöscht : user_pref("CT2269050.MCDetectTooltipShow", false);

Gelöscht : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Gelöscht : user_pref("CT2269050.MCDetectTooltipWidth", "295");

Gelöscht : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);

Gelöscht : user_pref("CT2269050.RadioIsPodcast", false);

Gelöscht : user_pref("CT2269050.RadioLastCheckTime", "Wed Jan 20 2010 18:05:50 GMT+0100");

Gelöscht : user_pref("CT2269050.RadioLastUpdateIPServer", "4");

Gelöscht : user_pref("CT2269050.RadioLastUpdateServer", "128956111944730000");

Gelöscht : user_pref("CT2269050.RadioMediaID", "12473383");

Gelöscht : user_pref("CT2269050.RadioMediaType", "Media Player");

Gelöscht : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");

Gelöscht : user_pref("CT2269050.RadioStationName", "Hotmix%20108");

Gelöscht : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");

Gelöscht : user_pref("CT2269050.SHRINK_TOOLBAR", 1);

Gelöscht : user_pref("CT2269050.SearchBackToDefaultEngine", false);

Gelöscht : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]

Gelöscht : user_pref("CT2269050.SearchFromAddressBarIsInit", true);

Gelöscht : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]

Gelöscht : user_pref("CT2269050.SearchInNewTabEnabled", true);

Gelöscht : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);

Gelöscht : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Thu Aug 15 2013 07:48:51 GMT+0200");

Gelöscht : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]

Gelöscht : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]

Gelöscht : user_pref("CT2269050.SearchInNewTabUserEnabled", false);

Gelöscht : user_pref("CT2269050.ServiceMapLastCheckTime", "Thu Aug 15 2013 07:48:52 GMT+0200");

Gelöscht : user_pref("CT2269050.SettingsCheckIntervalMin", 120);

Gelöscht : user_pref("CT2269050.SettingsLastCheckTime", "Thu Aug 15 2013 17:28:19 GMT+0200");

Gelöscht : user_pref("CT2269050.SettingsLastUpdate", "1376554429");

Gelöscht : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);

Gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Sun Feb 27 2011 19:49:59 GMT+0100");

Gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1263919242");

Gelöscht : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");

Gelöscht : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]

Gelöscht : user_pref("CT2269050.UserID", "UN67467301538919183");

Gelöscht : user_pref("CT2269050.ValidationData_Toolbar", 2);

Gelöscht : user_pref("CT2269050.WeatherNetwork", "");

Gelöscht : user_pref("CT2269050.WeatherPollDate", "Thu Jan 21 2010 10:05:36 GMT+0100");

Gelöscht : user_pref("CT2269050.WeatherUnit", "C");

Gelöscht : user_pref("CT2269050.alertChannelId", "666138");

Gelöscht : user_pref("CT2269050.backendstorage.youtubelang", "4445");

Gelöscht : user_pref("CT2269050.clientLogIsEnabled", true);

Gelöscht : user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]

Gelöscht : user_pref("CT2269050.components.1000034", false);

Gelöscht : user_pref("CT2269050.components.1000082", false);

Gelöscht : user_pref("CT2269050.components.1000234", false);

Gelöscht : user_pref("CT2269050.components.128956038650607087", false);

Gelöscht : user_pref("CT2269050.components.128989422285606400", false);

Gelöscht : user_pref("CT2269050.components.129023235807856892", false);

Gelöscht : user_pref("CT2269050.components.3834545139032754099", false);

Gelöscht : user_pref("CT2269050.components.3925935604689231132", false);

Gelöscht : user_pref("CT2269050.components.5916571108153815896", false);

Gelöscht : user_pref("CT2269050.components.5944583677087624532", false);

Gelöscht : user_pref("CT2269050.components.8877840225553681985", false);

Gelöscht : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]

Gelöscht : user_pref("CT2269050.homepageProtectorEnableByLogin", true);

Gelöscht : user_pref("CT2269050.initDone", true);

Gelöscht : user_pref("CT2269050.myStuffEnabled", true);

Gelöscht : user_pref("CT2269050.myStuffPublihserMinWidth", 400);

Gelöscht : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]

Gelöscht : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);

Gelöscht : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]

Gelöscht : user_pref("CT2269050.revertSettingsEnabled", true);

Gelöscht : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);

Gelöscht : user_pref("CT2269050.searchProtectorEnableByLogin", true);

Gelöscht : user_pref("CT2269050.testingCtid", "");

Gelöscht : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Thu Aug 15 2013 07:48:52 GMT+0200");

Gelöscht : user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/DE", "\"0\"")[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"")[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.19[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"aeb[...]

Gelöscht : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");

Gelöscht : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");

Gelöscht : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");

Gelöscht : user_pref("CommunityToolbar.IsEngineShown", true);

Gelöscht : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);

Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");

Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");

Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");

Gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]

Gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2269050,ConduitEngine");

Gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");

Gelöscht : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Apr 16 2011 12:33:44 GMT+02[...]

