Trojaner-Board - Trojaner

Code:

# AdwCleaner v3.011 - Bericht erstellt am 08/11/2013 um 20:39:24

# Updated 03/11/2013 von Xplode

# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)

# Benutzername : Luca - LUCA-PC

# Gestartet von : C:\Users\Luca\Desktop\adwcleaner.exe

# Option : Suchen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gefunden : C:\windows\System32\Tasks\Scheduled Update for Ask Toolbar

Ordner Gefunden C:\Program Files\Ask.com

Ordner Gefunden C:\Program Files\AVG Secure Search

Ordner Gefunden C:\Program Files\Claro LTD

Ordner Gefunden C:\Program Files\Common Files\AVG Secure Search

Ordner Gefunden C:\Program Files\hotspot shield

Ordner Gefunden C:\ProgramData\AVG Secure Search

Ordner Gefunden C:\ProgramData\Babylon

Ordner Gefunden C:\ProgramData\hotspot shield

Ordner Gefunden C:\Users\Luca\AppData\Local\apn

Ordner Gefunden C:\Users\Luca\AppData\Local\AVG Secure Search

Ordner Gefunden C:\Users\Luca\AppData\Local\PackageAware

Ordner Gefunden C:\Users\Luca\AppData\LocalLow\AskToolbar

Ordner Gefunden C:\Users\Luca\AppData\LocalLow\AVG Secure Search

Ordner Gefunden C:\Users\Luca\AppData\Roaming\Claro

Ordner Gefunden C:\Users\Luca\AppData\Roaming\Claro LTD

Ordner Gefunden C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect

Ordner Gefunden C:\windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gefunden : HKCU\Software\APN

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\AskToolbar

Schlüssel Gefunden : HKCU\Software\Ask.com

Schlüssel Gefunden : HKCU\Software\AVG Secure Search

Schlüssel Gefunden : HKCU\Software\Claro LTD

Schlüssel Gefunden : HKCU\Software\Conduit

Schlüssel Gefunden : HKCU\Software\f57ddd9b43cb944

Schlüssel Gefunden : HKCU\Software\IGearSettings

Schlüssel Gefunden : HKCU\Software\Microsoft\ClaroDirectory

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}

Schlüssel Gefunden : HKCU\Software\Softonic

Schlüssel Gefunden : HKLM\Software\APN

Schlüssel Gefunden : HKLM\Software\AskToolbar

Schlüssel Gefunden : HKLM\Software\AVG Secure Search

Schlüssel Gefunden : HKLM\Software\AVG Security Toolbar

Schlüssel Gefunden : HKLM\Software\Babylon

Schlüssel Gefunden : HKLM\Software\Claro LTD

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\claro.claroappCore

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\claro.claroappCore.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\claro.clarodskBnd

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\claro.clarodskBnd.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\claro.claroHlpr

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\claro.claroHlpr.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{05340575-7D2A-4266-9A84-7EEBDC476884}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{97C47A30-3CFB-474B-94E3-6019A7EE0610}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EE4FC43F-84CE-4E20-88C2-2188525B47FB}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F398D871-ED00-42A8-BEAA-0209E9E59FCC}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escortIEPane

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escrtBtn.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\esrv.claroESrvc

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\esrv.claroESrvc.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\HssIE.HssIEApp

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\HssIE.HssIEApp.1

Schlüssel Gefunden : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF

Schlüssel Gefunden : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{16466D47-74A8-4928-B8B2-07CD79ABFC9F}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{26D5CC0A-7A46-4D86-AF45-2EFA320B0C54}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2D13AC8F-037E-40C5-ADA6-231BA74EA2F4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{322EDCF5-9E7D-4021-8C67-F3FFE4961A38}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3E254398-828F-4D51-A39E-3F6B6D96A12C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{442DAF0C-7EAD-48D9-ABEA-E0036470D6D5}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{58EB187D-24F8-4423-BD6C-655CE4C416BD}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{6BEB066C-A791-4A21-B934-7783533FE888}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A07612DF-B1DD-484F-A1C3-36CA4CE919D2}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A76F97B2-2C56-456A-A29E-72741595C2E8}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B19D9D96-E59C-4936-B283-8A831CDB3A53}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DC8AAABA-3F8B-4866-8B3A-D9368133A478}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E15519AE-99BE-42DD-BE60-FFC3C183F443}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\S

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{A903AC15-686E-4D67-A355-86FCBE9F60DA}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

Schlüssel Gefunden : HKLM\Software\Conduit

Schlüssel Gefunden : HKLM\Software\DataMngr

Schlüssel Gefunden : HKLM\SOFTWARE\f57ddd9b43cb944

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\dcillohgikpecbmgioknapdpcjofaafl

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof

Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60295942-9E5F-4EE8-B785-3A655904D24F}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_starter-background-changer_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_starter-background-changer_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_allcapture_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_allcapture_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_camstudio_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_camstudio_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_morphvox_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_morphvox_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sprache-ubersetzer-gadget_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sprache-ubersetzer-gadget_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_winrecorder_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_winrecorder_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\Scheduled Update for Ask Toolbar

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{32756596-4C42-4564-ACC5-43E3C64F427D}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E

Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{069b290f-5398-4629-a009-85b4bcb4b1b9}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\claro

Schlüssel Gefunden : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]

Wert Gefunden : HKCU\Software\Mozilla\Firefox\Extensions [{58BD07EB-0EE0-4DF0-8121-DC9B693373DF}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9E131A93-EED7-4BEB-B015-A0ADB30B5646}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]

Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16576
 

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.claro-search.com/?affID=118660&tt=0313_1&babsrc=HP_ss&mntrId=da3000e50000000000005404a60ba9bc

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages] - hxxps://isearch.avg.com/?cid={6DFFCB0E-32C9-4FDF-B827-E4E782A03E67}&mid=891790299a4a47d084fe854de0ef404f-7915a3a94dbe77efcebe713c653c09cc5147946a&lang=en&ds=yu012&pr=sa&d=2012-05-22 19:58:35&v=12.2.5.32&sap=hp

hxxp://eeepc.asus.com
 

-\\ Google Chrome v
 

[ Datei : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gefunden : homepage
 

*************************
 

AdwCleaner[R0].txt - [24450 octets] - [08/11/2013 20:33:05]

AdwCleaner[R1].txt - [24240 octets] - [08/11/2013 20:39:24]

AdwCleaner[S0].txt - [469 octets] - [08/11/2013 20:37:48]
 

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [24360 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Starter x86

Ran by Luca on 08.11.2013 at 20:46:17,71

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apnupdater

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC}

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-2443274617-2103969203-905473786-1000\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} 

