Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Datenbank Version: v2014.03.21.04
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
Angelo :: ANGELO-PC [Administrator]
21.03.2014 11:34:32
mbam-log-2014-03-21 (11-34-32).txt
Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 297092
Laufzeit: 3 Minute(n), 28 Sekunde(n)
Infizierte Speicherprozesse: 4
C:\Program Files (x86)\diamondata\updatediamondata.exe (PUP.Optional.DiamonData.A) -> 3120 -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\utildiamondata.exe (PUP.Optional.DiamonData.A) -> 3608 -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\FilterApp_C64.exe (PUP.Optional.DiamonData.A) -> 5652 -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\XTLSApp.exe (PUP.Optional.DiamonData.A) -> 21100 -> Löschen bei Neustart.
Infizierte Speichermodule: 2
C:\Program Files (x86)\diamondata\bin\XTLS.dll (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\XTLSApp.dll (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
Infizierte Registrierungsschlüssel: 10
HKLM\SYSTEM\CurrentControlSet\Services\Util diamondata (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52} (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66} (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB} (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\diamondata (PUP.Optional.diamondata.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\AppDataLow\Software\PriceGong (PUP.Optional.PriceGong.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\diamondata (PUP.Optional.Diamondata.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
Infizierte Registrierungswerte: 1
HKLM\SOFTWARE\Mozilla\Firefox\extensions|{336D0C35-8A85-403a-B9D2-65C292C39087} (PUP.Optional.Incredibar) -> Daten: C:\Program Files\Web Assistant\Firefox -> Erfolgreich gelöscht und in Quarantäne gestellt.
Infizierte Dateiobjekte der Registrierung: 2
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=0196ce60-9bd8-4c06-a6bb-a0d0764ce1c9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=0196ce60-9bd8-4c06-a6bb-a0d0764ce1c9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
Infizierte Verzeichnisse: 14
C:\Program Files (x86)\diamondata (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\plugins (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\TEMP (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\update (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\12AF93C813AE437299CAC07BDB20ADEC (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\1E9DFB04D40248E79B5AE94181451229 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\6A25BB6C9E4249239FEFA7086281B66D (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\B8B7489279854B34A5459088881B4E97 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\OpenCandy_12AF93C813AE437299CAC07BDB20ADEC (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\OpenCandy_B8B7489279854B34A5459088881B4E97 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb (PUP.Optional.Diamondata.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0 (PUP.Optional.Diamondata.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
Infizierte Dateien: 38
C:\Program Files (x86)\diamondata\updatediamondata.exe (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\utildiamondata.exe (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Users\Angelo\AppData\Roaming\OpenCandy\12AF93C813AE437299CAC07BDB20ADEC\LinkuryInstaller.msi (PUP.Optional.SmartBar) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\12AF93C813AE437299CAC07BDB20ADEC\LinkuryInstaller_p1v15.exe (PUP.Optional.SmartBar) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\Downloads\cdbxp_setup_4.5.2.4214_minimal.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\diamondata.ico (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\diamondata.Common.dll (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\diamondataOPC.exe (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\diamondataozr.exe (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\diamondataUninstall.exe (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\Microsoft.Win32.TaskScheduler.dll (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\sqlite3.exe (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\updatediamondata(25).exe (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\updatediamondata.InstallState (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\7za.exe (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\BrowserAdapterS.7z (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\FilterApp_C64.exe (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\sqlite3.dll (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\utildiamondata(24).exe (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\utildiamondata.InstallState (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\XTLS.dll (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\XTLSApp.dll (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\XTLSApp.exe (PUP.Optional.DiamonData.A) -> Löschen bei Neustart.