Gelöscht : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);

Gelöscht : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri Jul 01 2011 20:50:19 GMT+0200");

Gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");

Gelöscht : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);

Gelöscht : user_pref("CommunityToolbar.alert.locale", "en");

Gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);

Gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jul 03 2011 12:05:48 GMT+0200");

Gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");

Gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);

Gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");

Gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false);

Gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);

Gelöscht : user_pref("CommunityToolbar.alert.userId", "{6f57e4c1-8cde-485c-80cb-3f67c122a590}");

Gelöscht : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Dec 28 2010 19:05:19 GMT+0100");

Gelöscht : user_pref("CommunityToolbar.globalUserId", "974b3e8d-3cbc-43e3-b7ee-fae09bedf5f8");

Gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

Gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

Gelöscht : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Thu Jun 30 2011 20:21:33 GMT+0200");

Gelöscht : user_pref("ConduitEngine.CTID", "ConduitEngine");

Gelöscht : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sat Jul 02 2011 11:09:03 GMT+0200");

Gelöscht : user_pref("ConduitEngine.FirstServerDate", "04/16/2011 13");

Gelöscht : user_pref("ConduitEngine.FirstTime", true);

Gelöscht : user_pref("ConduitEngine.FirstTimeFF3", true);

Gelöscht : user_pref("ConduitEngine.HasUserGlobalKeys", true);

Gelöscht : user_pref("ConduitEngine.Initialize", true);

Gelöscht : user_pref("ConduitEngine.InitializeCommonPrefs", true);

Gelöscht : user_pref("ConduitEngine.InstalledDate", "Sat Apr 16 2011 16:24:34 GMT+0200");

Gelöscht : user_pref("ConduitEngine.IsMulticommunity", false);

Gelöscht : user_pref("ConduitEngine.IsOpenThankYouPage", false);

Gelöscht : user_pref("ConduitEngine.IsOpenUninstallPage", true);

Gelöscht : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sun Jul 03 2011 12:05:50 GMT+0200");

Gelöscht : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Jul 03 2011 12:05:54 GMT+0200");

Gelöscht : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);

Gelöscht : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Jul 03 2011 12:05:50 GMT+0200");

Gelöscht : user_pref("ConduitEngine.UserID", "UN28408398502751264");

Gelöscht : user_pref("ConduitEngine.componentAlertEnabled", false);

Gelöscht : user_pref("ConduitEngine.engineLocale", "de");

Gelöscht : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sun Jul 03 2011 12:05:50 GMT+0200");

Gelöscht : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Jul 03 2011 12:05:50 GMT+0200");

Gelöscht : user_pref("ConduitEngine.initDone", true);

Gelöscht : user_pref("ConduitEngine.isAppTrackingManagerOn", true);

Gelöscht : user_pref("ConduitEngine.usagesFlag", 2);

Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.babylon.com/web/{searchTerms}?babsrc=browserse[...]

Gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", 15);

Gelöscht : user_pref("extensions.BabylonToolbar.cntry", "DE");

Gelöscht : user_pref("extensions.BabylonToolbar.firstRun", false);

Gelöscht : user_pref("extensions.BabylonToolbar.hdrMd5", "7BC5E99C13F8F0371D3F24B97010BBB6");

Gelöscht : user_pref("extensions.BabylonToolbar.lastActv", "15");

Gelöscht : user_pref("extensions.BabylonToolbar.lastDP", 15);

Gelöscht : user_pref("startup.homepage_override_url", "hxxp://www.ask.com/?o=13166&l=dis");
 

*************************
 

AdwCleaner[S1].txt - [24964 octets] - [15/08/2013 17:48:26]
 

########## EOF - C:\AdwCleaner[S1].txt - [25025 octets] ##########

--- --- ---

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 14-08-2013 01
Ran by erich at 2013-08-15 17:30:23 Run:1
Running from P:\Desktop
Boot Mode: Normal

==============================================

C:\Users\erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk => Moved successfully.
C:\Program Files\Netzmanager\netzmanager.exe => Moved successfully.

"C:\Program Files\Netzmanager" directory move:

C:\Program Files\Netzmanager\appl.bdf => Moved successfully.
C:\Program Files\Netzmanager\DeskbandUtils32.dll => Moved successfully.
C:\Program Files\Netzmanager\DeskbandUtils64.dll => Moved successfully.
C:\Program Files\Netzmanager\DlgManagerLocEn.dll => Moved successfully.
C:\Program Files\Netzmanager\DlgManagerLocGer.dll => Moved successfully.
C:\Program Files\Netzmanager\DlgMiscLocEn.dll => Moved successfully.
C:\Program Files\Netzmanager\DlgMiscLocGer.dll => Moved successfully.
C:\Program Files\Netzmanager\empty.htm => Moved successfully.
C:\Program Files\Netzmanager\faq.chm => Moved successfully.
C:\Program Files\Netzmanager\faq.xml => Moved successfully.
C:\Program Files\Netzmanager\hilfreicheInetLinks.xml => Moved successfully.
C:\Program Files\Netzmanager\netzmanager.chm => Moved successfully.
C:\Program Files\Netzmanager\Netzmanager_Adapter_Verwaltung.exe => Moved successfully.
C:\Program Files\Netzmanager\Netzmanager_Freigabe_Verwaltung.exe => Moved successfully.
C:\Program Files\Netzmanager\NMAppAdmin.exe => Moved successfully.
C:\Program Files\Netzmanager\NMCuDial32.dll => Moved successfully.
C:\Program Files\Netzmanager\NMCuDial64.dll => Moved successfully.
C:\Program Files\Netzmanager\RasDeviceSettings.xml => Moved successfully.
C:\Program Files\Netzmanager\TAHMLocEn.dll => Moved successfully.
C:\Program Files\Netzmanager\TAHMLocGer.dll => Moved successfully.
C:\Program Files\Netzmanager\TOTR64Device3.dll => Moved successfully.
C:\Program Files\Netzmanager\TOTR64Device6.dll => Moved successfully.
C:\Program Files\Netzmanager\WizAccessErrorLocGer.dll => Moved successfully.
C:\Program Files\Netzmanager\WizConnectionLocEn.dll => Moved successfully.
C:\Program Files\Netzmanager\WizConnectionLocGer.dll => Moved successfully.
C:\Program Files\Netzmanager\WizFWUpdateLocGer.dll => Moved successfully.
C:\Program Files\Netzmanager\Zip.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\libsts2.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\TOTR64Device3.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\TOTR64Device6.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver64\Microsoft.VC90.CRT.manifest => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver64\msvcm90.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver64\msvcp90.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver64\msvcr90.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver64\SoftPlugLib.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver64\SoftPlugLibConnector6.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver\Microsoft.VC90.CRT.manifest => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver\msvcm90.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver\msvcp90.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver\msvcr90.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver\SoftPlugLib.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver\SoftPlugLibConnector3.dll => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys => Moved successfully.
C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys => Moved successfully.
C:\Program Files\Netzmanager\Deskband\Deskband32.dll => Moved successfully.
C:\Program Files\Netzmanager\Deskband\DeskbandCommunication32.dll => Moved successfully.
Could not move "C:\Program Files\Netzmanager" directory. => Scheduled to move on reboot.

=========== Result of Scheduled Files to move ===========

C:\Program Files\Netzmanager => Moved successfully.

==== End of Fixlog ====

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-08-2013 01

Ran by erich (administrator) on 16-08-2013 07:13:18

Running from P:\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

(Lavasoft Limited) C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

(REINER SCT) C:\Windows\system32\cjpcsc.exe

() C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe

(EgisTec Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\MWLService.exe

(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

(Prolific Technology Inc.) C:\Windows\system32\IoctlSvc.exe

() C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe

() C:\Windows\system32\PSIService.exe

(Motorola) C:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe

() C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe

() C:\Program Files\CyberLink\Shared Files\RichVideo.exe

(Buhl Data Service GmbH) C:\Program Files\Sceneo\AbsolutTV\Services\PVR\PVRService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(LaCrosse Technology) C:\Program Files\HeavyWeatherWV5\HeavyWeatherService.exe

(X10) C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe

(Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(OpenLimit SignCubes AG) C:\Program Files\AusweisApp\siqBootLoader.exe

() C:\Program Files\Buhl finance\tax Steuersoftware 2013\taxaktuell.exe

(WinZip Computing, S.L.) C:\Program Files\WinZip\WZQKPICK32.EXE

(Lavasoft Limited) C:\PROGRA~1\AD-AWA~1\AdAware.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Microsoft Corporation) C:\Windows\ehome\ehsched.exe

(GFI Software) C:\Program Files\Ad-Aware Antivirus\SBAMSvc.exe

(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_11_7_700_169_ActiveX.exe

(Microsoft Corporation) C:\Windows\System32\mobsync.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6265376 2008-07-24] (Realtek Semiconductor)

HKLM\...\Run: [ZoneAlarm] - C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe [73832 2013-01-29] (Check Point Software Technologies LTD)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-07] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [ISW] - C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [738984 2012-11-22] (Check Point Software Technologies)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [554384 2013-07-15] (Lavasoft)

HKLM\...\Run: [Search Protection] - C:\ProgramData\Search Protection\SearchProtection.exe [x]

HKLM\...\Run: [Ad-Aware Antivirus] - "C:\Program Files\Ad-Aware Antivirus\AdAwareLauncher" --windows-run [x]

HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [247728 2011-04-22] (TomTom)

HKCU\...\Run: [] -  [x]

HKCU\...\Run: [AusweisApp] - C:\Program Files\AusweisApp\siqBootLoader.exe [2514560 2013-05-27] (OpenLimit SignCubes AG)

MountPoints2: {61fa1aaf-ccab-11e1-bee8-001f1613fcd5} - G:\setup.exe -a

MountPoints2: {ca929a41-ad8e-11e1-b3b5-806e6f6e6963} - E:\.\windows\setup.exe .\windows

HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)

Lsa: [Notification Packages] 

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\t@x aktuell.lnk

ShortcutTarget: t@x aktuell.lnk -> C:\Program Files\Buhl finance\tax Steuersoftware 2013\taxaktuell.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk

ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files\WinZip\WZQKPICK32.EXE (WinZip Computing, S.L.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/

URLSearchHook: (No Name) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File

SearchScopes: HKLM - DefaultScope value is missing.