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} 
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\escort.escortiepane

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\escort.escortiepane.1

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escort.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortapp.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escorteng.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortlbr.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\esrv.exe

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\genericasktoolbar.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\viprotocol.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\igearsettings

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2443274617-2103969203-905473786-1000\Software\sweetim

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\babylon.dskbnd

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\babylon.dskbnd.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylnapp.appcore

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylnapp.appcore.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\claro.claroappcore

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\claro.claroappcore.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\claro.clarodskbnd

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\claro.clarodskbnd.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\claro.clarohlpr

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\claro.clarohlpr.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\escort.escrtbtn.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\esrv.claroesrvc

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\esrv.claroesrvc.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\features\a28b4d68debaa244eb686953b7074fef

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\a28b4d68debaa244eb686953b7074fef

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\s

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\bundlesweetimsetup_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\bundlesweetimsetup_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\claro

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{069b290f-5398-4629-a009-85b4bcb4b1b9}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_starter-background-changer_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_starter-background-changer_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_allcapture_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_allcapture_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_camstudio_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_camstudio_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_morphvox_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_morphvox_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_sprache-ubersetzer-gadget_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_sprache-ubersetzer-gadget_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_winrecorder_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_winrecorder_RASMANCS

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{51CB60F6-2081-4E01-8152-221DB8CF9F7D}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}

Successfully deleted: [Registry Key] "hkey_current_user\software\apn"

Successfully deleted: [Registry Key] "hkey_current_user\software\appdatalow\software\asktoolbar"

Successfully deleted: [Registry Key] "hkey_current_user\software\ask.com"

Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"

Successfully deleted: [Registry Key] "hkey_local_machine\software\apn"

Successfully deleted: [Registry Key] "hkey_local_machine\software\asktoolbar"

Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\appid\{9b0cb95c-933a-4b8c-b6d4-edcd19a43874}"

Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\typelib\{2996f0e7-292b-4cae-893f-47b8b1c05b56}"
 
 
 

~~~ Files
 

Successfully deleted: [File] "C:\windows\System32\Tasks\scheduled update for ask toolbar"

Successfully deleted: [File] C:\windows\system32\sho100A.tmp

Successfully deleted: [File] C:\windows\system32\sho2257.tmp

Successfully deleted: [File] C:\windows\system32\sho4AF8.tmp

Successfully deleted: [File] C:\windows\system32\sho7A40.tmp

Successfully deleted: [File] C:\windows\system32\shoBD37.tmp

Successfully deleted: [File] C:\windows\system32\shoE762.tmp

Successfully deleted: [File] C:\windows\system32\shoFD0A.tmp
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\babylon"

Successfully deleted: [Folder] "C:\ProgramData\hotspot shield"

Successfully deleted: [Folder] "C:\Users\Luca\AppData\Roaming\claro"

Successfully deleted: [Folder] "C:\Users\Luca\AppData\Roaming\claro ltd"

Successfully deleted: [Folder] "C:\Users\Luca\appdata\local\apn"

Successfully deleted: [Folder] "C:\Program Files\claro ltd"

Successfully deleted: [Folder] "C:\Program Files\hotspot shield"

Successfully deleted: [Folder] "C:\Users\Luca\AppData\Roaming\microsoft\windows\start menu\programs\browserprotect"

Successfully deleted: [Empty Folder] C:\Users\Luca\appdata\local\{3E959A88-61AD-4769-B88E-CF19216398EF}

Successfully deleted: [Empty Folder] C:\Users\Luca\appdata\local\{7D37530E-4122-4865-96C3-19D745D1AE64}

Successfully deleted: [Folder] "C:\Users\Luca\appdata\locallow\asktoolbar"

Successfully deleted: [Folder] "C:\Program Files\ask.com"

Successfully deleted: [Folder] "C:\windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}"
 
 
 

~~~ Chrome
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\dcillohgikpecbmgioknapdpcjofaafl

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 08.11.2013 at 20:56:58,62

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013

Ran by Luca (administrator) on LUCA-PC on 08-11-2013 20:58:33

Running from C:\Users\Luca\Desktop

Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

() C:\windows\system32\AsusService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

() C:\windows\system32\PnkBstrA.exe

(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiMiniService.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(ASUSTeK Computer Inc.) C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe

(ASUSTeK Computer Inc.) C:\Program Files\ASUS\HotkeyService\HotkeyService.exe

(ASUSTeK Computer Inc.) C:\Program Files\ASUS\SHE\SuperHybridEngine.exe

(ASUS) C:\Program Files\ASUS\CapsHook\CapsHook.exe

(AsusTek Computer Inc.) C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Microsoft Corporation) C:\windows\system32\wuauclt.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotkeyMon] - C:\Program Files\Asus\HotkeyService\HotKeyMon.exe [101288 2010-12-07] (ASUSTeK Computer Inc.)

HKLM\...\Run: [HotkeyService] - C:\Program Files\Asus\HotkeyService\HotkeyService.exe [1248176 2010-12-07] (ASUSTeK Computer Inc.)

HKLM\...\Run: [SuperHybridEngine] - C:\Program Files\Asus\SHE\SuperHybridEngine.exe [412600 2010-11-15] (ASUSTeK Computer Inc.)

HKLM\...\Run: [LiveUpdate] - C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe [1095080 2011-03-11] (AsusTek Computer Inc.)

HKLM\...\Run: [CapsHook] - C:\Program Files\Asus\CapsHook\CapsHook.exe [445344 2010-11-15] (ASUS)

HKLM\...\Run: [Eee Docking] - C:\Program Files\Asus\Eee Docking\Eee Docking.exe [414384 2011-01-06] (ASUSTek Computer Inc.)

HKLM\...\Run: [VizorHtmlDialog.exe] - C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.)

HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe [112632 2010-10-12] (Trend Micro Inc.)

HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [218448 2010-10-20] (Trend Micro Inc.)

HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9177632 2010-04-27] (Realtek Semiconductor)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [548744 2010-06-10] (ELAN Microelectronic Corp.)

HKLM\...\Run: [Boingo Wi-Fi] - C:\Program Files\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2011-12-25] ()

HKLM\...\Run: [ASUSPRP] - C:\Program Files\Asus\APRP\aprp.exe [2018032 2011-04-02] (ASUSTek Computer Inc.)

