Und noch mal :)
FRST.txt
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Verena Bender (administrator) on VERENAS-LAPTOP on 02-11-2013 19:57:32
Running from C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Downloads
Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Kaspersky Lab ZAO) C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
(Kaspersky Lab ZAO) C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Nalpeiron Ltd.) C:\WINDOWS\system32\NLSSRV32.EXE
(TuneUp Software) C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
(S3 Graphics, Inc.) C:\WINDOWS\system32\VTTimer.exe
(Synaptics, Inc.) C:\Programme\Synaptics\SynTP\SynTPStart.exe
(VIA Technologies, Inc.) C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe
() C:\Programme\HotKey_Driver\HotKeyDriver.exe
(Synaptics, Inc.) C:\Programme\Synaptics\SynTP\SynTPEnh.exe
(TuneUp Software) C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Adobe Systems Incorporated) C:\Programme\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Programme\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Programme\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe
(Farbar) C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Downloads\FRST(1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [VTTimer] - C:\WINDOWS\system32\VTTimer.exe [53248 2006-09-22] (S3 Graphics, Inc.)
HKLM\...\Run: [NeroFilterCheck] - C:\Programme\Gemeinsame Dateien\Nero\Lib\NeroCheck.exe [570664 2008-03-25] (Nero AG)
HKLM\...\Run: [SynTPStart] - C:\Programme\Synaptics\SynTP\SynTPStart.exe [102400 2007-08-18] (Synaptics, Inc.)
HKLM\...\Run: [HDAudDeck] - C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe [790528 2007-08-24] (VIA Technologies, Inc.)
HKLM\...\Run: [APSDaemon] - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Programme\Canon\Solution Menu EX\CNSEMAIN.EXE [1637496 2011-08-04] (CANON INC.)
Winlogon\Notify\klogon: C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO)
HKCU\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKCU\...\Policies\Explorer: [CDRAutoRun] 0
HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - C:\Programme\Gemeinsame Dateien\Nero\Lib\NMFirstStart.exe [ 2008-02-28] (Nero AG)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HotKeyDriver.lnk
ShortcutTarget: HotKeyDriver.lnk -> C:\Programme\HotKey_Driver\HotKeyDriver.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0F8BA978-741C-4B56-93A1-50A8D177772D} URL = hxxp://search.1und1.de/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin
SearchScopes: HKCU - {18FF4706-7653-4E0A-B98D-A51EB0405A08} URL = hxxp://go.gmx.net/suchbox/amazon/?keywords={searchTerms}
SearchScopes: HKCU - {6DEF70A5-D222-4EE8-98B2-62E15B5E0293} URL = hxxp://suche.gmx.net/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin
SearchScopes: HKCU - {7EDE558F-4BE4-4A5E-8394-2ADED0742785} URL = hxxp://suche.web.de/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin
SearchScopes: HKCU - {B3BA702E-C81C-446E-AE4A-27D6FA5475D3} URL = hxxp://go.web.de/suchbox/smartshopping/?searchText={searchTerms}&mc=searchplugin@suche@msie.suche@preisvergleich
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programme\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Programme/Gardenscapes/Images/stg_drm.ocx
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_15-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_15-windows-i586.cab
DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Programme/Miriel%20the%20Magical%20Merchant/Images/armhelper.ocx
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 04 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX - C:\Programme\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Programme\PDF Creator\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Programme\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Programme\PDF Creator\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Dokumente und Einstellungen\Verena Bender\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\searchplugins\amazonde.xml
FF SearchPlugin: C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\searchplugins\benefind.xml
FF SearchPlugin: C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\StartWeb.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: IE Tab 2 (FF 3.6+) - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
FF Extension: Password Exporter - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}
FF Extension: amznUWL2 - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\amznUWL2@amazon.com.xpi
FF Extension: autofillForms - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\autofillForms@blueimp.net.xpi
FF Extension: feedly - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\feedly@devhd.xpi
FF Extension: stealthyextension - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\stealthyextension@gmail.com.xpi
FF Extension: toolbar - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\toolbar@gmx.net.xpi
FF Extension: VacuumPlacesImproved - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\VacuumPlacesImproved@lultimouomo-gmail.com.xpi
FF Extension: resurrect - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\{0c8fbd76-bdeb-4c52-9b24-d587ce7b9dc3}.xpi
FF Extension: defaults - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\{45d8ff86-d909-11db-9705-005056c00008}.xpi
FF Extension: No Name - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Adblock Plus - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: bprivacyprefs - C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
FF Extension: Skype Click to Call - C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
========================== Services (Whitelisted) =================
S4 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624 2013-09-07] (Apple Inc.)
R2 AVP; C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
S4 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [136120 2011-05-09] (Google)
S4 iPod Service; C:\Programme\iPod\bin\iPodService.exe [553288 2013-10-01] (Apple Inc.)
R2 MBAMScheduler; C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-10-01] (Mozilla Foundation)
S4 NMIndexingService; C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe [529704 2008-02-28] (Nero AG)
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S4 Skype C2C Service; C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S4 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [160944 2012-07-03] (Skype Technologies)
R2 TuneUp.UtilitiesSvc; C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [1527104 2011-12-13] (TuneUp Software)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-10-24] (Microsoft Corporation)
R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf"
==================== Drivers (Whitelisted) ====================
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
R3 EMSCR; C:\Windows\System32\DRIVERS\EMS7SK.sys [66432 2007-04-13] (ENE Technology Inc.)
R3 ESDCR; C:\Windows\System32\DRIVERS\ESD7SK.sys [46080 2007-04-13] (ENE Technology Inc.)
R3 FET5X86V; C:\Windows\System32\DRIVERS\fetnd5bv.sys [42496 2007-07-06] (VIA Technologies, Inc. )
S3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc. )
R3 HdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [201216 2007-06-07] (VIA Technologies, Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-10-17] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [573024 2013-10-17] (Kaspersky Lab ZAO)
R3 klim5; C:\Windows\System32\DRIVERS\klim5.sys [36448 2013-04-19] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [24160 2013-10-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [24672 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145120 2013-06-06] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 RT25USBAP; C:\Windows\System32\DRIVERS\rt25usbap.sys [162816 2006-04-10] (Ralink Technology Inc.)
R3 RTLWUSB; C:\Windows\System32\DRIVERS\RTL8187.sys [180480 2006-07-20] (Realtek Semiconductor Corporation )
R3 S3GIGP; C:\Windows\System32\DRIVERS\S3gIGPm.sys [607232 2007-09-19] (S3 Graphics Co., Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-11] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10064 2010-11-29] (TuneUp Software)
S3 usbet; C:\Windows\System32\DRIVERS\ETdrv.sys [165632 2010-01-12] (Etron)
S3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [201216 2007-06-07] (VIA Technologies, Inc.)