C:\Program Files (x86)\diamondata\bin\plugins\diamondata.BrowserAdapterS.dll (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\plugins\diamondata.IEUpdate.dll (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\bin\plugins\diamondata.PurBrowse.dll (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\diamondata\update\oxh12ewz.rxo.exe (PUP.Optional.DiamonData.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\12AF93C813AE437299CAC07BDB20ADEC\2787.ico (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\12AF93C813AE437299CAC07BDB20ADEC\EBB77268-338F-4C6A-8590-AD88FED26F4A (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\12AF93C813AE437299CAC07BDB20ADEC\OCBrowserHelper_1.0.3.85.dll (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\1E9DFB04D40248E79B5AE94181451229\DivXInstaller.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\1E9DFB04D40248E79B5AE94181451229\DivX_p1v1.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\6A25BB6C9E4249239FEFA7086281B66D\RegistryReviverSetup_PPD.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Angelo\AppData\Roaming\OpenCandy\B8B7489279854B34A5459088881B4E97\TuneUpUtilities2012_de-DE_1002174.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0\background.js (PUP.Optional.Diamondata.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0\content.js (PUP.Optional.Diamondata.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0\icon.png (PUP.Optional.Diamondata.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Extensions\hendmekoldfacfhlojkjcnbjegkahclb\1.0.0_0\manifest.json (PUP.Optional.Diamondata.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
(Ende)
AdwCleaner Logfile:
Code:
# AdwCleaner v3.022 - Bericht erstellt am 21/03/2014 um 11:41:20
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Angelo - ANGELO-PC
# Gestartet von : C:\Users\Angelo\Downloads\adwcleaner(1).exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\Ask.com
Ordner Gelöscht : C:\Program Files (x86)\AVG Secure Search
[!] Ordner Gelöscht : C:\Program Files (x86)\diamondata
Ordner Gelöscht : C:\Program Files (x86)\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Ordner Gelöscht : C:\Windows\SysWOW64\AI_RecycleBin
Ordner Gelöscht : C:\Users\Angelo\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\Angelo\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Angelo\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Angelo\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Angelo\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Angelo\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Angelo\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Angelo\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Angelo\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\Angelo\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Angelo\AppData\Roaming\OCS
Ordner Gelöscht : C:\Users\Angelo\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Angelo\AppData\Roaming\yourfiledownloader
Ordner Gelöscht : C:\Users\Test\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Test\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Test\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Angelo\AppData\Roaming\Mozilla\Firefox\Profiles\rd1sfmzq.default\Extensions\toolbar@ask.com
Ordner Gelöscht : C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
Datei Gelöscht : C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.golsearch.com_0.localstorage
Datei Gelöscht : C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.golsearch.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.triple-search.com_0.localstorage
Datei Gelöscht : C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.triple-search.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www2.delta-search.com_0.localstorage
Datei Gelöscht : C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www2.delta-search.com_0.localstorage-journal
Datei Gelöscht : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
Datei Gelöscht : C:\Windows\System32\Tasks\SpyHunter4Startup
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup{2_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup{2_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_morphvox_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_morphvox_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mouse-recorder_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mouse-recorder_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A244612-A1F7-11E0-95C0-E71F4824019B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\APN
Schlüssel Gelöscht : HKCU\Software\Ask.com
Schlüssel Gelöscht : HKCU\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\IGearSettings
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YourFileDownloader
Schlüssel Gelöscht : HKCU\Software\AppDataLow\AskToolbarInfo
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\APN
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\AVG Secure Search
Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\Myfree Codec
Schlüssel Gelöscht : HKLM\Software\Web Assistant
Schlüssel Gelöscht : HKLM\Software\YourFileDownloader
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Web Assistant
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16521
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
-\\ Mozilla Firefox v27.0.1 (de)
[ Datei : C:\Users\Angelo\AppData\Roaming\Mozilla\Firefox\Profiles\uleljibu.default-1381056090091\prefs.js ]
-\\ Google Chrome v33.0.1750.154
[ Datei : C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ Datei : C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [26986 octets] - [21/03/2014 11:40:36]
AdwCleaner[S0].txt - [25203 octets] - [21/03/2014 11:41:20]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [25264 octets] ##########
--- --- ---
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Angelo on 21.03.2014 at 11:47:28,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEA25ED4-C2D5-4F08-A7C6-4B51853878C1}
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
~~~ Files