HKLM\...\Run: [ASUSWebStorage] - C:\Program Files\Asus\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-08-12] (Microsoft Corporation)

HKLM\...\Run: [vProt] - C:\Program Files\AVG Secure Search\vprot.exe [2404376 2013-10-03] ()

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM\...\Run: [] - [x]

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)

HKCU\...\Run: [Wisdom-soft AutoScreenRecorder 3.1 Pro] - 0

HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\Luca\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-22] (Spotify Ltd)

HKCU\...\Run: [ScreenCloud] - C:\Program Files\ScreenCloud\ScreenCloud.exe

HKCU\...\Run: [puush] - C:\Program Files\puush\puush.exe [567880 2013-07-23] ()

HKCU\...\Run: [Google Update] - C:\Users\Luca\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-30] (Google Inc.)

HKCU\...\Run: [Spotify] - C:\Users\Luca\AppData\Roaming\Spotify\spotify.exe [4752384 2013-10-22] (Spotify Ltd)

HKU\Default\...\RunOnce: [Reboot] - C:\Windows\Reboot.exe [ 2010-12-13] (AsusTek Computer Inc.)

HKU\Default\...\RunOnce: [IconPatch] - C:\Windows\AP\IconPatch.vbs

HKU\Default User\...\RunOnce: [Reboot] - C:\Windows\Reboot.exe [ 2010-12-13] (AsusTek Computer Inc.)

HKU\Default User\...\RunOnce: [IconPatch] - C:\Windows\AP\IconPatch.vbs

Startup: C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Luca\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk

ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://isearch.avg.com/?cid={6DFFCB0E-32C9-4FDF-B827-E4E782A03E67}&mid=891790299a4a47d084fe854de0ef404f-7915a3a94dbe77efcebe713c653c09cc5147946a&lang=en&ds=yu012&pr=sa&d=2012-05-22 19:58:35&v=12.2.5.32&sap=hp

hxxp://eeepc.asus.com

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com

SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File

Toolbar: HKLM - Claro LTD Toolbar - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - C:\Program Files\Claro LTD\claro\1.8.8.5\claroTlbr.dll No File

Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Hosts: 74.208.10.249 gs.apple.com

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

Chrome: 

=======

CHR HomePage: hxxp://www.claro-search.com/?affID=118660&tt=0313_1&babsrc=HP_ss&mntrId=da3000e50000000000005404a60ba9bc

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Luca\AppData\Local\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Luca\AppData\Local\Google\Chrome\Application\30.0.1599.101\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\Luca\AppData\Local\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File

CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Users\Luca\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (YouTube) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Isoball 3) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\iajlkcpgcnbhfhpdeooockfaincfkjjj\1.4.0_0

CHR Extension: (FakkuDownloader) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jllomdofcfnlnnnlplkmaobegifdpagb\1.0_0

CHR Extension: (Logo Maker) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmgffnfpmjbignenkflohmgagidjcomp\1.0.0.2_0

CHR Extension: (Google Wallet) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (iOS, iPad, iPhone & iPod Grey Texture) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\odgbpcbfijafedicgoagncajafompaok\2_0

CHR Extension: (Gmail) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\17.0.1.12\avg.crx

CHR StartMenuInternet: Google Chrome - C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe
 

========================== Services (Whitelisted) =================
 

R2 AsusService; C:\windows\system32\AsusService.exe [224680 2010-12-07] ()

S2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1612112 2013-10-01] (LogMeIn Inc.)

R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2013-08-26] (LogMeIn, Inc.)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-08-12] (Microsoft Corporation)

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-08-12] (Microsoft Corporation)

R2 PnkBstrA; C:\windows\system32\PnkBstrA.exe [75136 2012-08-25] ()

R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)

R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [161104 2010-09-17] (Trend Micro Inc.)

S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [x]
 

==================== Drivers (Whitelisted) ====================
 

R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [11456 2010-06-28] ()

R1 AsUpIO; C:\Windows\System32\drivers\AsUpIO.sys [11832 2010-08-03] ()

R1 avgtp; C:\windows\system32\drivers\avgtpx86.sys [37664 2013-10-03] (AVG Technologies)

R3 cbfs3; C:\Windows\System32\DRIVERS\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)

R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [102912 2010-07-21] (ELAN Microelectronic Corp.)

S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [35592 2012-11-01] (AnchorFree Inc.)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [13880 2009-07-20] ( )

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)

S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC)

R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [80464 2010-09-17] (Trend Micro Inc.)

R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [189520 2010-09-17] (Trend Micro Inc.)

R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [64080 2010-09-17] (Trend Micro Inc.)

R2 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [92112 2010-09-17] (Trend Micro Inc.)

S3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-01-22] (RealVNC Ltd.)

S3 btwaudio; system32\drivers\btwaudio.sys [x]

S3 btwavdt; \SystemRoot\system32\drivers\btwavdt.sys [x]

S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [x]

S3 btwrchid; \SystemRoot\system32\drivers\btwrchid.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-08 20:56 - 2013-11-08 20:56 - 00019627 _____ C:\Users\Luca\Desktop\JRT.txt

2013-11-08 20:46 - 2013-11-08 20:46 - 00000000 ____D C:\windows\ERUNT

2013-11-08 20:32 - 2013-11-08 20:42 - 00000000 ____D C:\AdwCleaner

2013-11-08 20:29 - 2013-11-08 20:30 - 01034531 _____ (Thisisu) C:\Users\Luca\Desktop\JRT.exe

2013-11-08 20:26 - 2013-11-08 20:29 - 01073262 _____ C:\Users\Luca\Desktop\adwcleaner.exe

2013-11-08 20:24 - 2013-11-08 20:25 - 00002112 _____ C:\Users\Luca\Desktop\chat.rar

2013-11-03 20:18 - 2013-11-03 20:18 - 00001067 _____ C:\Users\Public\Desktop\Anti-Malware.lnk

2013-11-03 20:18 - 2013-11-03 20:18 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Malwarebytes

2013-11-03 20:17 - 2013-11-03 20:18 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-11-03 20:17 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys

2013-11-02 20:45 - 2013-11-02 21:31 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-02 20:45 - 2013-11-02 20:45 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-02 20:42 - 2013-11-02 20:42 - 00075992 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys

2013-10-31 22:01 - 2013-10-31 22:04 - 00029644 _____ C:\Users\Luca\Desktop\Addition.txt

2013-10-31 21:47 - 2013-10-31 21:47 - 00000000 ____D C:\FRST

2013-10-31 21:44 - 2013-10-31 21:46 - 01089445 _____ (Farbar) C:\Users\Luca\Desktop\FRST.exe

2013-10-28 20:33 - 2013-10-28 20:33 - 00003542 _____ C:\Users\Luca\Desktop\troja.txt

2013-10-28 20:27 - 2013-10-28 20:32 - 00000000 ____D C:\Users\Luca\AppData\Local\Avg2013

2013-10-23 17:24 - 2013-10-23 17:24 - 00000000 ____D C:\Users\Luca\AppData\Local\LogMeIn