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MI1933~1\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MI1933~1\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: AusweisApp 1.8.0.0 - {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} - C:\Program Files\AusweisApp\siqeCardClient.ols (OpenLimit SignCubes AG)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - No Name - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} -  No File

Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

Toolbar: HKCU -ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default

FF Homepage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=9A7E66F519D5DFEEA6F11F520B23A52A

FF Keyword.URL: hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_4&hsimp=yhs-lavasoft&ent=bs&q=

FF NetworkProxy: "no_proxies_on", "*.local"

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)

FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MI1933~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MI1933~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin: @reiner-sct.com/OWOK,version=2.0.0.4 - C:\Program Files\REINER SCT\OWOK\NPAPI-20\nprsct_owok_npapi-2004.dll (REINER Kartengeräte GmbH und Co. KG.)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\englische-ergebnisse.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\gmx-suche.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\lastminute.xml

FF SearchPlugin: C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\searchplugins\webde-suche.xml

FF Extension: No Name - C:\Users\erich\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com

FF Extension: No Name - C:\Users\erich\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: zonealarm.com - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\ffxtlbr@zonealarm.com

FF Extension: Garmin Communicator - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

FF Extension: No Name - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi

FF Extension: No Name - C:\Users\erich\AppData\Roaming\Mozilla\Firefox\Profiles\ol8n0zyd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\TrustChecker

FF Extension: ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker

FF HKLM\...\Firefox\Extensions: [{4F3D26C8-9907-48ff-BC74-B8C572D317BF}] C:\Program Files\AusweisApp\mozilla\eCardClientExt_FFxx_Win

FF Extension: AusweisApp - C:\Program Files\AusweisApp\mozilla\eCardClientExt_FFxx_Win

FF HKLM\...\Firefox\Extensions: [{4F0963A3-1658-4fde-9585-23A25CC288BF}] C:\Program Files\AusweisApp\mozilla\eCardClientPIn_FFxx_Win

FF Extension: AusweisApp - C:\Program Files\AusweisApp\mozilla\eCardClientPIn_FFxx_Win
 

========================== Services (Whitelisted) =================
 

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2008-07-03] (ArcSoft Inc.)

R2 Ad-Aware Service; C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-06-13] (Lavasoft Limited)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-07] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-07] (Avira Operations GmbH & Co. KG)

R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144672 2009-08-28] (Apple Inc.)

R2 cjpcsc; C:\Windows\system32\cjpcsc.exe [514128 2012-03-19] (REINER SCT)

R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [497320 2012-11-22] (Check Point Software Technologies)

R2 Motorola Device Manager; C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [116632 2012-07-17] ()

R2 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [304688 2008-08-04] (EgisTec Inc.)

R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()

R2 PST Service; C:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola)

R2 Radio.fx; C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()

R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [241734 2008-06-29] ()

R2 SBAMSvc; C:\Program Files\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-20] (GFI Software)

R2 srvcPVR; C:\Program Files\Sceneo\AbsolutTV\Services\PVR\PVRService.exe [1801216 2008-02-28] (Buhl Data Service GmbH)

R2 vsmon; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe [2447888 2013-01-29] (Check Point Software Technologies LTD)

R2 WV5Communication; C:\Program Files\HeavyWeatherWV5\HeavyWeatherService.exe [1843712 2011-01-18] (LaCrosse Technology)

R2 x10nets; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [20480 2001-11-12] (X10)

S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [x]

S2 Netzmanager Service; "C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe"  [x]
 

==================== Drivers (Whitelisted) ====================
 

R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-04-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-04-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-02] (Avira Operations GmbH & Co. KG)

R1 bizVSerial; C:\Windows\System32\drivers\bizVSerialNT.sys [14949 2007-05-31] (franson.biz)

S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [28144 2011-03-29] (REINER SCT)

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14216 2010-07-15] ()

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [8456 2010-07-15] ()

S2 FPSensor; C:\Windows\System32\Drivers\FPSensor.sys [26920 2008-08-28] (LTT)

R0 FPWinIo; C:\Windows\System32\DRIVERS\FPWinIo.sys [66856 2008-08-28] ()

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [13560 2013-08-14] (GFI Software)

R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [27056 2012-11-22] (Check Point Software Technologies)

S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [29272 2010-09-07] (Abelssoft GmbH)

R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [133208 2012-01-09] (Kaspersky Lab ZAO)

R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11352 2012-01-09] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [468272 2012-01-09] (Kaspersky Lab)

S3 motandroidusb; C:\Windows\System32\Drivers\motoandroid.sys [25856 2009-07-10] (Motorola)

S3 MTOnlPktAlyX; C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [17536 2006-10-09] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

R2 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [19504 2008-08-04] (Egis Incorporated.)

R2 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2008-08-04] (Egis Incorporated.)

R2 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [59952 2008-08-04] (Egis Incorporated.)