S3 catchme; \??\C:\DOKUME~1\VERENA~1\LOKALE~1\Temp\catchme.sys [x]
S4 IntelIde; No ImagePath
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [93280 2013-06-08] (Kaspersky Lab ZAO)
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U3 TlntSvr;
S3 vsdatant; \??\C:\WINDOWS\system32\vsdatant.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-01 19:03 - 2013-11-01 19:03 - 00003144 _____ C:\Dokumente und Einstellungen\Verena Bender\Desktop\JRT.txt
2013-11-01 18:58 - 2013-11-01 18:58 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 18:51 - 2013-11-01 18:52 - 00000000 ____D C:\AdwCleaner
2013-11-01 18:41 - 2013-11-01 18:41 - 00020435 _____ C:\ComboFix.txt
2013-11-01 18:25 - 2006-06-26 23:51 - 00000378 _____ C:\Boot.bak
2013-11-01 18:25 - 2004-08-03 23:00 - 00262448 __RSH C:\cmldr
2013-11-01 18:24 - 2013-11-01 18:25 - 00000000 _RSHD C:\cmdcons
2013-11-01 18:23 - 2011-06-26 07:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-11-01 18:23 - 2010-11-07 18:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-11-01 18:23 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-11-01 18:23 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-11-01 18:23 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-11-01 18:23 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-11-01 18:23 - 2000-08-31 01:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-11-01 18:23 - 2000-08-31 01:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-11-01 18:23 - 2000-08-31 01:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-11-01 18:22 - 2013-11-01 18:22 - 00000606 _____ C:\Dokumente und Einstellungen\Verena Bender\Desktop\Verknüpfung mit ComboFix.lnk
2013-11-01 18:20 - 2013-11-01 18:41 - 00000000 ____D C:\Qoobox
2013-11-01 18:20 - 2013-11-01 18:20 - 00000000 ___RD C:\Dokumente und Einstellungen\Verena Bender\Startmenü\Programme\Verwaltung
2013-11-01 18:20 - 2013-11-01 18:20 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Bilder
2013-11-01 18:19 - 2013-11-01 18:39 - 00000000 ____D C:\WINDOWS\erdnt
2013-11-01 12:06 - 2013-11-01 12:06 - 00000000 ____D C:\FRST
2013-11-01 10:05 - 2013-11-01 19:36 - 00303924 _____ C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-4227748925-2461040166-3706523133-1006-0.dat
2013-11-01 10:05 - 2013-11-01 19:36 - 00207626 _____ C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
2013-11-01 09:53 - 2013-11-01 09:53 - 00001935 _____ C:\Dokumente und Einstellungen\Verena Bender\Desktop\Sicherer Zahlungsverkehr.lnk
2013-11-01 09:52 - 2013-11-01 09:52 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kaspersky Internet Security
2013-11-01 09:52 - 2013-11-01 09:51 - 00000841 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Kaspersky Internet Security.lnk
2013-11-01 09:50 - 2013-11-02 08:30 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kaspersky Lab
2013-11-01 09:50 - 2013-11-01 09:50 - 00000000 ____D C:\Programme\Kaspersky Lab
2013-11-01 09:50 - 2013-10-17 15:47 - 00573024 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys
2013-11-01 09:50 - 2013-06-08 20:18 - 00093280 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klflt.sys
2013-11-01 09:32 - 2013-11-01 09:56 - 00010401 _____ C:\WINDOWS\setupapi.log
2013-11-01 01:41 - 2013-11-01 01:41 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\calibre
2013-11-01 01:38 - 2013-11-01 02:42 - 00000000 ____D C:\Programme\FanFictionDownloader
2013-11-01 01:38 - 2013-11-01 01:38 - 00000778 _____ C:\Dokumente und Einstellungen\All Users\Desktop\FanFictionDownloader.lnk
2013-11-01 01:38 - 2013-11-01 01:38 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\FanFictionDownloader
2013-11-01 00:57 - 2013-11-01 19:36 - 00048734 _____ C:\WINDOWS\KB2479943.log
2013-11-01 00:57 - 2013-11-01 19:33 - 00005839 _____ C:\WINDOWS\KB2686509.log
2013-11-01 00:53 - 2013-11-01 19:35 - 00007099 _____ C:\WINDOWS\updspapi.log
2013-11-01 00:49 - 2013-11-01 19:32 - 00050135 _____ C:\WINDOWS\KB2619339.log
2013-10-31 21:15 - 2013-10-31 21:16 - 00000580 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2013-10-31 21:12 - 2013-10-31 21:12 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Malwarebytes
2013-10-31 21:11 - 2013-10-31 21:12 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware
2013-10-31 21:11 - 2013-10-31 21:11 - 00000756 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-31 21:11 - 2013-10-31 21:11 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
2013-10-31 21:11 - 2013-10-31 21:11 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-10-31 21:11 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-31 20:39 - 2013-10-31 20:39 - 00000140 _____ C:\WINDOWS\wininit.ini
2013-10-31 16:14 - 2013-10-31 19:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-31 16:02 - 2013-10-31 19:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-31 16:02 - 2013-10-31 16:02 - 104348737 _____ C:\WINDOWS\system32\ⰹS啼6
2013-10-31 16:01 - 2013-10-31 19:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-31 06:44 - 2013-07-03 03:12 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
2013-10-31 06:43 - 2013-08-09 01:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
2013-10-31 06:43 - 2013-08-09 01:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2013-10-31 06:43 - 2013-07-17 01:58 - 00123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2013-10-31 06:43 - 2013-07-17 01:58 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
2013-10-31 06:43 - 2009-03-18 12:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
2013-10-28 06:04 - 2013-10-28 06:04 - 103622390 _____ C:\WINDOWS\system32\瓱ꔲ啼6
2013-10-22 18:58 - 2013-10-22 18:58 - 102329055 _____ C:\WINDOWS\system32\ᾈ㘆啼6
2013-10-17 15:47 - 2013-10-17 15:47 - 00135776 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys
2013-10-17 15:47 - 2013-10-17 15:47 - 00024672 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klmouflt.sys
2013-10-17 15:47 - 2013-10-17 15:47 - 00024160 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klkbdflt.sys
2013-10-14 09:13 - 2013-10-14 09:13 - 00000171 ____H C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\.picasa.ini
2013-10-05 10:00 - 2013-10-05 10:00 - 00001522 _____ C:\Dokumente und Einstellungen\All Users\Desktop\iTunes.lnk
2013-10-05 10:00 - 2013-10-05 10:00 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\iTunes
2013-10-05 09:58 - 2013-10-05 09:59 - 00000000 ____D C:\Programme\iTunes
2013-10-05 09:58 - 2013-10-05 09:59 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-10-05 09:58 - 2013-10-05 09:58 - 00000000 ____D C:\Programme\iPod
==================== One Month Modified Files and Folders =======
2013-11-02 09:16 - 2010-01-29 13:00 - 01895465 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-02 09:05 - 2012-11-20 20:04 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-02 08:30 - 2013-11-01 09:50 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kaspersky Lab
2013-11-02 08:30 - 2010-06-30 13:01 - 00000439 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2013-11-02 08:30 - 2010-01-29 13:12 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-02 08:30 - 2010-01-29 12:45 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-11-02 08:30 - 2009-07-09 22:57 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-11-01 19:36 - 2013-11-01 10:05 - 00303924 _____ C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-4227748925-2461040166-3706523133-1006-0.dat
2013-11-01 19:36 - 2013-11-01 10:05 - 00207626 _____ C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
2013-11-01 19:36 - 2013-11-01 00:57 - 00048734 _____ C:\WINDOWS\KB2479943.log
2013-11-01 19:36 - 2011-07-24 14:08 - 00131072 _____ C:\WINDOWS\system32\config\TuneUp.evt
2013-11-01 19:36 - 2010-01-29 13:12 - 00032470 _____ C:\WINDOWS\SchedLgU.Txt
2013-11-01 19:35 - 2013-11-01 00:53 - 00007099 _____ C:\WINDOWS\updspapi.log
2013-11-01 19:33 - 2013-11-01 00:57 - 00005839 _____ C:\WINDOWS\KB2686509.log
2013-11-01 19:32 - 2013-11-01 00:49 - 00050135 _____ C:\WINDOWS\KB2619339.log
2013-11-01 19:26 - 2006-06-25 21:10 - 00000190 ___SH C:\Dokumente und Einstellungen\Verena Bender\ntuser.ini
2013-11-01 19:26 - 2006-06-25 21:10 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender
2013-11-01 19:04 - 2006-06-26 19:00 - 00002503 _____ C:\Dokumente und Einstellungen\Verena Bender\Desktop\Microsoft Office Word 2007.lnk
2013-11-01 19:03 - 2013-11-01 19:03 - 00003144 _____ C:\Dokumente und Einstellungen\Verena Bender\Desktop\JRT.txt
2013-11-01 18:58 - 2013-11-01 18:58 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-01 18:53 - 2006-02-28 13:00 - 00012646 _____ C:\WINDOWS\system32\wpa.dbl
2013-11-01 18:52 - 2013-11-01 18:51 - 00000000 ____D C:\AdwCleaner
2013-11-01 18:41 - 2013-11-01 18:41 - 00020435 _____ C:\ComboFix.txt
2013-11-01 18:41 - 2013-11-01 18:20 - 00000000 ____D C:\Qoobox
2013-11-01 18:39 - 2013-11-01 18:19 - 00000000 ____D C:\WINDOWS\erdnt
2013-11-01 18:38 - 2006-02-28 13:00 - 00000227 _____ C:\WINDOWS\system.ini
2013-11-01 18:25 - 2013-11-01 18:24 - 00000000 _RSHD C:\cmdcons
2013-11-01 18:25 - 2010-01-29 13:41 - 00000495 __RSH C:\boot.ini
2013-11-01 18:22 - 2013-11-01 18:22 - 00000606 _____ C:\Dokumente und Einstellungen\Verena Bender\Desktop\Verknüpfung mit ComboFix.lnk
2013-11-01 18:20 - 2013-11-01 18:20 - 00000000 ___RD C:\Dokumente und Einstellungen\Verena Bender\Startmenü\Programme\Verwaltung
2013-11-01 18:20 - 2013-11-01 18:20 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Bilder