2013-10-23 17:24 - 2013-10-23 17:24 - 00000000 ____D C:\ProgramData\LogMeIn

2013-10-22 21:12 - 2013-11-08 20:16 - 00000000 ____D C:\Users\Luca\AppData\Local\LogMeIn Hamachi

2013-10-22 21:09 - 2013-10-22 21:09 - 00000896 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2013-10-22 21:09 - 2013-10-22 21:09 - 00000000 ____D C:\Program Files\LogMeIn Hamachi

2013-10-22 20:04 - 2013-10-22 20:04 - 00000000 ____D C:\Users\Luca\AppData\Local\Demo1

2013-10-22 19:56 - 2013-10-22 20:03 - 00000000 ____D C:\Users\Luca\Documents\GameMaker

2013-10-22 19:47 - 2013-10-22 19:47 - 00000000 ____D C:\Users\Luca\AppData\Local\YoYo_Games_Ltd

2013-10-22 19:34 - 2013-10-22 19:50 - 00000000 ____D C:\Users\Luca\AppData\Local\GameMaker-Studio

2013-10-20 14:22 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys

2013-10-20 14:19 - 2013-10-20 14:19 - 00000000 ____D C:\windows\TempD7193B2C-6B82-3E4A-7E89-0797A83EF03B-Signatures

2013-10-11 18:22 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys

2013-10-11 18:22 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys

2013-10-11 18:22 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll

2013-10-11 18:22 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe

2013-10-11 18:22 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe

2013-10-11 18:22 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll

2013-10-11 18:22 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll

2013-10-11 18:22 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll

2013-10-11 18:22 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys

2013-10-11 18:22 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll

2013-10-11 18:22 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys

2013-10-11 18:22 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys

2013-10-11 18:21 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2013-10-11 18:21 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll

2013-10-11 18:21 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-11 18:21 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys

2013-10-11 18:21 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys

2013-10-11 18:21 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll

2013-10-11 18:21 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll

2013-10-11 18:21 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys

2013-10-11 18:21 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll

2013-10-11 18:21 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll

2013-10-11 18:21 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll

2013-10-11 18:21 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll

2013-10-11 18:21 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll

2013-10-11 18:20 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
 

==================== One Month Modified Files and Folders =======
 

2013-11-08 20:56 - 2013-11-08 20:56 - 00019627 _____ C:\Users\Luca\Desktop\JRT.txt

2013-11-08 20:46 - 2013-11-08 20:46 - 00000000 ____D C:\windows\ERUNT

2013-11-08 20:42 - 2013-11-08 20:32 - 00000000 ____D C:\AdwCleaner

2013-11-08 20:39 - 2011-12-26 11:17 - 01879996 _____ C:\windows\WindowsUpdate.log

2013-11-08 20:37 - 2009-07-14 05:34 - 00009696 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-08 20:37 - 2009-07-14 05:34 - 00009696 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-08 20:31 - 2012-11-30 19:12 - 00001116 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2443274617-2103969203-905473786-1000UA.job

2013-11-08 20:31 - 2012-05-01 15:57 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2013-11-08 20:30 - 2013-11-08 20:29 - 01034531 _____ (Thisisu) C:\Users\Luca\Desktop\JRT.exe

2013-11-08 20:30 - 2013-06-04 20:22 - 00217153 _____ C:\windows\IE10_main.log

2013-11-08 20:29 - 2013-11-08 20:26 - 01073262 _____ C:\Users\Luca\Desktop\adwcleaner.exe

2013-11-08 20:28 - 2012-01-07 19:15 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Skype

2013-11-08 20:25 - 2013-11-08 20:24 - 00002112 _____ C:\Users\Luca\Desktop\chat.rar

2013-11-08 20:25 - 2012-11-10 21:24 - 00000000 ____D C:\Users\Luca\AppData\Local\Spotify

2013-11-08 20:25 - 2012-11-10 21:21 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Spotify

2013-11-08 20:21 - 2013-10-04 20:18 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-08 20:18 - 2013-01-26 17:42 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Dropbox

2013-11-08 20:16 - 2013-10-22 21:12 - 00000000 ____D C:\Users\Luca\AppData\Local\LogMeIn Hamachi

2013-11-08 20:16 - 2013-01-26 17:49 - 00000000 ___RD C:\Users\Luca\Dropbox

2013-11-08 20:11 - 2013-10-04 20:18 - 00001090 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-08 20:11 - 2013-06-07 22:42 - 00000350 _____ C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job

2013-11-08 20:11 - 2013-05-29 18:27 - 00000350 _____ C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job

2013-11-08 20:11 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT

2013-11-08 20:11 - 2009-07-14 05:39 - 00083964 _____ C:\windows\setupact.log

2013-11-04 21:25 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET

2013-11-04 21:18 - 2012-11-30 19:12 - 00001064 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2443274617-2103969203-905473786-1000Core.job

2013-11-04 19:31 - 2012-05-12 09:38 - 00000000 ____D C:\Users\Luca\AppData\Roaming\FileZilla

2013-11-03 21:13 - 2013-07-06 14:25 - 00000000 ____D C:\Users\Luca\AppData\Roaming\.minecraft

2013-11-03 20:18 - 2013-11-03 20:18 - 00001067 _____ C:\Users\Public\Desktop\Anti-Malware.lnk

2013-11-03 20:18 - 2013-11-03 20:18 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Malwarebytes

2013-11-03 20:18 - 2013-11-03 20:17 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-11-02 21:33 - 2013-05-29 19:47 - 00000000 ____D C:\Program Files\Sublime Text 2

2013-11-02 21:31 - 2013-11-02 20:45 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-02 20:45 - 2013-11-02 20:45 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-02 20:42 - 2013-11-02 20:42 - 00075992 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys

2013-11-01 16:13 - 2011-02-16 16:44 - 00811218 _____ C:\windows\system32\perfh013.dat

2013-11-01 16:13 - 2011-02-16 16:44 - 00181222 _____ C:\windows\system32\perfc013.dat

2013-11-01 16:13 - 2011-02-16 16:39 - 00808040 _____ C:\windows\system32\perfh010.dat

2013-11-01 16:13 - 2011-02-16 16:39 - 00175094 _____ C:\windows\system32\perfc010.dat

2013-11-01 16:13 - 2009-07-27 11:11 - 04803440 _____ C:\windows\system32\PerfStringBackup.INI

2013-10-31 22:04 - 2013-10-31 22:01 - 00029644 _____ C:\Users\Luca\Desktop\Addition.txt