S3 PhilCap; C:\Windows\System32\DRIVERS\PhilCap.sys [908896 2007-07-31] (NXP Semiconductors Germany GmbH)

S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [89256 2008-05-16] (MCCI Corporation)

S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [15016 2008-05-16] (MCCI Corporation)

S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [120744 2008-05-16] (MCCI Corporation)

S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [114216 2008-05-16] (MCCI Corporation)

S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [25512 2008-05-16] (MCCI Corporation)

S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [110632 2008-05-16] (MCCI Corporation)

S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [115752 2008-05-16] (MCCI Corporation)

S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1753984 2008-07-10] ()

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [451160 2012-12-13] (Check Point Software Technologies LTD)

R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)

S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 TelekomNM3; \??\C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-16 06:51 - 2013-08-16 06:52 - 00000000 ____D C:\Users\KLAPPE~1\AppData\Local\adawarebp

2013-08-16 06:40 - 2013-08-16 06:40 - 00000000 ____D C:\Windows\ERUNT

2013-08-15 17:50 - 2013-08-15 17:51 - 00000136 _____ C:\Windows\DeleteOnReboot.bat

2013-08-15 17:48 - 2013-08-15 17:51 - 00025095 _____ C:\AdwCleaner[S1].txt

2013-08-15 17:42 - 2013-08-16 07:11 - 00000000 ____D C:\Neuer Ordner

2013-08-15 08:21 - 2013-08-15 17:32 - 00001838 _____ C:\Windows\PFRO.log

2013-08-15 07:54 - 2013-08-15 08:03 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 07:40 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-15 07:40 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-15 07:40 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-15 07:40 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-15 07:40 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-15 07:40 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-08-15 07:40 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-08-15 07:40 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-15 07:40 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-15 07:40 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-15 07:40 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-15 07:40 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-08-15 07:40 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-08-15 07:40 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-15 07:40 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-15 07:40 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-08-14 12:40 - 2013-06-15 15:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll

2013-08-14 12:40 - 2013-06-15 13:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-08-14 12:39 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 12:39 - 2013-07-10 11:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 12:39 - 2013-07-09 14:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 12:39 - 2013-07-08 06:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2013-08-14 12:39 - 2013-07-08 06:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 12:39 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 12:39 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 12:39 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 12:39 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-14 12:39 - 2013-07-05 05:20 - 00914880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 12:39 - 2013-07-05 03:43 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-08-14 08:44 - 2013-08-14 08:44 - 00000000 ____D C:\Users\erich\AppData\Roaming\LavasoftStatistics

2013-08-14 08:44 - 2013-08-14 08:44 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus

2013-08-14 08:32 - 2013-08-16 07:02 - 00001741 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2013-08-14 08:32 - 2013-08-16 07:02 - 00001741 _____ C:\ProgramData\Desktop\Ad-Aware Antivirus.lnk

2013-08-14 08:32 - 2013-08-14 08:45 - 00000000 ____D C:\Program Files\Ad-Aware Antivirus

2013-08-14 08:32 - 2013-08-14 08:32 - 00000000 ____D C:\ProgramData\Lavasoft

2013-08-14 08:29 - 2013-08-14 08:29 - 00000000 ____D C:\ProgramData\Downloaded Installations

2013-08-14 08:29 - 2013-08-14 08:29 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection

2013-08-14 08:29 - 2013-08-14 08:29 - 00000000 ____D C:\Program Files\Toolbar Cleaner

2013-08-14 08:28 - 2013-08-14 08:28 - 00000000 ____D C:\Program Files\Lavasoft

2013-08-14 08:27 - 2013-08-14 18:02 - 00000000 ____D C:\Users\erich\AppData\Roaming\Ad-Aware Antivirus

2013-08-14 08:27 - 2013-08-14 08:27 - 00044424 _____ (GFI Software) C:\Windows\system32\sbbd.exe

2013-08-14 08:27 - 2013-08-14 08:27 - 00013560 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys

2013-08-12 10:27 - 2013-08-15 17:35 - 00000000 ____D C:\FRST

2013-08-10 22:41 - 2013-08-11 21:34 - 00000000 ____D C:\Users\erich\.ausweisapp

2013-08-10 22:41 - 2013-08-10 22:41 - 00000807 _____ C:\Users\Public\Desktop\AusweisApp.lnk

2013-08-10 22:41 - 2013-08-10 22:41 - 00000807 _____ C:\ProgramData\Desktop\AusweisApp.lnk

2013-08-10 22:40 - 2013-08-10 22:41 - 00000000 ____D C:\Program Files\AusweisApp

2013-08-10 22:37 - 2013-08-10 22:39 - 63411200 _____ P:\Desktop\AusweisApp_011100_Windows.msi

2013-08-10 22:24 - 2013-08-10 22:24 - 00000026 _____ C:\Windows\cJCC.INI

2013-08-10 21:57 - 2013-08-10 22:14 - 00652880 _____ P:\Desktop\rsct_owok_npapi_windows-2004-1.exe

2013-08-10 21:52 - 2013-08-15 07:51 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-08-10 21:33 - 2013-08-10 21:33 - 00002077 _____ C:\Users\Public\Desktop\Google Earth.lnk

2013-08-10 21:33 - 2013-08-10 21:33 - 00002077 _____ C:\ProgramData\Desktop\Google Earth.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00005226 _____ C:\Windows\DPINST.LOG

2013-08-10 21:27 - 2013-08-10 21:27 - 00000932 _____ C:\Users\Public\Desktop\cyberJack Gerätemanager,  Funktionstest.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00000932 _____ C:\ProgramData\Desktop\cyberJack Gerätemanager,  Funktionstest.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00000396 _____ C:\Windows\hbcikrnl.ini