Successfully deleted: [File] C:\Windows\syswow64\sho1633.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho2A5E.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho3A65.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho789D.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8677.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8F2E.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoD135.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE735.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoFE9C.tmp
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{0117385B-36A7-4DCA-9E69-2E4B879D1A42}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{03C56221-04D6-4093-81F0-35FFE42D198E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{046B2283-269E-45F3-93F5-B95B90D5615F}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{04BA0492-6E40-449C-A418-AAB0E772CA27}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{056318D9-0D97-4221-95E3-9F4EDF61C198}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{06087A22-40E6-4E45-879A-AB3F8702FE34}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{06B32FDF-DF1C-48A0-94E0-1CAAAE4FD902}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{087ACB9B-E4A0-4038-BADA-CE613BF39DCA}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{08C48091-7748-45E5-9374-4DF4ED27637B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{0A2AE698-A527-415D-9DE3-A968F7FD325F}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{0B56FF1C-070E-4ABF-B8EF-93422EF5E139}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{0EDFC672-8995-440A-AC4C-EAA99422799E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{0F91FFE5-0067-49E6-8931-6D06810A5181}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{16AA45EB-3B7F-4E83-A42E-63D4C0B75ECB}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{18199FF6-ED7C-4C12-89EE-38B803647A11}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1A498A7C-F8FE-45E1-A2F4-6CEB2D9EF990}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1A987A59-1CE7-4A13-87C4-923715E33D90}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1AB91315-4CD2-461D-A525-CBEDEFF808D2}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1BA6F049-0EAB-411B-86D5-EA79BF189450}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1BFBB18E-558F-41C9-A873-29B6EA9F8CD6}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1C13D929-A2E1-4EFC-8B68-244DF6A07D93}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1CF29C34-35B8-4EBA-8799-2AAA1BB58906}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1D0E0248-2A6E-427F-8495-0C0D4453ABC5}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1D4B0A04-657F-4901-8A53-8698DCFD2287}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1DE319E3-4C49-41F6-81D8-EA812E2FC49E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1EC34812-F663-4B93-B642-3D37DC48F7F3}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1F6174CF-DADC-40FE-BDF9-A28AD6E63585}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{1FD60E2C-958D-4785-9445-42D33A951550}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{2184DBC9-5A23-4137-81E9-BEE18DAC5808}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{21A3A6EC-C8DC-45B3-BF5F-8D1296491B3D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{222C23AD-A660-43FC-9B96-18B6580CA27C}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{2261AEF6-ABCE-47D2-979E-1CE24A3450B5}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{2267DC3D-C04B-4A1C-8880-24C21667FA5A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{22A0E614-76A3-4215-8BB8-67BD2E416A33}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{22CA917F-D0FD-43A8-9C45-07C6BB11FC31}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{23C9287B-8D3D-414C-BC6A-40821E212801}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{249E500C-A52B-4D49-8060-DBA44EDA315D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{250B007E-0BAD-4212-A1B2-F147F21FC379}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{250B1B91-01A4-4BD5-ABC6-4EF9605C7C2D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{25A953CD-FCBA-410A-9ED8-DB5BB12C64E5}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{27D656F8-4BC3-4D1E-BA40-A00B8B3A71D5}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{28640C65-8EBD-40AC-BA5A-ACC1B7464770}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{29D14504-7AD8-4B5B-9AA3-690DE8628282}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{2ADD199E-4994-4BD9-B689-4A059EA822CA}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{2B35EB44-DA2A-459A-B01B-9E5C20A68A7E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{2BFFBF9D-DF70-463E-914B-F3F8544B6471}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{32599937-D6FF-4E33-B919-F048A07E82DB}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{34E28ACE-E95F-4627-AA62-A1226116195B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{362AFDF1-2C76-43A1-833B-83B57F640B2F}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{3871904C-0731-4D5A-B240-3920C82684F6}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{39E2057B-014C-4760-A98E-36DEFDFF97D7}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{3AEB91A3-7957-4E1A-8CCE-4B800A18C0AE}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{3B618468-BA92-43B4-9695-F6F0D0E79B8D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{3D1BE3CE-4EEC-4AFE-B612-030182E88016}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{3E4DC1F7-BEA6-4415-B773-B633AC81EF62}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{42168C06-5B5E-4229-9B3A-232BC35AE6F6}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{426BF03A-1E07-4743-8F68-EB1A870D692F}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{42976C78-4A04-4E8B-B00B-41ED99474F9B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{43EF61B0-0345-4CD4-A2ED-ECA13C8C3DA4}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{47486348-04EB-4096-8C5F-1AB908F6383A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{48261453-A9D2-464C-BB25-527EF86F3E92}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{48C624AA-A317-4748-8ADA-C6BF8AF1A7A6}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{49EC15AF-EF14-4D70-B878-28FB