2013-10-31 21:47 - 2013-10-31 21:47 - 00000000 ____D C:\FRST

2013-10-31 21:46 - 2013-10-31 21:44 - 01089445 _____ (Farbar) C:\Users\Luca\Desktop\FRST.exe

2013-10-31 21:34 - 2011-04-02 03:30 - 00055902 _____ C:\windows\PFRO.log

2013-10-28 20:33 - 2013-10-28 20:33 - 00003542 _____ C:\Users\Luca\Desktop\troja.txt

2013-10-28 20:32 - 2013-10-28 20:27 - 00000000 ____D C:\Users\Luca\AppData\Local\Avg2013

2013-10-28 20:32 - 2013-04-25 18:00 - 00000000 ____D C:\ProgramData\MFAData

2013-10-23 17:24 - 2013-10-23 17:24 - 00000000 ____D C:\Users\Luca\AppData\Local\LogMeIn

2013-10-23 17:24 - 2013-10-23 17:24 - 00000000 ____D C:\ProgramData\LogMeIn

2013-10-22 21:09 - 2013-10-22 21:09 - 00000896 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2013-10-22 21:09 - 2013-10-22 21:09 - 00000000 ____D C:\Program Files\LogMeIn Hamachi

2013-10-22 20:42 - 2011-04-02 03:41 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2013-10-22 20:12 - 2011-12-25 20:28 - 00000000 ____D C:\Users\Luca

2013-10-22 20:04 - 2013-10-22 20:04 - 00000000 ____D C:\Users\Luca\AppData\Local\Demo1

2013-10-22 20:03 - 2013-10-22 19:56 - 00000000 ____D C:\Users\Luca\Documents\GameMaker

2013-10-22 19:50 - 2013-10-22 19:34 - 00000000 ____D C:\Users\Luca\AppData\Local\GameMaker-Studio

2013-10-22 19:47 - 2013-10-22 19:47 - 00000000 ____D C:\Users\Luca\AppData\Local\YoYo_Games_Ltd

2013-10-22 19:44 - 2013-04-05 01:21 - 00000000 ____D C:\Users\Luca\Batch

2013-10-21 18:39 - 2013-01-25 19:15 - 00000000 ___RD C:\Users\Luca\Programme

2013-10-21 18:35 - 2012-11-24 20:39 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Notepad++

2013-10-21 18:35 - 2012-11-24 20:39 - 00000000 ____D C:\Program Files\Notepad++

2013-10-20 18:02 - 2011-12-25 20:55 - 00001945 _____ C:\windows\epplauncher.mif

2013-10-20 18:01 - 2011-12-25 20:55 - 00000000 ____D C:\Program Files\Microsoft Security Client

2013-10-20 14:19 - 2013-10-20 14:19 - 00000000 ____D C:\windows\TempD7193B2C-6B82-3E4A-7E89-0797A83EF03B-Signatures

2013-10-20 14:04 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF

2013-10-19 18:32 - 2012-01-07 19:14 - 00000000 ___RD C:\Program Files\Skype

2013-10-19 18:32 - 2012-01-07 19:14 - 00000000 ____D C:\ProgramData\Skype

2013-10-19 18:18 - 2012-08-18 10:08 - 00000000 ____D C:\Users\Luca\AppData\Local\Paint.NET

2013-10-19 14:17 - 2009-07-14 05:33 - 00261288 _____ C:\windows\system32\FNTCACHE.DAT

2013-10-12 21:57 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\nl-NL

2013-10-12 21:57 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\it-IT

2013-10-12 21:57 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\fr-FR

2013-10-12 21:57 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE

2013-10-12 19:17 - 2011-04-02 03:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-10-11 18:46 - 2013-08-30 15:26 - 00000000 ____D C:\windows\system32\MRT

2013-10-11 18:38 - 2013-02-04 19:19 - 78106760 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

2013-10-11 17:35 - 2012-05-01 15:57 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe

2013-10-11 17:35 - 2011-12-26 11:29 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2012-09-27 14:43
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Und? Ist er CLEAN? ^.^

Code:

# AdwCleaner v3.012 - Bericht erstellt am 15/11/2013 um 21:08:55

# Updated 11/11/2013 von Xplode

# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)

# Benutzername : Luca - LUCA-PC

# Gestartet von : C:\Users\Luca\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\AVG Secure Search

Ordner Gelöscht : C:\ProgramData\NCH Software

Ordner Gelöscht : C:\Program Files\AVG Secure Search

Ordner Gelöscht : C:\Program Files\Common Files\AVG Secure Search

Ordner Gelöscht : C:\Users\Luca\AppData\Local\AVG Secure Search

Ordner Gelöscht : C:\Users\Luca\AppData\Local\PackageAware

Ordner Gelöscht : C:\Users\Luca\AppData\LocalLow\AVG Secure Search
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{58BD07EB-0EE0-4DF0-8121-DC9B693373DF}]

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{32756596-4C42-4564-ACC5-43E3C64F427D}

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{32756596-4C42-4564-ACC5-43E3C64F427D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\HssIE.HssIEApp

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\HssIE.HssIEApp.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]

Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Schlüssel Gelöscht : HKCU\Software\f57ddd9b43cb944

Schlüssel Gelöscht : HKLM\SOFTWARE\f57ddd9b43cb944

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{05340575-7D2A-4266-9A84-7EEBDC476884}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{97C47A30-3CFB-474B-94E3-6019A7EE0610}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE4FC43F-84CE-4E20-88C2-2188525B47FB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F398D871-ED00-42A8-BEAA-0209E9E59FCC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{16466D47-74A8-4928-B8B2-07CD79ABFC9F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{26D5CC0A-7A46-4D86-AF45-2EFA320B0C54}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2D13AC8F-037E-40C5-ADA6-231BA74EA2F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{322EDCF5-9E7D-4021-8C67-F3FFE4961A38}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3E254398-828F-4D51-A39E-3F6B6D96A12C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{442DAF0C-7EAD-48D9-ABEA-E0036470D6D5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{58EB187D-24F8-4423-BD6C-655CE4C416BD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6BEB066C-A791-4A21-B934-7783533FE888}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A07612DF-B1DD-484F-A1C3-36CA4CE919D2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A76F97B2-2C56-456A-A29E-72741595C2E8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B19D9D96-E59C-4936-B283-8A831CDB3A53}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC8AAABA-3F8B-4866-8B3A-D9368133A478}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E15519AE-99BE-42DD-BE60-FFC3C183F443}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A903AC15-686E-4D67-A355-86FCBE9F60DA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60295942-9E5F-4EE8-B785-3A655904D24F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9E131A93-EED7-4BEB-B015-A0ADB30B5646}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