2013-08-10 21:27 - 2011-03-29 11:08 - 00028144 _____ (REINER SCT) C:\Windows\system32\Drivers\cjusb.sys

2013-08-10 21:27 - 2009-11-09 09:48 - 00061952 _____ ( REINER SCT) C:\Windows\system32\cjtpl.cpl

2013-08-10 21:25 - 2013-08-10 21:58 - 00000000 ____D C:\Program Files\REINER SCT

2013-08-10 21:25 - 2012-03-19 21:58 - 00514128 _____ (REINER SCT) C:\Windows\system32\cjpcsc.exe

2013-08-10 21:25 - 2012-02-22 15:50 - 00058442 _____ C:\Windows\system32\cjbc_en.lan

2013-08-10 21:25 - 2012-02-22 15:48 - 00063069 _____ C:\Windows\system32\cjbc_de.lan

2013-08-10 21:25 - 2012-02-19 19:32 - 00713648 _____ (REINER SCT) C:\Windows\system32\cjpcscui.exe

2013-08-10 21:25 - 2012-02-14 11:48 - 00786352 _____ (REINER SCT) C:\Windows\system32\cjpcsc32.dll

2013-08-10 21:25 - 2012-02-14 11:48 - 00352688 _____ (REINER SCT) C:\Windows\system32\ctrsct32.dll

2013-08-10 21:25 - 2012-02-14 11:48 - 00215472 _____ ( Reiner Kartengeräte GmbH & Co.KG) C:\Windows\system32\cjeca32.dll

2013-08-10 21:25 - 2012-02-14 11:48 - 00208816 _____ (Reiner Kartengeräte GmbH) C:\Windows\system32\cjppa32.dll

2013-08-10 21:25 - 2012-02-14 11:48 - 00053680 _____ (REINER SCT) C:\Windows\system32\cjKbBase.dll

2013-08-10 21:25 - 2012-02-14 11:47 - 00063408 _____ (REINER SCT) C:\Windows\system32\cjpcscli.exe

2013-08-10 21:25 - 2011-07-22 07:50 - 00359856 _____ (REINER SCT) C:\Windows\system32\zkasigct.dll

2013-08-10 21:25 - 2010-02-10 19:39 - 00269824 ____N (REINER SCT) C:\Windows\system32\rsct_pnp.dll

2013-08-10 21:25 - 2009-03-09 17:17 - 00274224 ____N (REINER SCT) C:\Windows\system32\gkapi.dll

2013-08-10 21:25 - 2008-03-25 09:24 - 00060702 ____N C:\Windows\system32\rsct_pv_start.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00060702 ____N C:\Windows\system32\rsct_mv_start.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00013084 ____N C:\Windows\system32\rsct_key_clear.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00013026 ____N C:\Windows\system32\rsct_key_err.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00004636 ____N C:\Windows\system32\rsct_key_1.wav

2013-08-10 21:25 - 2008-03-25 09:24 - 00000656 ____N C:\Windows\system32\rsct_key.wav

2013-08-10 21:25 - 2008-03-19 13:48 - 00033136 ____N C:\Windows\system32\rsct_pv_stop.wav

2013-08-10 21:25 - 2008-03-19 13:48 - 00033136 ____N C:\Windows\system32\rsct_mv_stop.wav

2013-08-10 21:25 - 2007-11-07 12:20 - 00344064 ____N (REINER SCT) C:\Windows\system32\SetupHBCI.exe

2013-08-10 21:25 - 2007-11-07 12:20 - 00196608 ____N (REINER SCT) C:\Windows\system32\rsct_pnp.exe

2013-08-10 21:25 - 2007-05-31 07:38 - 00434252 ____N (Microsoft Corporation) C:\Windows\system32\MSVCRTD.DLL

2013-08-10 21:25 - 2007-05-31 07:38 - 00167936 ____N () C:\Windows\system32\SerialXP.dll

2013-08-10 21:25 - 2007-05-31 07:38 - 00151552 ____N (REINER SCT) C:\Windows\system32\OcfCopy.exe

2013-08-10 21:25 - 2007-05-31 07:38 - 00053248 ____N (REINER SCT) C:\Windows\system32\cjtrm.dll

2013-08-10 21:25 - 2007-05-31 07:38 - 00041472 ____N (IBM Corporation) C:\Windows\system32\ocfpcsc1.dll

2013-08-10 21:25 - 2007-05-31 07:38 - 00027648 ____N C:\Windows\system32\win32com.dll

2013-08-10 21:25 - 2007-05-31 07:38 - 00014949 ____N (franson.biz) C:\Windows\system32\Drivers\bizVSerialNT.sys

2013-08-10 21:24 - 2013-08-10 21:25 - 00000000 ____D C:\ProgramData\REINER SCT

2013-08-10 21:21 - 2013-08-10 21:20 - 11042768 _____ (Macrovision Corporation) P:\Desktop\bc_6_10_0_SP_2.exe

2013-07-28 13:41 - 2013-07-28 13:41 - 00001999 _____ C:\Users\Public\Desktop\t@x 2013.lnk

2013-07-28 13:41 - 2013-07-28 13:41 - 00001999 _____ C:\ProgramData\Desktop\t@x 2013.lnk