2013-11-01 18:20 - 2010-01-29 12:42 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Dokumente
2013-11-01 18:20 - 2006-06-25 21:10 - 00000000 ___RD C:\Dokumente und Einstellungen\Verena Bender\Startmenü\Programme
2013-11-01 12:06 - 2013-11-01 12:06 - 00000000 ____D C:\FRST
2013-11-01 10:55 - 2012-07-14 22:08 - 00002409 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
2013-11-01 10:55 - 2012-07-14 22:08 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Skype
2013-11-01 10:55 - 2012-07-14 22:08 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype
2013-11-01 10:36 - 2006-06-26 18:00 - 00000696 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
2013-11-01 09:56 - 2013-11-01 09:32 - 00010401 _____ C:\WINDOWS\setupapi.log
2013-11-01 09:53 - 2013-11-01 09:53 - 00001935 _____ C:\Dokumente und Einstellungen\Verena Bender\Desktop\Sicherer Zahlungsverkehr.lnk
2013-11-01 09:52 - 2013-11-01 09:52 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kaspersky Internet Security
2013-11-01 09:52 - 2010-01-29 12:42 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2013-11-01 09:51 - 2013-11-01 09:52 - 00000841 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Kaspersky Internet Security.lnk
2013-11-01 09:50 - 2013-11-01 09:50 - 00000000 ____D C:\Programme\Kaspersky Lab
2013-11-01 09:50 - 2010-01-29 12:43 - 00000000 ___RD C:\Programme
2013-11-01 09:42 - 2011-03-25 11:21 - 00000000 ____D C:\Programme\Spybot - Search & Destroy
2013-11-01 09:39 - 2011-03-25 11:21 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2013-11-01 09:36 - 2011-10-14 06:10 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
2013-11-01 02:42 - 2013-11-01 01:38 - 00000000 ____D C:\Programme\FanFictionDownloader
2013-11-01 01:41 - 2013-11-01 01:41 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\calibre
2013-11-01 01:38 - 2013-11-01 01:38 - 00000778 _____ C:\Dokumente und Einstellungen\All Users\Desktop\FanFictionDownloader.lnk
2013-11-01 01:38 - 2013-11-01 01:38 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\FanFictionDownloader
2013-11-01 01:26 - 2013-09-09 07:10 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BigFishCache
2013-11-01 01:26 - 2013-07-29 09:35 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Big Fish
2013-11-01 00:12 - 2008-06-28 19:13 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Macromedia
2013-11-01 00:11 - 2006-06-25 21:10 - 00000000 ___RD C:\Dokumente und Einstellungen\Verena Bender\Startmenü
2013-10-31 23:58 - 2006-06-16 16:51 - 00000000 ____D C:\WINDOWS\Panther
2013-10-31 22:50 - 2010-12-09 22:19 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Lokale Einstellungen\Anwendungsdaten\Google
2013-10-31 22:48 - 2010-12-09 22:19 - 00000000 ____D C:\Programme\Google
2013-10-31 21:45 - 2009-04-24 21:19 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\DVDVideoSoft
2013-10-31 21:45 - 2008-07-01 01:12 - 00000069 _____ C:\WINDOWS\NeroDigital.ini
2013-10-31 21:16 - 2013-10-31 21:15 - 00000580 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2013-10-31 21:12 - 2013-10-31 21:12 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Malwarebytes
2013-10-31 21:12 - 2013-10-31 21:11 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware
2013-10-31 21:11 - 2013-10-31 21:11 - 00000756 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-31 21:11 - 2013-10-31 21:11 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
2013-10-31 21:11 - 2013-10-31 21:11 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-10-31 20:49 - 2010-08-13 16:06 - 00231936 ___SH C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Thumbs.db
2013-10-31 20:39 - 2013-10-31 20:39 - 00000140 _____ C:\WINDOWS\wininit.ini
2013-10-31 20:04 - 2010-03-19 13:34 - 00000276 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2013-10-31 19:58 - 2013-09-30 09:42 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Füchse
2013-10-31 19:51 - 2013-09-23 08:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-10-31 19:51 - 2013-07-11 08:01 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904_WM11$
2013-10-31 19:51 - 2013-07-11 07:57 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834886$
2013-10-31 19:51 - 2013-05-19 07:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2829361$
2013-10-31 19:51 - 2013-04-11 16:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2808735$
2013-10-31 19:51 - 2013-04-11 16:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820917$
2013-10-31 19:51 - 2013-03-21 08:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2807986$
2013-10-31 19:51 - 2013-02-15 17:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2778344$
2013-10-31 19:51 - 2012-12-13 05:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2779030$
2013-10-31 19:51 - 2012-11-15 06:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2727528$
2013-10-31 19:51 - 2012-11-15 06:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2761226$
2013-10-31 19:51 - 2012-10-11 05:23 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2749655$
2013-10-31 19:51 - 2012-07-12 20:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2718523$
2013-10-31 19:51 - 2012-06-14 02:01 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2709162$
2013-10-31 19:51 - 2012-05-11 08:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2659262$
2013-10-31 19:51 - 2012-03-17 03:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2641653$
2013-10-31 19:51 - 2012-02-17 08:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2660465$
2013-10-31 19:51 - 2012-02-17 08:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2661637$
2013-10-31 19:51 - 2012-01-12 07:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2646524$
2013-10-31 19:51 - 2011-12-14 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2639417$
2013-10-31 19:51 - 2011-10-14 05:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2567053$
2013-10-31 19:51 - 2011-08-11 06:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2567680$
2013-10-31 19:51 - 2011-07-13 06:17 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2555917$
2013-10-31 19:51 - 2011-04-14 02:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2506223$
2013-10-31 19:51 - 2011-04-14 02:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2412687$
2013-10-31 19:51 - 2011-04-14 02:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2508429$
2013-10-31 19:51 - 2011-03-25 05:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2524375$
2013-10-31 19:51 - 2011-02-10 05:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2479628$
2013-10-31 19:51 - 2010-12-16 08:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2467659$
2013-10-31 19:51 - 2010-12-16 08:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2436673$
2013-10-31 19:51 - 2010-12-16 08:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2423089$
2013-10-31 19:51 - 2010-10-15 04:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2345886$
2013-10-31 19:51 - 2010-10-15 04:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2378111_WM9$
2013-10-31 19:51 - 2010-09-16 06:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2121546$
2013-10-31 19:51 - 2010-08-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2160329$
2013-10-31 19:51 - 2008-06-28 11:49 - 00000000 __HDC C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2013-10-31 19:51 - 2008-06-28 11:49 - 00000000 __HDC C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2013-10-31 19:50 - 2013-10-31 16:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-31 19:50 - 2013-10-31 16:02 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-31 19:50 - 2013-10-31 16:01 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-31 19:50 - 2013-09-23 08:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-10-31 19:50 - 2013-09-23 08:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-10-31 19:50 - 2013-09-23 08:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-10-31 19:50 - 2013-07-11 07:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850851$
2013-10-31 19:50 - 2012-09-05 21:02 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952011$
2013-10-31 19:50 - 2010-06-13 09:23 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979559$
2013-10-31 19:50 - 2010-06-13 09:21 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978695_WM9$
2013-10-31 19:50 - 2010-04-15 12:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978601$
2013-10-31 19:50 - 2010-02-12 08:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971468$
2013-10-31 19:50 - 2010-01-29 13:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2013-10-31 19:50 - 2009-12-11 23:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971737$
2013-10-31 19:50 - 2009-11-12 01:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB969947$
2013-10-31 19:50 - 2009-10-18 16:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB958869$
2013-10-31 19:50 - 2009-10-18 04:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974112$
2013-10-31 19:50 - 2009-10-18 04:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB954155_WM9$
2013-10-31 19:50 - 2009-10-11 12:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB968816_WM9$
2013-10-31 19:50 - 2009-10-11 12:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB956844$
2013-10-31 19:50 - 2009-08-13 07:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971657$
2013-10-31 19:50 - 2009-08-13 07:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB960859$