Schlüssel Gelöscht : HKCU\Software\AVG Secure Search

Schlüssel Gelöscht : HKCU\Software\Claro LTD

Schlüssel Gelöscht : HKCU\Software\Microsoft\ClaroDirectory

Schlüssel Gelöscht : HKCU\Software\NCH Software

Schlüssel Gelöscht : HKLM\Software\AVG Secure Search

Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar

Schlüssel Gelöscht : HKLM\Software\Claro LTD

Schlüssel Gelöscht : HKLM\Software\NCH Software

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16576
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
 

-\\ Google Chrome v
 

[ Datei : C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht : homepage
 

*************************
 

AdwCleaner[R0].txt - [24450 octets] - [08/11/2013 20:33:05]

AdwCleaner[R1].txt - [24441 octets] - [08/11/2013 20:39:24]

AdwCleaner[R2].txt - [11593 octets] - [15/11/2013 21:05:58]

AdwCleaner[S0].txt - [469 octets] - [08/11/2013 20:37:48]

AdwCleaner[S1].txt - [11316 octets] - [15/11/2013 21:08:55]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [11377 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Starter x86

Ran by Luca on 15.11.2013 at 21:22:17,96

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 15.11.2013 at 21:33:25,90

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013

Ran by Luca (administrator) on LUCA-PC on 15-11-2013 21:45:16

Running from C:\Users\Luca\Desktop

Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

() C:\windows\system32\AsusService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

() C:\windows\system32\PnkBstrA.exe

(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiMiniService.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(ASUSTeK Computer Inc.) C:\Program Files\ASUS\HotkeyService\HotkeyService.exe

(AsusTek Computer Inc.) C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe

(ASUSTeK Computer Inc.) C:\Program Files\ASUS\SHE\SuperHybridEngine.exe

(ASUS) C:\Program Files\ASUS\CapsHook\CapsHook.exe

(ASUSTeK Computer Inc.) C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Intel Corporation) C:\windows\system32\igfxsrvc.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Boingo Wireless, Inc.) C:\Program Files\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Spotify Ltd) C:\Users\Luca\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Dropbox, Inc.) C:\Users\Luca\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files\Evernote\Evernote\EvernoteClipper.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe

(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe

() C:\Program Files\puush\puush.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotkeyMon] - C:\Program Files\Asus\HotkeyService\HotKeyMon.exe [101288 2010-12-07] (ASUSTeK Computer Inc.)

HKLM\...\Run: [HotkeyService] - C:\Program Files\Asus\HotkeyService\HotkeyService.exe [1248176 2010-12-07] (ASUSTeK Computer Inc.)

HKLM\...\Run: [SuperHybridEngine] - C:\Program Files\Asus\SHE\SuperHybridEngine.exe [412600 2010-11-15] (ASUSTeK Computer Inc.)

HKLM\...\Run: [LiveUpdate] - C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe [1095080 2011-03-11] (AsusTek Computer Inc.)

HKLM\...\Run: [CapsHook] - C:\Program Files\Asus\CapsHook\CapsHook.exe [445344 2010-11-15] (ASUS)

HKLM\...\Run: [Eee Docking] - C:\Program Files\Asus\Eee Docking\Eee Docking.exe [414384 2011-01-06] (ASUSTek Computer Inc.)

HKLM\...\Run: [VizorHtmlDialog.exe] - C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.)

HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe [112632 2010-10-12] (Trend Micro Inc.)

HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [218448 2010-10-20] (Trend Micro Inc.)

HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9177632 2010-04-27] (Realtek Semiconductor)

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [548744 2010-06-10] (ELAN Microelectronic Corp.)

HKLM\...\Run: [Boingo Wi-Fi] - C:\Program Files\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2011-12-25] ()

HKLM\...\Run: [ASUSPRP] - C:\Program Files\Asus\APRP\aprp.exe [2018032 2011-04-02] (ASUSTek Computer Inc.)

HKLM\...\Run: [ASUSWebStorage] - C:\Program Files\Asus\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-08-12] (Microsoft Corporation)

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM\...\Run: [] - [x]

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)

HKCU\...\Run: [Wisdom-soft AutoScreenRecorder 3.1 Pro] - 0

HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)

HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\Luca\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-22] (Spotify Ltd)

HKCU\...\Run: [ScreenCloud] - C:\Program Files\ScreenCloud\ScreenCloud.exe

HKCU\...\Run: [puush] - C:\Program Files\puush\puush.exe [567880 2013-07-23] ()

HKCU\...\Run: [Google Update] - C:\Users\Luca\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-30] (Google Inc.)

HKCU\...\Run: [Spotify] - C:\Users\Luca\AppData\Roaming\Spotify\spotify.exe [4752384 2013-10-22] (Spotify Ltd)

HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\windows\system32\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -update activex [829832 2013-10-10] (Adobe Systems Incorporated)

HKU\Default\...\RunOnce: [Reboot] - C:\Windows\Reboot.exe [ 2010-12-13] (AsusTek Computer Inc.)

HKU\Default\...\RunOnce: [IconPatch] - C:\Windows\AP\IconPatch.vbs

HKU\Default User\...\RunOnce: [Reboot] - C:\Windows\Reboot.exe [ 2010-12-13] (AsusTek Computer Inc.)

HKU\Default User\...\RunOnce: [IconPatch] - C:\Windows\AP\IconPatch.vbs

Startup: C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Luca\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk

ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Hosts: 74.208.10.249 gs.apple.com

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

Chrome: 

=======

CHR HomePage: hxxp://www.claro-search.com/?affID=118660&tt=0313_1&babsrc=HP_ss&mntrId=da3000e50000000000005404a60ba9bc

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Luca\AppData\Local\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Luca\AppData\Local\Google\Chrome\Application\30.0.1599.101\pdf.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\Luca\AppData\Local\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File

CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Users\Luca\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (YouTube) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Isoball 3) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\iajlkcpgcnbhfhpdeooockfaincfkjjj\1.4.0_0

CHR Extension: (FakkuDownloader) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jllomdofcfnlnnnlplkmaobegifdpagb\1.0_0

CHR Extension: (Logo Maker) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmgffnfpmjbignenkflohmgagidjcomp\1.0.0.2_0

CHR Extension: (Google Wallet) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (iOS, iPad, iPhone & iPod Grey Texture) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\odgbpcbfijafedicgoagncajafompaok\2_0

CHR Extension: (Gmail) - C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR StartMenuInternet: Google Chrome - C:\Users\Luca\AppData\Local\Google\Chrome\Application\chrome.exe
 

========================== Services (Whitelisted) =================
 

R2 AsusService; C:\windows\system32\AsusService.exe [224680 2010-12-07] ()

S2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1612112 2013-10-01] (LogMeIn Inc.)