2013-07-28 13:29 - 2013-07-28 13:28 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-07-28 13:29 - 2013-07-28 13:28 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-07-28 13:29 - 2013-07-28 13:28 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-07-28 13:29 - 2013-07-28 13:28 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-07-28 12:45 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-07-28 12:45 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-07-28 12:45 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-07-28 12:45 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-07-28 12:45 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-07-28 12:45 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-07-28 12:45 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-07-28 12:45 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-07-28 12:45 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-07-28 12:45 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-07-28 12:45 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-07-28 12:45 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
 

==================== One Month Modified Files and Folders =======
 

2013-08-16 07:15 - 2008-08-28 07:26 - 00000438 ____H C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job

2013-08-16 07:11 - 2013-08-15 17:42 - 00000000 ____D C:\Neuer Ordner

2013-08-16 07:03 - 2006-11-02 14:37 - 00000000 ___RD C:\Users\Public\Recorded TV

2013-08-16 07:02 - 2013-08-14 08:32 - 00001741 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2013-08-16 07:02 - 2013-08-14 08:32 - 00001741 _____ C:\ProgramData\Desktop\Ad-Aware Antivirus.lnk

2013-08-16 07:01 - 2010-02-01 14:41 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-16 07:01 - 2008-08-28 06:22 - 00000000 ____D C:\ProgramData\NVIDIA

2013-08-16 07:01 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-16 07:01 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-16 07:01 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-16 07:00 - 2008-11-09 23:02 - 01869898 _____ C:\Windows\WindowsUpdate.log

2013-08-16 07:00 - 2008-08-28 04:21 - 00000012 _____ C:\Windows\bthservsdp.dat

2013-08-16 07:00 - 2006-11-02 15:01 - 00032558 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-16 06:52 - 2013-08-16 06:51 - 00000000 ____D C:\Users\KLAPPE~1\AppData\Local\adawarebp

2013-08-16 06:44 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache

2013-08-16 06:40 - 2013-08-16 06:40 - 00000000 ____D C:\Windows\ERUNT

2013-08-16 06:28 - 2010-02-01 14:42 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-15 17:51 - 2013-08-15 17:50 - 00000136 _____ C:\Windows\DeleteOnReboot.bat

2013-08-15 17:51 - 2013-08-15 17:48 - 00025095 _____ C:\AdwCleaner[S1].txt

2013-08-15 17:35 - 2013-08-12 10:27 - 00000000 ____D C:\FRST

2013-08-15 17:32 - 2013-08-15 08:21 - 00001838 _____ C:\Windows\PFRO.log

2013-08-15 17:29 - 2013-08-16 07:13 - 01068807 _____ (Farbar) P:\Desktop\FRST.exe

2013-08-15 08:19 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-08-15 08:03 - 2013-08-15 07:54 - 00000000 ____D C:\Windows\system32\MRT

2013-08-15 07:53 - 2006-11-02 12:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-08-15 07:52 - 2009-03-12 13:07 - 00000000 ____D C:\Users\erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson

2013-08-15 07:51 - 2013-08-10 21:52 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-08-15 07:50 - 2008-08-28 10:53 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-08-15 07:47 - 2012-03-08 18:44 - 00000000 ____D C:\Users\erich\AppData\Roaming\DVDVideoSoft

2013-08-15 07:41 - 2008-11-23 17:56 - 00000000 ____D C:\Users\KLAPPE~1\AppData\Local\Adobe

2013-08-15 07:41 - 2008-08-28 10:22 - 00000000 ____D C:\ProgramData\Adobe

2013-08-15 07:41 - 2008-08-28 10:22 - 00000000 ____D C:\Program Files\Common Files\Adobe

2013-08-14 18:02 - 2013-08-14 08:27 - 00000000 ____D C:\Users\erich\AppData\Roaming\Ad-Aware Antivirus

2013-08-14 08:45 - 2013-08-14 08:32 - 00000000 ____D C:\Program Files\Ad-Aware Antivirus

2013-08-14 08:44 - 2013-08-14 08:44 - 00000000 ____D C:\Users\erich\AppData\Roaming\LavasoftStatistics

2013-08-14 08:44 - 2013-08-14 08:44 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus

2013-08-14 08:32 - 2013-08-14 08:32 - 00000000 ____D C:\ProgramData\Lavasoft

2013-08-14 08:29 - 2013-08-14 08:29 - 00000000 ____D C:\ProgramData\Downloaded Installations

2013-08-14 08:29 - 2013-08-14 08:29 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection

2013-08-14 08:29 - 2013-08-14 08:29 - 00000000 ____D C:\Program Files\Toolbar Cleaner

2013-08-14 08:28 - 2013-08-14 08:28 - 00000000 ____D C:\Program Files\Lavasoft

2013-08-14 08:27 - 2013-08-14 08:27 - 00044424 _____ (GFI Software) C:\Windows\system32\sbbd.exe

2013-08-14 08:27 - 2013-08-14 08:27 - 00013560 _____ (GFI Software) C:\Windows\system32\Drivers\gfibto.sys

2013-08-14 08:24 - 2012-11-09 22:54 - 00000910 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-08-14 08:24 - 2012-11-09 22:54 - 00000910 _____ C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk

2013-08-14 08:24 - 2011-10-14 12:24 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-08-13 19:52 - 2008-11-09 23:01 - 00000000 ____D C:\Users\erich

2013-08-12 20:48 - 2006-11-02 12:33 - 00006100 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-12 10:09 - 2012-06-10 13:59 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-08-11 21:34 - 2013-08-10 22:41 - 00000000 ____D C:\Users\erich\.ausweisapp

2013-08-10 22:41 - 2013-08-10 22:41 - 00000807 _____ C:\Users\Public\Desktop\AusweisApp.lnk

2013-08-10 22:41 - 2013-08-10 22:41 - 00000807 _____ C:\ProgramData\Desktop\AusweisApp.lnk

2013-08-10 22:41 - 2013-08-10 22:40 - 00000000 ____D C:\Program Files\AusweisApp

2013-08-10 22:39 - 2013-08-10 22:37 - 63411200 _____ P:\Desktop\AusweisApp_011100_Windows.msi

2013-08-10 22:24 - 2013-08-10 22:24 - 00000026 _____ C:\Windows\cJCC.INI

2013-08-10 22:14 - 2013-08-10 21:57 - 00652880 _____ P:\Desktop\rsct_owok_npapi_windows-2004-1.exe

2013-08-10 21:58 - 2013-08-10 21:25 - 00000000 ____D C:\Program Files\REINER SCT

2013-08-10 21:33 - 2013-08-10 21:33 - 00002077 _____ C:\Users\Public\Desktop\Google Earth.lnk

2013-08-10 21:33 - 2013-08-10 21:33 - 00002077 _____ C:\ProgramData\Desktop\Google Earth.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00005226 _____ C:\Windows\DPINST.LOG

2013-08-10 21:27 - 2013-08-10 21:27 - 00000932 _____ C:\Users\Public\Desktop\cyberJack Gerätemanager,  Funktionstest.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00000932 _____ C:\ProgramData\Desktop\cyberJack Gerätemanager,  Funktionstest.lnk

2013-08-10 21:27 - 2013-08-10 21:27 - 00000396 _____ C:\Windows\hbcikrnl.ini

2013-08-10 21:25 - 2013-08-10 21:24 - 00000000 ____D C:\ProgramData\REINER SCT

2013-08-10 21:25 - 2008-08-28 06:25 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2013-08-10 21:20 - 2013-08-10 21:21 - 11042768 _____ (Macrovision Corporation) P:\Desktop\bc_6_10_0_SP_2.exe

2013-07-28 13:55 - 2008-08-28 12:33 - 00001713 _____ C:\Windows\WISO.INI

2013-07-28 13:55 - 2008-08-28 12:33 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH

2013-07-28 13:41 - 2013-07-28 13:41 - 00001999 _____ C:\Users\Public\Desktop\t@x 2013.lnk

2013-07-28 13:41 - 2013-07-28 13:41 - 00001999 _____ C:\ProgramData\Desktop\t@x 2013.lnk

2013-07-28 13:41 - 2011-09-18 12:27 - 00000000 ____D C:\Users\KLAPPE~1\AppData\Local\Buhl

2013-07-28 13:33 - 2011-09-18 12:24 - 00000000 ____D C:\Program Files\Buhl finance

2013-07-28 13:29 - 2008-08-28 12:26 - 00000000 ____D C:\Program Files\Common Files\Java

2013-07-28 13:28 - 2013-07-28 13:29 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-07-28 13:28 - 2013-07-28 13:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-07-28 13:28 - 2013-07-28 13:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-07-28 13:28 - 2013-07-28 13:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-07-28 13:28 - 2012-06-03 17:24 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npdeployJava1.dll

2013-07-28 13:28 - 2011-09-09 19:51 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll

2013-07-28 13:28 - 2008-08-28 12:26 - 00000000 ____D C:\Program Files\Java

2013-07-28 13:14 - 2006-11-02 14:47 - 00375376 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-28 13:12 - 2011-10-12 12:49 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-28 13:10 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer

2013-07-28 12:53 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-25 04:40 - 2013-08-15 07:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-07-25 04:32 - 2013-08-15 07:40 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-07-25 04:30 - 2013-08-15 07:40 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-07-25 04:26 - 2013-08-15 07:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-07-25 04:26 - 2013-08-15 07:40 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-07-25 04:25 - 2013-08-15 07:40 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-07-25 04:24 - 2013-08-15 07:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-07-25 04:24 - 2013-08-15 07:40 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-07-25 04:23 - 2013-08-15 07:40 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-07-25 04:23 - 2013-08-15 07:40 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-07-25 04:23 - 2013-08-15 07:40 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-07-25 04:23 - 2013-08-15 07:40 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-07-25 04:23 - 2013-08-15 07:40 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-07-25 04:22 - 2013-08-15 07:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-07-25 04:22 - 2013-08-15 07:40 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-07-25 04:22 - 2013-08-15 07:40 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-07-17 21:41 - 2013-08-14 12:39 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
 

Files to move or delete:

====================

C:\ProgramData\nvModes.dat
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-16 07:07
 
 

Hoffe, jetzt klappt es und ich habe alles richtig gemacht ;-)
 

LG Mari

==================== End Of Log ============================

--- --- ---

--- --- ---