2013-10-31 19:50 - 2009-08-13 07:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973540_WM9$
2013-10-31 19:50 - 2009-06-10 21:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB968537$
2013-10-31 19:50 - 2009-04-17 10:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB960803$
2013-10-31 19:50 - 2009-03-22 01:04 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB939683$
2013-10-31 19:50 - 2009-03-22 01:03 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB959772_WM11$
2013-10-31 19:50 - 2009-03-22 01:03 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB954154_WM11$
2013-10-31 19:50 - 2009-03-11 22:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB958690$
2013-10-31 19:50 - 2009-03-11 22:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB938464-v2$
2013-10-31 19:50 - 2009-01-15 22:12 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB958687$
2013-10-31 19:50 - 2008-12-12 23:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB955839$
2013-10-31 19:50 - 2008-12-12 23:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB954600$
2013-10-31 19:50 - 2008-10-18 20:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB957095$
2013-10-31 19:50 - 2008-10-18 20:12 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB954211$
2013-10-31 19:50 - 2008-09-10 13:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB938464_0$
2013-10-31 19:50 - 2008-08-14 17:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951072-v2$
2013-10-31 19:50 - 2008-06-28 11:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951376-v2_0$
2013-10-31 19:50 - 2008-06-28 11:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB927802$
2013-10-31 19:50 - 2008-06-28 11:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB923414$
2013-10-31 19:50 - 2008-06-28 11:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB911927$
2013-10-31 19:50 - 2008-06-28 11:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB915865$
2013-10-31 19:50 - 2008-06-28 11:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB904942$
2013-10-31 19:50 - 2008-06-28 11:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB936782_WMP9$
2013-10-31 19:50 - 2008-06-28 11:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB931261$
2013-10-31 19:50 - 2008-06-28 11:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB941693$
2013-10-31 19:50 - 2008-06-28 11:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB941644$
2013-10-31 19:50 - 2008-06-28 11:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB936357$
2013-10-31 19:50 - 2008-06-28 11:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB942763$
2013-10-31 19:50 - 2008-06-28 11:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB941569$
2013-10-31 19:50 - 2008-06-28 11:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB930178$
2013-10-31 19:50 - 2008-06-28 11:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB926255$
2013-10-31 19:50 - 2008-06-28 11:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB923689$
2013-10-31 19:50 - 2008-06-28 11:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB888302$
2013-10-31 19:50 - 2008-06-28 11:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB938127$
2013-10-31 19:50 - 2008-06-28 11:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB905749$
2013-10-31 19:50 - 2008-06-28 11:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB896428$
2013-10-31 19:50 - 2008-06-27 22:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB898461$
2013-10-31 19:49 - 2010-10-15 04:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982132$
2013-10-31 19:49 - 2010-10-15 04:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB981957$
2013-10-31 19:49 - 2010-09-16 06:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB981322$
2013-10-31 19:49 - 2010-08-12 07:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982214$
2013-10-31 19:49 - 2010-04-15 12:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB981349$
2013-10-31 19:49 - 2010-03-14 12:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallXPSEPSCLP$
2013-10-31 19:49 - 2009-03-21 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallMSCompPackV1$
2013-10-31 19:49 - 2009-03-21 09:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallWudf01000$
2013-10-31 19:48 - 2008-09-08 13:27 - 00000000 ____D C:\WINDOWS\Minidump
2013-10-31 19:46 - 2006-06-25 21:10 - 00000000 ___RD C:\Dokumente und Einstellungen\Verena Bender\Startmenü\Programme\Autostart
2013-10-31 19:45 - 2013-05-04 20:23 - 00000000 ___RD C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Dropbox
2013-10-31 19:45 - 2013-05-04 20:15 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Dropbox
2013-10-31 19:38 - 2011-07-24 14:08 - 00000000 ____D C:\Programme\TuneUp Utilities 2011
2013-10-31 19:12 - 2010-01-29 12:42 - 00201736 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-31 17:24 - 2008-06-28 13:18 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-10-31 17:08 - 2006-06-26 18:57 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2013-10-31 17:05 - 2010-01-29 12:43 - 01131654 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-31 16:40 - 2013-09-23 08:01 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-31 16:21 - 2008-06-28 11:48 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-31 16:16 - 2008-06-29 02:01 - 00000000 ____D C:\WINDOWS\ie7updates
2013-10-31 16:16 - 2008-06-28 11:50 - 00000000 ____D C:\WINDOWS\system32\de-de
2013-10-31 16:02 - 2013-10-31 16:02 - 104348737 _____ C:\WINDOWS\system32\ⰹS啼6
2013-10-30 20:11 - 2009-04-09 15:22 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Lokale Einstellungen\Anwendungsdaten\Audible
2013-10-30 19:46 - 2013-08-18 00:16 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-10-28 10:25 - 2008-07-21 15:29 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Fanfiction
2013-10-28 06:04 - 2013-10-28 06:04 - 103622390 _____ C:\WINDOWS\system32\瓱ꔲ啼6
2013-10-25 21:07 - 2008-10-22 18:33 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\uni
2013-10-25 19:23 - 2012-04-01 21:44 - 00007680 ___SH C:\WINDOWS\Thumbs.db
2013-10-22 18:58 - 2013-10-22 18:58 - 102329055 _____ C:\WINDOWS\system32\ᾈ㘆啼6
2013-10-21 20:02 - 2010-04-03 11:07 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-10-17 15:47 - 2013-11-01 09:50 - 00573024 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys
2013-10-17 15:47 - 2013-10-17 15:47 - 00135776 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys
2013-10-17 15:47 - 2013-10-17 15:47 - 00024672 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klmouflt.sys
2013-10-17 15:47 - 2013-10-17 15:47 - 00024160 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klkbdflt.sys
2013-10-16 13:07 - 2006-06-25 21:10 - 00000000 ___RD C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Eigene Bilder
2013-10-14 20:01 - 2010-01-29 12:58 - 00000000 ____D C:\WINDOWS\Registration
2013-10-14 09:13 - 2013-10-14 09:13 - 00000171 ____H C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\.picasa.ini
2013-10-14 09:02 - 2013-06-14 12:09 - 00000000 ____D C:\Dokumente und Einstellungen\Verena Bender\Lokale Einstellungen\Anwendungsdaten\GHISLER
2013-10-14 08:55 - 2009-04-25 15:49 - 00071168 _____ C:\Dokumente und Einstellungen\Verena Bender\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-08 23:05 - 2012-03-31 09:34 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-08 23:05 - 2011-05-21 10:50 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-10-05 18:01 - 2010-05-12 22:58 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-10-05 10:00 - 2013-10-05 10:00 - 00001522 _____ C:\Dokumente und Einstellungen\All Users\Desktop\iTunes.lnk
2013-10-05 10:00 - 2013-10-05 10:00 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\iTunes
2013-10-05 09:59 - 2013-10-05 09:58 - 00000000 ____D C:\Programme\iTunes
2013-10-05 09:59 - 2013-10-05 09:58 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-10-05 09:58 - 2013-10-05 09:58 - 00000000 ____D C:\Programme\iPod
2013-10-05 09:58 - 2010-03-19 13:34 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Apple
Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Verena Bender\Lokale Einstellungen\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2006-02-28 13:00] - [2008-04-14 03:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e
C:\Windows\System32\winlogon.exe
[2006-02-28 13:00] - [2008-04-14 03:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a
C:\Windows\System32\svchost.exe
[2006-02-28 13:00] - [2008-04-14 03:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366
C:\Windows\System32\services.exe
[2006-02-28 13:00] - [2009-02-09 12:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc
C:\Windows\System32\User32.dll
[2006-02-28 13:00] - [2008-04-14 03:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd
C:\Windows\System32\userinit.exe
[2006-02-28 13:00] - [2008-04-14 03:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106
C:\Windows\System32\Drivers\volsnap.sys
[2006-02-28 13:00] - [2008-04-14 02:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
Addition.txt Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-10-2013
Ran by Verena Bender at 2013-11-02 19:59:30
Running from C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Kaspersky Internet Security (Disabled - Up to date) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
Could not list Security Center items. Check WMI.