R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2013-08-26] (LogMeIn, Inc.)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-08-12] (Microsoft Corporation)

S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-08-12] (Microsoft Corporation)

R2 PnkBstrA; C:\windows\system32\PnkBstrA.exe [75136 2012-08-25] ()

R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)

R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [161104 2010-09-17] (Trend Micro Inc.)

S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [x]
 

==================== Drivers (Whitelisted) ====================
 

R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [11456 2010-06-28] ()

R1 AsUpIO; C:\Windows\System32\drivers\AsUpIO.sys [11832 2010-08-03] ()

R1 avgtp; C:\windows\system32\drivers\avgtpx86.sys [37664 2013-10-03] (AVG Technologies)

R3 cbfs3; C:\Windows\System32\DRIVERS\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)

R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [102912 2010-07-21] (ELAN Microelectronic Corp.)

S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [35592 2012-11-01] (AnchorFree Inc.)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [13880 2009-07-20] ( )

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)

S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC)

R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [80464 2010-09-17] (Trend Micro Inc.)

R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [189520 2010-09-17] (Trend Micro Inc.)

R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [64080 2010-09-17] (Trend Micro Inc.)

R2 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [92112 2010-09-17] (Trend Micro Inc.)

S3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-01-22] (RealVNC Ltd.)

S3 btwaudio; system32\drivers\btwaudio.sys [x]

S3 btwavdt; \SystemRoot\system32\drivers\btwavdt.sys [x]

S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [x]

S3 btwrchid; \SystemRoot\system32\drivers\btwrchid.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-15 21:45 - 2013-11-15 21:45 - 00016872 _____ C:\Users\Luca\Desktop\FRST.txt

2013-11-15 21:39 - 2013-11-15 21:42 - 01090529 _____ (Farbar) C:\Users\Luca\Desktop\FRST.exe

2013-11-15 21:33 - 2013-11-15 21:33 - 00000619 _____ C:\Users\Luca\Desktop\JRT.txt

2013-11-15 21:03 - 2013-11-15 21:04 - 00000506 _____ C:\Users\Luca\Desktop\cookieclicker.txt

2013-11-15 20:57 - 2013-11-15 21:01 - 01085542 _____ C:\Users\Luca\Desktop\adwcleaner.exe

2013-11-08 20:46 - 2013-11-08 20:46 - 00000000 ____D C:\windows\ERUNT

2013-11-08 20:32 - 2013-11-15 21:10 - 00000000 ____D C:\AdwCleaner

2013-11-08 20:29 - 2013-11-08 20:30 - 01034531 _____ (Thisisu) C:\Users\Luca\Desktop\JRT.exe

2013-11-03 20:18 - 2013-11-03 20:18 - 00001067 _____ C:\Users\Public\Desktop\Anti-Malware.lnk

2013-11-03 20:18 - 2013-11-03 20:18 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Malwarebytes

2013-11-03 20:17 - 2013-11-03 20:18 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-11-03 20:17 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys

2013-11-02 20:45 - 2013-11-02 21:31 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-02 20:45 - 2013-11-02 20:45 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-02 20:42 - 2013-11-02 20:42 - 00075992 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys

2013-10-31 22:01 - 2013-10-31 22:04 - 00029644 _____ C:\Users\Luca\Desktop\Addition.txt

2013-10-31 21:47 - 2013-10-31 21:47 - 00000000 ____D C:\FRST

2013-10-28 20:33 - 2013-10-28 20:33 - 00003542 _____ C:\Users\Luca\Desktop\troja.txt

2013-10-28 20:27 - 2013-10-28 20:32 - 00000000 ____D C:\Users\Luca\AppData\Local\Avg2013

2013-10-23 17:24 - 2013-10-23 17:24 - 00000000 ____D C:\Users\Luca\AppData\Local\LogMeIn

2013-10-23 17:24 - 2013-10-23 17:24 - 00000000 ____D C:\ProgramData\LogMeIn

2013-10-22 21:12 - 2013-11-15 21:16 - 00000000 ____D C:\Users\Luca\AppData\Local\LogMeIn Hamachi

2013-10-22 21:09 - 2013-10-22 21:09 - 00000896 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2013-10-22 21:09 - 2013-10-22 21:09 - 00000000 ____D C:\Program Files\LogMeIn Hamachi

2013-10-22 20:04 - 2013-10-22 20:04 - 00000000 ____D C:\Users\Luca\AppData\Local\Demo1

2013-10-22 19:56 - 2013-10-22 20:03 - 00000000 ____D C:\Users\Luca\Documents\GameMaker

2013-10-22 19:47 - 2013-10-22 19:47 - 00000000 ____D C:\Users\Luca\AppData\Local\YoYo_Games_Ltd

2013-10-22 19:34 - 2013-10-22 19:50 - 00000000 ____D C:\Users\Luca\AppData\Local\GameMaker-Studio

2013-10-20 14:22 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys

2013-10-20 14:22 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys

2013-10-20 14:19 - 2013-10-20 14:19 - 00000000 ____D C:\windows\TempD7193B2C-6B82-3E4A-7E89-0797A83EF03B-Signatures
 

==================== One Month Modified Files and Folders =======
 

2013-11-15 21:50 - 2013-11-15 21:45 - 00016872 _____ C:\Users\Luca\Desktop\FRST.txt

2013-11-15 21:49 - 2012-01-07 19:15 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Skype

2013-11-15 21:42 - 2013-11-15 21:39 - 01090529 _____ (Farbar) C:\Users\Luca\Desktop\FRST.exe

2013-11-15 21:33 - 2013-11-15 21:33 - 00000619 _____ C:\Users\Luca\Desktop\JRT.txt

2013-11-15 21:31 - 2012-05-01 15:57 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2013-11-15 21:30 - 2013-10-04 20:18 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-15 21:22 - 2012-11-30 19:12 - 00001116 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2443274617-2103969203-905473786-1000UA.job

2013-11-15 21:22 - 2011-12-26 11:17 - 01058747 _____ C:\windows\WindowsUpdate.log

2013-11-15 21:22 - 2009-07-14 05:34 - 00009696 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-15 21:22 - 2009-07-14 05:34 - 00009696 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-15 21:19 - 2013-01-26 17:42 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Dropbox

2013-11-15 21:18 - 2013-01-26 17:49 - 00000000 ___RD C:\Users\Luca\Dropbox

2013-11-15 21:18 - 2012-11-30 19:12 - 00001064 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2443274617-2103969203-905473786-1000Core.job