8F26FECC}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{4CB8C7C7-0F15-469D-91BF-C8DD0210435E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{4CDDF1F5-8D24-426E-856E-F2C0DC645E93}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{4D20E373-B796-4C1C-AFF2-98E0ABE9B2B2}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{4E1700E6-C434-4C35-8CB7-A6DFA91A8BD9}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{4E5D5422-4628-4862-9A4E-2968516DF80D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{5177BAD9-925E-4861-9D27-100223C29B04}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{5246D610-8C55-4DF2-B984-09994E0F9070}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{526082C6-925B-4732-A505-FF39D55AC520}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{52BB8278-A3C0-41A3-82DF-5BF9E298EC86}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{536E4FA5-D240-4B41-AD4E-5D8A82F3CFC8}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{580EE382-9219-4A7D-BCE1-D7E54CE79D5E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{5993381A-B9E4-409A-9D74-986824C67BF4}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{5B35601D-09F2-4D6C-A5CD-E483662B0CC6}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{5C960FCB-B3E2-4DBD-86B7-1946426A3342}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{5D2BAC9D-7E11-436F-88BF-D8A2B4A9E05E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{5D95F544-9875-4A68-9ED7-7A328E40BDC6}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{5E2967DB-C9AB-4632-B9A4-8AC208723B3A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{61B9A7DA-B480-4454-880F-DCF99B6F434A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{61E37F16-5BF4-4874-BE96-851B78A682A2}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{633C7021-E534-4791-872F-C83B5A4A2FEC}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{63D5DD16-69A5-4938-B688-F00C4C4518F7}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{64F6E32E-D9FB-445C-8197-EE7F78FA295B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{6553ABFB-0963-45FE-9102-018AD833E690}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{660478CF-AF43-4D52-8B17-A4D61292D97D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{669573DF-2E83-4E7B-9FF3-42FBDBE317EA}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{66CBACFC-173C-40FA-A68B-263F10BAAE95}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{675365A0-66DC-4243-96BD-26B943BD87A1}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{67E69A31-4790-4610-938B-77A32F852706}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{68562F3E-D33A-40B4-A0C5-B11EBB9FE44A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{6ACA90FE-D137-4B98-A0F8-A7FA98AB5DB9}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{6B272C6B-2802-4CA7-8244-8CF1DD817E76}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{6C291E6F-908A-42B7-9196-9F3B2BD191E3}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{6D15366A-BEC3-4717-982D-F3F5BEB211AA}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{6D94DC8A-6708-4F1B-B9BC-CE78077AB6C7}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{6DB229E9-A734-48B7-A225-B9830EDAC301}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{6E73AE18-6F9F-4712-BDFF-52EA58311B8D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{72A0D811-4FFC-4B7C-908E-06D24DF7168E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{739F5D35-372F-4655-B6BE-B433ED42EF29}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{74AD9D93-D8AF-4919-8FAF-E11BA2B9EB63}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{74C35EB3-72DC-485A-80B9-302D1249E94A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{75C806C2-1AAB-4C10-B465-C6F217249A73}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{77021757-DE47-45D9-B343-B893CF78C1F8}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{783E03D7-DA91-443D-BF13-A0379AFF52FC}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7A12CF94-5D4A-4B46-8E90-551D43636A72}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7A48079D-92DA-45A2-AEFA-8030C18D1302}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7AB214F4-2DA1-41D6-8E58-6A54B0EB4111}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7AD1625B-F55A-42B0-BCD4-997EB0A28828}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7B552835-AAA4-42F8-A1B5-B0F428235B07}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7B7D9467-4BF8-40C7-A69B-7FBC8EBDDD38}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7E4A5553-EE58-49CC-BFAE-D776AF04FF52}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7EAAFFF5-E476-4A22-9388-4C93492C3D23}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7EB07870-B103-4CD5-865E-03C7F8D86843}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{7EBCE81E-7019-4AAF-9365-F633C13A1D54}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{8128B5F2-DAFD-4919-A8D3-77AA3FDC0756}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{8162BA44-95CC-4FD9-9B9D-167DDE0A2701}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{81683593-04C3-4040-BC71-CD9239BD4773}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{82C17941-F6F9-4BB3-97EB-8658C0D0C5A7}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{84348392-8E79-4B7F-B3C6-C6D3E1DD4D90}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{84887BFF-596C-4094-9C62-FC2AEC32AAFC}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{84E41D9E-AD36-4E44-BC4F-5AE51CEF09E2}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{85BE630F-FCC3-4EC8-AE9B-3B96676BFC80}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{85E383E9-8F80-48F8-B6C3-59B3607BC914}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{87A5420A-94AB-4C5D-85DB-6B279D56FAC1}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{88AACAD6-8695-4AA8-B907-5ADC0CDEF8C4}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{8A8B6F2A-2B40-44F9-8FCA-042D9D2EF537}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{8B789B43-905C-47D1-9310-0AE0C676E1E0}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{8BF07A89-E0A8-45CB-8FBA-3779ECF6AAEA}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{