==================== Installed Programs ======================
Adobe Flash Player 10 ActiveX (Version: 10.0.45.2)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
Adobe Shockwave Player 11.6 (Version: 11.6.8.638)
Apple Application Support (Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (Version: 2.1.3.127)
Areca
AudibleManager (Version: 2089948342.2089948404.2090381600.2089948362)
Bonjour (Version: 3.0.0.10)
Canon Easy-PhotoPrint EX
Canon Easy-WebPrint EX
Canon IJ Network Scanner Selector EX
Canon IJ Network Tool
Canon Kurzwahlprogramm
Canon MP Navigator EX 5.1
Canon MP610 series
Canon MX710 series Benutzerregistrierung
Canon MX710 series MP Drivers
Canon MX710 series On-screen Manual
Canon My Printer
Canon Solution Menu EX
DivX-Setup (Version: 2.4.1.4)
Dropbox (HKCU Version: 2.0.22)
EVEREST Home Edition v2.20 (Version: 2.20)
FanFictionDownloader version 0.8.3 (Version: 0.8.3)
Free YouTube to MP3 Converter version 3.12.2.430 (Version: 3.12.2.430)
Hotfix für Windows XP (KB952287) (Version: 1)
HotKey_Driver (Version: 1.00.0000)
Iminent (Version: 6.44.21.0)
IrfanView (remove only)
iTunes (Version: 11.1.1.11)
Java 7 Update 15 (Version: 7.0.150)
Java Auto Updater (Version: 2.1.9.0)
Kaspersky Internet Security (Version: 14.0.0.4651)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU (Version: 3.2.30729)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Software Update for Web Folders (German) 12 (Version: 12.0.6612.1000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft XNA Framework Redistributable 4.0 (Version: 4.0.20823.0)
Motorola SM56 Data Fax Modem
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 8 Essentials (Version: 8.3.99)
neroxml (Version: 1.0.0)
PDF-XChange Lite 2012 (Version: 5.0.270.0)
Personal Backup 5.1
Personal Translator 2006 Home Deutsch-Englisch (Version: 1.00.0000)
PhotoFiltre
Picasa 3 (Version: 3.9)
Platform (Version: 1.22)
REALTEK RTL8187 Wireless LAN Driver (Version: 3.00)
SaveByClick (Version: 1.0)
Segoe UI (Version: 14.0.4327.805)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2183461) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2360131) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2416400) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2482017) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2497640) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2530548) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2544521) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2559049) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2586448) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2618444) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2647516) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2675157) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2699988) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2722913) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2744842) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2761465) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2792100) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2797052) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2799329) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2817183) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2829530) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2838727) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2846071) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2870699) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2879017) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB938127) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB950759) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB953838) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB956390) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB958215) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB960714) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB961260) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB963027) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB969897) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB972260) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB974455) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB976325) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB978207) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 7 (KB982381) (Version: 1)
Sicherheitsupdate für Windows Media Player (KB2378111)
Sicherheitsupdate für Windows Media Player (KB952069)
Sicherheitsupdate für Windows Media Player (KB954155)
Sicherheitsupdate für Windows Media Player (KB968816)
Sicherheitsupdate für Windows Media Player (KB973540)
Sicherheitsupdate für Windows Media Player (KB975558)
Sicherheitsupdate für Windows Media Player (KB978695)
Sicherheitsupdate für Windows XP (KB923789)
Sicherheitsupdate für Windows XP (KB938464) (Version: 1)
Sicherheitsupdate für Windows XP (KB946648) (Version: 1)
Sicherheitsupdate für Windows XP (KB950759) (Version: 1)
Sicherheitsupdate für Windows XP (KB950762) (Version: 1)
Sicherheitsupdate für Windows XP (KB950974) (Version: 1)
Sicherheitsupdate für Windows XP (KB951066) (Version: 1)
Sicherheitsupdate für Windows XP (KB951376-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB951698) (Version: 1)
Sicherheitsupdate für Windows XP (KB951748) (Version: 1)
Sicherheitsupdate für Windows XP (KB952954) (Version: 1)
Skype Click to Call (Version: 6.3.11079)
Skype™ 5.10 (Version: 5.10.116)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
swMSM (Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 10.0.12.0)
Total Commander (Remove or Repair)
TuneUp Utilities 2011 (Version: 10.0.4600.4)
TuneUp Utilities Language Pack (de-DE) (Version: 10.0.4600.4)
Unity Web Player (HKCU Version: )
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update für Windows Internet Explorer 7 (KB976749) (Version: 1)
Update für Windows Internet Explorer 7 (KB980182) (Version: 1)
VCRedistSetup (Version: 1.0.0)
VIA Display Driver 6.14.10.0107
VIA Plattform-Geräte-Manager (Version: 1.22)
VIA Rhine-Family Fast-Ethernet Adapter
VLC media player 1.1.11 (Version: 1.1.11)
WebCam (Version: 5.1.0.0)
WebFldrs XP (Version: 9.50.7523)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Upload Tool (Version: 14.0.8014.1029)
Windows Live Writer (Version: 14.0.8117.0416)
Windows Media Format 11 runtime
Windows Media Player 11
XML Paper Specification Shared Components Language Pack 1.0
==================== Restore Points =========================
31-10-2013 14:52:56 Software Distribution Service 3.0
31-10-2013 23:49:32 Software Distribution Service 3.0
01-11-2013 00:28:08 Java(TM) 6 Update 20 wird entfernt
01-11-2013 07:34:20 Software Distribution Service 3.0
01-11-2013 10:38:58 Software Distribution Service 3.0
01-11-2013 18:26:35 Software Distribution Service 3.0
==================== Hosts content: ==========================
2006-02-28 13:00 - 2013-11-01 18:38 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Programme\Apple Software Update\SoftwareUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Programme\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2013-08-18 00:16 - 2013-10-01 09:00 - 03279768 _____ () C:\Programme\Mozilla Firefox\mozjs.dll
2012-09-23 20:43 - 2012-09-23 20:43 - 00313992 _____ () C:\Programme\Adobe\Reader 11.0\Reader\sqlite.dll
2012-12-18 20:08 - 2012-12-18 20:08 - 14588632 _____ () C:\Programme\Adobe\Reader 11.0\Reader\NPSWF32.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\WINDOWS:nlsPreferences
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/01/2013 11:52:28 AM) (Source: crypt32) (User: )
Description: Der automatische Aktualisierungsabruf der Drittanbieterstammlisten-Sequenznummer von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> ist fehlgeschlagen mit dem Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung zurückgegeben.