2013-11-15 21:17 - 2013-10-04 20:18 - 00001090 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-15 21:16 - 2013-10-22 21:12 - 00000000 ____D C:\Users\Luca\AppData\Local\LogMeIn Hamachi

2013-11-15 21:15 - 2012-11-10 21:21 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Spotify

2013-11-15 21:12 - 2013-06-07 22:42 - 00000350 _____ C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job

2013-11-15 21:12 - 2013-05-29 18:27 - 00000350 _____ C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job

2013-11-15 21:12 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT

2013-11-15 21:12 - 2009-07-14 05:39 - 00084188 _____ C:\windows\setupact.log

2013-11-15 21:10 - 2013-11-08 20:32 - 00000000 ____D C:\AdwCleaner

2013-11-15 21:04 - 2013-11-15 21:03 - 00000506 _____ C:\Users\Luca\Desktop\cookieclicker.txt

2013-11-15 21:01 - 2013-11-15 20:57 - 01085542 _____ C:\Users\Luca\Desktop\adwcleaner.exe

2013-11-09 16:04 - 2013-06-04 20:22 - 00223865 _____ C:\windows\IE10_main.log

2013-11-08 21:43 - 2012-05-12 09:38 - 00000000 ____D C:\Users\Luca\AppData\Roaming\FileZilla

2013-11-08 21:22 - 2013-05-29 19:47 - 00000000 ____D C:\Program Files\Sublime Text 2

2013-11-08 20:46 - 2013-11-08 20:46 - 00000000 ____D C:\windows\ERUNT

2013-11-08 20:30 - 2013-11-08 20:29 - 01034531 _____ (Thisisu) C:\Users\Luca\Desktop\JRT.exe

2013-11-08 20:25 - 2012-11-10 21:24 - 00000000 ____D C:\Users\Luca\AppData\Local\Spotify

2013-11-04 21:25 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET

2013-11-03 21:13 - 2013-07-06 14:25 - 00000000 ____D C:\Users\Luca\AppData\Roaming\.minecraft

2013-11-03 20:18 - 2013-11-03 20:18 - 00001067 _____ C:\Users\Public\Desktop\Anti-Malware.lnk

2013-11-03 20:18 - 2013-11-03 20:18 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Malwarebytes

2013-11-03 20:18 - 2013-11-03 20:17 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-11-02 21:31 - 2013-11-02 20:45 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-11-02 20:45 - 2013-11-02 20:45 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-02 20:42 - 2013-11-02 20:42 - 00075992 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys

2013-11-01 16:13 - 2011-02-16 16:44 - 00811218 _____ C:\windows\system32\perfh013.dat

2013-11-01 16:13 - 2011-02-16 16:44 - 00181222 _____ C:\windows\system32\perfc013.dat

2013-11-01 16:13 - 2011-02-16 16:39 - 00808040 _____ C:\windows\system32\perfh010.dat

2013-11-01 16:13 - 2011-02-16 16:39 - 00175094 _____ C:\windows\system32\perfc010.dat

2013-11-01 16:13 - 2009-07-27 11:11 - 04803440 _____ C:\windows\system32\PerfStringBackup.INI

2013-10-31 22:04 - 2013-10-31 22:01 - 00029644 _____ C:\Users\Luca\Desktop\Addition.txt

2013-10-31 21:47 - 2013-10-31 21:47 - 00000000 ____D C:\FRST

2013-10-31 21:34 - 2011-04-02 03:30 - 00055902 _____ C:\windows\PFRO.log

2013-10-28 20:33 - 2013-10-28 20:33 - 00003542 _____ C:\Users\Luca\Desktop\troja.txt

2013-10-28 20:32 - 2013-10-28 20:27 - 00000000 ____D C:\Users\Luca\AppData\Local\Avg2013

2013-10-28 20:32 - 2013-04-25 18:00 - 00000000 ____D C:\ProgramData\MFAData

2013-10-23 17:24 - 2013-10-23 17:24 - 00000000 ____D C:\Users\Luca\AppData\Local\LogMeIn

2013-10-23 17:24 - 2013-10-23 17:24 - 00000000 ____D C:\ProgramData\LogMeIn

2013-10-22 21:09 - 2013-10-22 21:09 - 00000896 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk

2013-10-22 21:09 - 2013-10-22 21:09 - 00000000 ____D C:\Program Files\LogMeIn Hamachi

2013-10-22 20:42 - 2011-04-02 03:41 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2013-10-22 20:12 - 2011-12-25 20:28 - 00000000 ____D C:\Users\Luca

2013-10-22 20:04 - 2013-10-22 20:04 - 00000000 ____D C:\Users\Luca\AppData\Local\Demo1

2013-10-22 20:03 - 2013-10-22 19:56 - 00000000 ____D C:\Users\Luca\Documents\GameMaker

2013-10-22 19:50 - 2013-10-22 19:34 - 00000000 ____D C:\Users\Luca\AppData\Local\GameMaker-Studio

2013-10-22 19:47 - 2013-10-22 19:47 - 00000000 ____D C:\Users\Luca\AppData\Local\YoYo_Games_Ltd

2013-10-22 19:44 - 2013-04-05 01:21 - 00000000 ____D C:\Users\Luca\Batch

2013-10-21 18:39 - 2013-01-25 19:15 - 00000000 ___RD C:\Users\Luca\Programme

2013-10-21 18:35 - 2012-11-24 20:39 - 00000000 ____D C:\Users\Luca\AppData\Roaming\Notepad++

2013-10-21 18:35 - 2012-11-24 20:39 - 00000000 ____D C:\Program Files\Notepad++

2013-10-20 18:02 - 2011-12-25 20:55 - 00001945 _____ C:\windows\epplauncher.mif

2013-10-20 18:01 - 2011-12-25 20:55 - 00000000 ____D C:\Program Files\Microsoft Security Client

2013-10-20 14:19 - 2013-10-20 14:19 - 00000000 ____D C:\windows\TempD7193B2C-6B82-3E4A-7E89-0797A83EF03B-Signatures

2013-10-20 14:04 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF

2013-10-19 18:32 - 2012-01-07 19:14 - 00000000 ___RD C:\Program Files\Skype

2013-10-19 18:32 - 2012-01-07 19:14 - 00000000 ____D C:\ProgramData\Skype

2013-10-19 18:18 - 2012-08-18 10:08 - 00000000 ____D C:\Users\Luca\AppData\Local\Paint.NET

2013-10-19 14:17 - 2009-07-14 05:33 - 00261288 _____ C:\windows\system32\FNTCACHE.DAT
 

Some content of TEMP:

====================

C:\Users\Luca\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2012-09-27 14:43
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Wie schauts aus?