.
Error: (11/01/2013 10:38:25 AM) (Source: Application Hang) (User: )
Description: Fehlerhafter Speicherbereich -471640314.
Error: (11/01/2013 10:38:25 AM) (Source: Application Hang) (User: )
Description: Fehlerhafter Speicherbereich -471640314.
Error: (11/01/2013 10:37:59 AM) (Source: Application Hang) (User: )
Description: Stillstehende Anwendung firefox.exe, Version 24.0.0.5001, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error: (11/01/2013 10:37:57 AM) (Source: Application Hang) (User: )
Description: Stillstehende Anwendung firefox.exe, Version 24.0.0.5001, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error: (11/01/2013 10:34:37 AM) (Source: Application Hang) (User: )
Description: Stillstehende Anwendung firefox.exe, Version 24.0.0.5001, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error: (11/01/2013 10:32:48 AM) (Source: Application Hang) (User: )
Description: Fehlerhafter Speicherbereich -471640314.
Error: (11/01/2013 10:28:58 AM) (Source: Application Hang) (User: )
Description: Stillstehende Anwendung firefox.exe, Version 24.0.0.5001, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error: (11/01/2013 10:07:55 AM) (Source: crypt32) (User: )
Description: Der automatische Aktualisierungsabruf der Drittanbieterstammlisten-Sequenznummer von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> ist fehlgeschlagen mit dem Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung zurückgegeben.
.
Error: (11/01/2013 10:04:58 AM) (Source: Application Hang) (User: )
Description: Stillstehende Anwendung firefox.exe, Version 24.0.0.5001, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
System errors:
=============
Error: (11/02/2013 07:58:59 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D
Error: (11/02/2013 07:58:36 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D
Error: (11/02/2013 09:14:17 AM) (Source: 0) (User: )
Description: \Device\Harddisk0\D
Error: (11/02/2013 08:32:05 AM) (Source: 0) (User: )
Description: \Device\Harddisk0\D
Error: (11/02/2013 08:30:44 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: Bei DCOM ist der Fehler "%%1058" aufgetreten, als der Dienst "upnphost" mit den Argumenten ""
gestartet wurde, um den folgenden Server zu verwenden:
{204810B9-73B2-11D4-BF42-00B0D0118B56}
Error: (11/02/2013 08:30:39 AM) (Source: 0) (User: )
Description: \Device\ACPIEC
Error: (11/02/2013 08:30:39 AM) (Source: 0) (User: )
Description: \Device\Harddisk0\D
Error: (11/02/2013 08:30:39 AM) (Source: 0) (User: )
Description: \Device\Harddisk0\D
Error: (11/02/2013 08:30:39 AM) (Source: 0) (User: )
Description: \Device\Harddisk0\D
Error: (11/02/2013 08:30:39 AM) (Source: 0) (User: )
Description: \Device\Harddisk0\D
Microsoft Office Sessions:
=========================
Error: (06/08/2009 05:27:23 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.
Error: (06/08/2009 05:26:13 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 11 seconds with 0 seconds of active time. This session ended with a crash.
Error: (06/07/2009 08:20:24 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 17 seconds with 0 seconds of active time. This session ended with a crash.
Error: (06/07/2009 08:19:54 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 2822 seconds with 60 seconds of active time. This session ended with a crash.
Error: (06/07/2009 07:32:43 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 63 seconds with 60 seconds of active time. This session ended with a crash.
Error: (06/07/2009 07:31:31 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.
Error: (06/07/2009 07:31:21 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 65%
Total physical RAM: 1918.04 MB
Available physical RAM: 652.79 MB
Total Pagefile: 3806.84 MB
Available Pagefile: 2533.91 MB
Total Virtual: 2047.88 MB
Available Virtual: 1952.69 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:149.05 GB) (Free:68.34 GB) NTFS ==>[Drive with boot components (Windows XP)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: 4A6A38EE)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 20:04 on 02/11/2013 by Verena Bender
Administrator - Elevation successful
========== filefind ==========
Searching for "*Iminent*"
C:\AdwCleaner\Quarantine\C\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\webbooster@iminent.com.xpi.vir --a---- 609057 bytes [20:15 31/10/2013] [14:25 24/10/2013] 646D6A18048D4D8B02EFAD0BCF23EB5B
C:\AdwCleaner\Quarantine\C\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\ffxtlbr@iminent.com\content\iminent.css.vir --a---- 2309 bytes [16:56 23/01/2013] [16:56 23/01/2013] 77887EE60DFFDA91B0BB9AB7C63B3B87
C:\AdwCleaner\Quarantine\C\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\ffxtlbr@iminent.com\content\iminent.xul.vir --a---- 1156 bytes [16:56 23/01/2013] [16:56 23/01/2013] 01482AE3F178F62A61C71D15FE3EC686
C:\AdwCleaner\Quarantine\C\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\searchplugins\iminent.xml.vir --a---- 1368 bytes [20:17 31/10/2013] [20:18 31/10/2013] 3FF67AC466058B3BE657AE19C55AB49E
C:\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Microsoft\Office\Recent\Iminent ist zwar lästig.LNK --a---- 571 bytes [17:08 01/11/2013] [17:57 01/11/2013] 2AC1B5E1F4F6872EFB679B489A828939
C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Iminent ist zwar lästig.docx --a---- 23825 bytes [17:08 01/11/2013] [17:08 01/11/2013] 5DA4F4C711087F2FC556AC46265B6FFD
========== folderfind ==========
Searching for "*Iminent*"
C:\AdwCleaner\Quarantine\C\Dokumente und Einstellungen\Verena Bender\Anwendungsdaten\Mozilla\Firefox\Profiles\tswextn0.default\Extensions\ffxtlbr@iminent.com d------ [17:52 01/11/2013]
========== regfind ==========
Searching for "Iminent"
[HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Word\Settings\Speichern unter\File Name MRU]
"Value"="C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\AdwCleaner v3.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\ComboFix 13.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Iminent ist zwar lästig.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\UXSHT.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Fanfiction\Holly.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Kochen\carrot soup.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\straightworld.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Fanfiction\Englisch\Branwen777+-+Misguided+Roses.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\uni\Biologie\Exkursionen\Exkursionsbericht Bad Marienberg.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Fanfiction\Englisch\I Will
[HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Word\File MRU]
"Item 3"="[F00000000][T01CED72BE66DBC80]*C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Iminent ist zwar lästig.docx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}\instl\data]
"tlbrSrchUrl"="hxxp://start.iminent.com/?ref=toolbarm#q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}\instl\data]
"ds_url"="hxxp://start.iminent.com/?ref=toolbarmdefault#q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}\instl\data]
"hp_url"="hxxp://start.iminent.com/?ref=toolbarmhome"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}\instl\data]
"hp_chrm"="hxxp://start.iminent.com/?ref=toolbarmhome"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}\instl\data]
"hp_ffx"="hxxp://start.iminent.com/?ref=toolbarmhome"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}\instl\data]
"nt_url"="hxxp://start.iminent.com/?ref=toolbarmnew"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}\instl\data]
"dsFFX"="Search the web (Iminent)"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}\instl\data]
"uninstaller"="C:\Programme\IminentToolbar\1.8.26.8\uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99E71BF1-5F51-4AF9-830B-67015D59640D}\ProgID]
@="esrv.iminentESrvc.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99E71BF1-5F51-4AF9-830B-67015D59640D}\VersionIndependentProgID]
@="esrv.iminentESrvc"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A2CC3C46-143B-4142-9D5A-B8543F0A6F55}\ProgID]
@="iminent.iminentappCore.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A2CC3C46-143B-4142-9D5A-B8543F0A6F55}\VersionIndependentProgID]
@="iminent.iminentappCore"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3DA786FCDC08E1345AF052DDF8C9693C]
"ProductName"="Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3DA786FCDC08E1345AF052DDF8C9693C\SourceList]
"PackageName"="iminent.msi"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3DA786FCDC08E1345AF052DDF8C9693C\SourceList]
"LastUsedSource"="n;1;C:\DOKUME~1\VERENA~1\LOKALE~1\Temp\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3DA786FCDC08E1345AF052DDF8C9693C\SourceList\Net]
"1"="C:\DOKUME~1\VERENA~1\LOKALE~1\Temp\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Loader]
"Iminent"="software\Iminent\Assemblies"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{208D4124-3895-4974-B293-A159BD306078}]
"AppName"="iminentsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{208D4124-3895-4974-B293-A159BD306078}]
"AppPath"="C:\Programme\IminentToolbar\1.8.26.8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\inst\Bootstrapper\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\inst\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\en\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\de\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\es\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\tr\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\it\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\fr\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Programme\Iminent\ro\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Iminent\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\04D01B4BB24CCD043B69431CCABB1A34]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SearchTheWeb\OldNewTabPage"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Messengers.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\System.Windows.Interactivity.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14C66209FCA938858B9729645C666684]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\Software\Iminent\WebBooster\Scripts\minibar\BagKey"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\tr\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\CurrentLcid"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SearchTheWeb\UserHomePageDecision"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\225C3CBCEB850204D860A6C7CC7724AF]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SearchTheWeb\OldStartPage"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2310FC151CD4F185798FA0996B3524D7]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\fr\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28572D2E2DE533256AC6B560EA573C22]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Mediator.ActivePlayers.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29C79786B109AC443B0DC7BFD61B1896]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\Software\Iminent\SearchTheWeb\BHO_catchAboutPages"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ABB56EABB920EB59B04BDDD26A62083]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Messengers.exe.config"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DABA02DFED47E352A2FA2EBDD6F6187]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\es\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\311567B4A9A002050BB9423FD73FB880]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\it\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\373FCED70D7F84E5FB5F3F7B76BEE024]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\it\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BE992C130B235E53A2937391FDCA35B]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\f_in_box.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Loader\Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED93605BB9B6635E9D0D86615AF31F1]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.exe.config"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\StartWeb.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C]
"00000000000000000000000000000000"="C:\Programme\Iminent\StartWeb.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4759B017032BA185F9BA6F7DBC95A2D4]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\en\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A78ABCBB54E46E5482A3EE0AD66C39E]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\es\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F9E947B6B895EB5A86757FC5D3DB862]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\WPFLocalizeExtension.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\ApplicationProgramsFolder"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\inst\msacm32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50A730A9A3A61BF5BA70CA8A3B7C133B]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Microsoft.DirectX.AudioVideoPlayback.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51A95A1D4CDE4F958A9451FBB39BF54A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\es\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\536133807DE80465BA6CD0A9742B7DE5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\en\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E25036E68895D45B95E72D1C3C58C74]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60ECC80C54085B141A40437A96CA2618]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\Software\Iminent\SearchTheWeb\Scope"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60FD8CD5BE007315CA3B5C7E41F24017]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\de\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\618E7D05458C4F257909ED9C8CDC0D66]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\System.Windows.Interactivity.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\621C21014D3C152529E2460FA6304EE3]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\tr\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\Version"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\636B9C23C79154B57AB561F39A139BFD]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\de\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65AAF0F0CB7F0B45F900FDF19CEAAF2B]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\tr\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6879A5E348601C45986308CA84958E94]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\tr\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6F3B7A9805E1F5492A1020EEDF2341]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.WinCore.Yahoo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B1F5D204E4EEB342A5AD1D7E60D61BF]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\IminentMessenger"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7005A2A4DCF9DD7548137AB17E3A3AF3]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.WinCore.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712EAF07EE73CC65C822CC3BAE3B2483]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\ro\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7947B301B2446E752A3FE06EAD7D26B5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\es\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7987CE52D13E16258B0E1E3DB1BB0974]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\ro\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BEED197C514FDA53901AE8DD8EF0891]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\de\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DFDCF03D46C34159BDE29FBDBF1ACF5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Microsoft.Expression.Interactions.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\87EC9ACEAFE8ECD52A529663CD35213F]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\Software\Iminent\WebBooster\Scripts\sslminibar\BagKey"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\890F436B85B790A55A582B7307DA12CE]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\en\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C13DA6755F685B529615C8E92B3CA39]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\it\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D07CD9CB3E6BE652872BF06A1CCA782]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\tr\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\InstallationOwner"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\94194FDD4DF523E53A888D65722A135D]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Windows.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95266D07D008D2E4E9B6F8E0DD15432A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4223BBC9438CAD49BBE10B4E344B1DD]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\SearchEngineOptin"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\USearch.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD]
"00000000000000000000000000000000"="C:\Programme\Iminent\USearch.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A72F23B1D745C27508518132197BC982]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\es\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89E2B6FB14D8275DA63D075171DA184]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\ro\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9C43CD4001E9E4518B274AF9A0EFDA9]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\de\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABA081CF7F19915FBB80B3BAF47CE63]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\es\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC2A0FFD0A1686D53A4E24D6E96949E4]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\fr\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE5BDB2750259915D8442D4591A7717B]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.AxImp.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A79C71D5DC1C150B76B6ED11195DFC]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\fr\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6D497DB33974935488761F7C4C3D755]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\fr\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\inst\main.ico"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8C8BCC1206978D51A8B9EECBF806C53]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\System.Data.SQLite.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAD3576CEA646895B962F94754612791]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\it\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB4091512C8F4295E99CE2D061ED2020]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\de\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE6BBC9A31531F598794A62120B51C7]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Business.Connect.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C19162788CA4D235E829F88E2F771567]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\en\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C71F07DA356B66B5484A8E7F2ADEB7DC]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\fr\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C96AD15EE8E887B56BAF2136A9088503]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Services.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9E6B66ECC49D155888399C51D05C49E]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\fr\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SearchEngineOptin"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE85F265816AE2D4E9B73C3E207E679C]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\Mediator\Server\ProcPath"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5B62BB7BC607FB539585E2B7B6AFD16]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Workflow.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB027F01D4D53765C8E4FBE7DB77E07E]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Booster.UI.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2EB492393411F5ABE8ED13C59FBF20]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Mediator.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDA2534BD056D1F44B6EC96AAA7F1F6E]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SearchTheWeb\UserSTWDecision"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDCA763D4C48A105086B4CCCEE78043F]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.WinCore.WLM15.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E05B987540A9E2849AAF9E5B06C27DA8]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\HomePageAlreadySet"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E09F4A6B9D2A08B599AE9E38BFC93CD6]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\en\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E27B6535D0D94A24E91047C7D86F27BC]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SysTray"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45D171E075A5425CBACF6631A45FA39]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\it\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E513C2076D90AD04F888BD762143F191]
"3DA786FCDC08E1345AF052DDF8C9693C"="00:\iminent\URL Protocol"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8F4C985459564F5B8DCFF2B3C7EBD27]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\de\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96E33222BAC06B57A1FA9D72951C945]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.WinCore.WLM.WinEvents.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA46CE9007F70A5CAFA5F26E5DDEBE5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\WPFLocalizeExtension.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE43FF091A8714A599F33EF2533FB59A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\es\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE790015CF30DAA569960905FF1651A0]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\it\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\Assemblies\Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\BagKey"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25491036D0FA5D5FA6742F5742F151A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\en\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2E0D3DD9E5E4B74CA43BCE77815E287]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2E0D3DD9E5E4B74CA43BCE77815E287]
"00000000000000000000000000000000"="C:\Programme\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4D1BA8B482D9734E943EE260A7ADEF2]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6704141BAAF6884785EC6843143D6A7]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SearchTheWeb\OldDefaultScope"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F71371A90E93D605C8B0A71F163F625C]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\System.Data.SQLite.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7507D4D4C310125E9A22BD909A41FB6]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Entity.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\SearchTheWeb.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7]
"00000000000000000000000000000000"="C:\Programme\Iminent\SearchTheWeb.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F79C21D785419125595AC59458A6142D]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\en\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA15C90F092A60F53A4E0F88CED02968]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\fr\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA1CF130B3D58B553833ACB6BE8AFAD4]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\Iminent.Business.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB0F1A18E4F0DBD509A42F4D4C05C02A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\de\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD17ED194F1C2B457B4F6EF4AE8DEAF3]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Programme\Iminent\it\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DA786FCDC08E1345AF052DDF8C9693C\InstallProperties]
"InstallLocation"="C:\Programme\Iminent\IMBooster\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DA786FCDC08E1345AF052DDF8C9693C\InstallProperties]
"InstallSource"="C:\DOKUME~1\VERENA~1\LOKALE~1\Temp\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DA786FCDC08E1345AF052DDF8C9693C\InstallProperties]
"Publisher"="Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DA786FCDC08E1345AF052DDF8C9693C\InstallProperties]
"DisplayName"="Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CF687AD3-80CD-431E-A50F-25DD8F9C96C3}]
"InstallLocation"="C:\Programme\Iminent\IMBooster\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CF687AD3-80CD-431E-A50F-25DD8F9C96C3}]
"Publisher"="Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CF687AD3-80CD-431E-A50F-25DD8F9C96C3}]
"DisplayName"="Iminent"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application]
"Sources"="WSH WMIAdapter WMI.NET Provider Extension WmdmPmSN WinMgmt Winlogon Windows Product Activation Windows 3.1 Migration WebClient VSSetup VSS VBRuntime Userinit Userenv System.ServiceModel.Install 3.0.0.0 System.ServiceModel 4.0.0.0 System.ServiceModel 3.0.0.0 System.Runtime.Serialization 4.0.0.0 System.Runtime.Serialization 3.0.0.0 System.IO.Log 4.0.0.0 System.IO.Log 3.0.0.0 System.IdentityModel 4.0.0.0 System.IdentityModel 3.0.0.0 SysmonLog Starter Spybot - Search & Destroy 2 SpoolerCtrs Software Restriction Policies Software Installation SNL HiveManager SkypeUpdate ServiceModel Audit 4.0.0.0 ServiceModel Audit 3.0.0.0 SecurityCenter SclgNtfy SceSrv SceCli safrslv SAFrdms RPC Remote Assistance Protexis Licensing Service Picasa3 Personal Backup PerfProc PerfOS PerfNet Perfmon Perflib PerfDisk Perfctrs Offline Files Oakley ntbackup NeroCheck NDP1.1sp1-KB979906-X86 NDP1.1sp1-KB953297-X86 NDP1.1sp1-KB2833941-X86 NDP1.1sp1-KB2742597
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\Iminent]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application]
"Sources"="WSH WMIAdapter WMI.NET Provider Extension WmdmPmSN WinMgmt Winlogon Windows Product Activation Windows 3.1 Migration WebClient VSSetup VSS VBRuntime Userinit Userenv System.ServiceModel.Install 3.0.0.0 System.ServiceModel 4.0.0.0 System.ServiceModel 3.0.0.0 System.Runtime.Serialization 4.0.0.0 System.Runtime.Serialization 3.0.0.0 System.IO.Log 4.0.0.0 System.IO.Log 3.0.0.0 System.IdentityModel 4.0.0.0 System.IdentityModel 3.0.0.0 SysmonLog Starter Spybot - Search & Destroy 2 SpoolerCtrs Software Restriction Policies Software Installation SNL HiveManager SkypeUpdate ServiceModel Audit 4.0.0.0 ServiceModel Audit 3.0.0.0 SecurityCenter SclgNtfy SceSrv SceCli safrslv SAFrdms RPC Remote Assistance Protexis Licensing Service Picasa3 Personal Backup PerfProc PerfOS PerfNet Perfmon Perflib PerfDisk Perfctrs Offline Files Oakley ntbackup NeroCheck NDP1.1sp1-KB979906-X86 NDP1.1sp1-KB953297-X86 NDP1.1sp1-KB2833941-X86 NDP1.1sp1-KB2742597
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Iminent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application]
"Sources"="WSH WMIAdapter WMI.NET Provider Extension WmdmPmSN WinMgmt Winlogon Windows Product Activation Windows 3.1 Migration WebClient VSSetup VSS VBRuntime Userinit Userenv System.ServiceModel.Install 3.0.0.0 System.ServiceModel 4.0.0.0 System.ServiceModel 3.0.0.0 System.Runtime.Serialization 4.0.0.0 System.Runtime.Serialization 3.0.0.0 System.IO.Log 4.0.0.0 System.IO.Log 3.0.0.0 System.IdentityModel 4.0.0.0 System.IdentityModel 3.0.0.0 SysmonLog Starter Spybot - Search & Destroy 2 SpoolerCtrs Software Restriction Policies Software Installation SNL HiveManager SkypeUpdate ServiceModel Audit 4.0.0.0 ServiceModel Audit 3.0.0.0 SecurityCenter SclgNtfy SceSrv SceCli safrslv SAFrdms RPC Remote Assistance Protexis Licensing Service Picasa3 Personal Backup PerfProc PerfOS PerfNet Perfmon Perflib PerfDisk Perfctrs Offline Files Oakley ntbackup NeroCheck NDP1.1sp1-KB979906-X86 NDP1.1sp1-KB953297-X86 NDP1.1sp1-KB2833941-X86 NDP1.1sp1-KB274
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Iminent]
[HKEY_USERS\S-1-5-21-4227748925-2461040166-3706523133-1006\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Word\Settings\Speichern unter\File Name MRU]
"Value"="C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\AdwCleaner v3.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\ComboFix 13.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Iminent ist zwar lästig.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\UXSHT.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Fanfiction\Holly.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Kochen\carrot soup.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\straightworld.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Fanfiction\Englisch\Branwen777+-+Misguided+Roses.docx C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\uni\Biologie\Exkursionen\Exkursionsbericht Bad Marienberg.docx C:\Dokumente und Einstellungen\Verena Bender\Ei
[HKEY_USERS\S-1-5-21-4227748925-2461040166-3706523133-1006\Software\Microsoft\Office\12.0\Word\File MRU]
"Item 3"="[F00000000][T01CED72BE66DBC80]*C:\Dokumente und Einstellungen\Verena Bender\Eigene Dateien\Iminent ist zwar lästig.docx"
-= EOF =-
Hey Matthias,
Ich hab nichts mehr von Iminent gesehen und mein Rechner läuft so schnell wie schon lange nicht mehr. Mein Internet läuft auch schneller, ist aber immer noch sehr eigen. warum es erst richtig schnell wird nachdem ich ein youtube video gesehen habe, ist mir schon seit Jahren ein Rätsel... :)
LG, Verena |
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
SecurityCheck und:
WARNUNG an die MITLESER: 