8C761457-1416-4425-9044-78AEA3465CFF}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{8D195890-E4A3-4D27-B394-689D1CAEBF69}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{8F89654F-6953-4A17-A39C-34257581943A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{91EDA14D-E2E3-47AA-BD60-4DC9AB13736D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{925A514F-7E8E-4C95-8484-2AF0639EE4A8}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{931458E6-553E-4C13-BD05-182ECF159D21}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{96C3CE90-AA4B-4482-B9EA-3FAB74C7403C}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{98319A55-7AE2-46D3-B93E-7BA036D5BB6E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{997591D2-31DC-40B9-AC66-06B0B05B93D7}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{9A00871C-FC0D-4586-887F-A19CB6B9D954}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{9ABDBF42-992C-4DC6-A74F-5BCD4BFC4C0B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{9E7F1D82-4E7A-46D2-8D6B-682056CBFF67}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{9F00F944-43FF-4FD0-B866-BCFDE240D34A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{9FACCB72-0608-464D-898F-D36645232A9B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A1DE9425-BC72-4E55-A655-DBF821040979}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A25A2618-1793-43BC-8706-8D8236247896}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A2E273DF-4B83-477A-A786-672EBD69B98C}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A2E751A7-7BCE-4609-824E-08D48E70FA7E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A2F32BB4-FAFE-4C86-9850-195129FA0E0A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A77CBAE0-F13D-4255-8388-7ED75784D26D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A79BC8A9-90CD-49B7-97B8-45E01A4503FE}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A8DCE0C1-6342-4952-BA2A-289AEC8AD224}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A91292CC-1CD9-433F-B008-7BAB516FDD64}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{A9BFD10D-58EA-44BE-BDA5-C7B2B48A869C}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{AA9066F1-DCE1-487E-8873-B4490DE0E8EE}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{AAEF8B2F-2569-421F-B880-D333D971B2C8}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{ACE19B44-5A12-40CA-A6C3-BEDB35A175DC}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{AD6536ED-51A6-41C4-812F-5DB0463458DC}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{AE075E68-4795-4CC8-8B0C-74DD29B9D690}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{AE89DCC0-6293-4F25-BE98-B43E2C3BDBA6}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{AF9D6F02-F847-4FC6-BCA8-A14734979B69}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B1981924-24F5-4A5A-9507-CA647B065B2F}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B26A08AD-875F-482A-B550-82C9F72105CE}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B30DA49A-0B56-4D0E-970A-49FA4C443EF7}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B36B7777-9001-4892-B7C6-EED3B201DE2E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B42D13D7-2E91-48BA-98E2-6E265B3E900A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B54B440A-7B0B-48DB-9BEB-CF64C62BF999}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B6C9F77B-EC61-4F6C-88E5-EE6CCC7966CF}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B79FDBF8-6378-489C-B9F6-BBEE16AB0BF2}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B7F228CB-8DD4-4EB3-AA5C-D6B3D11CDF71}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B8BF081D-506B-4F3F-BE73-E8426664E44B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B8D71543-FD7D-4BC4-9F4C-F41C24052D17}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{B996BFDD-BB19-4316-874A-FC6934E083DB}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{BAA540C4-C5A6-4EFD-95EE-6EBACDA8D004}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{BB6F2375-63A2-4D80-BD4D-9F4FC5D3B447}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{BB79EE46-D815-4AC9-8589-871189EA4F54}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{BBC7CFD4-D077-4195-B103-E9244A6446E9}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{BD016CA3-556C-409E-8771-5011A9CF789E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{BF9D0438-FD63-46DB-8E17-1F318454A9B3}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C04444D4-EAB1-4E50-907D-142084FAA35E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C0460E21-F992-4D80-A260-9699C33A1B87}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C13BBF65-FBD3-4FEA-9036-B557810DAD40}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C39AD58E-565E-4379-8430-4F69B661FEA4}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C42ADF82-A122-4041-B3FD-AF8A1BAAC410}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C433E735-F676-4E83-B01A-91D60BADEA1D}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C6FC2D39-656A-4D28-92D9-7740AFDBEE31}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C7620A42-1A07-4991-BE5A-E7154FA35F2B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C8DCA154-4626-445D-B831-E4FACE1A35A1}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C938881B-7883-41D2-9193-C2667BA8E10C}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C95E2903-190F-4339-B66D-16F3B5F282F5}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C9629636-2E79-4B92-BA29-E02D02937A77}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{C98FBA16-C982-4896-8E2A-2204F6297A50}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{CA200E91-213B-4C52-A6E2-C1D33DF53F01}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{CB07A84B-E311-44DF-B885-63C190578ABD}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{CBC4B864-1D3C-40AE-B463-5B9F016C30BE}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{CBF7CFEB-3F94-4613-93E7-810F7D456848}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{CE074476-3E09-4376-8BB7-696F98A99B17}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{CF7C0154-EF7E-4F9B-8542-05605D6323CF}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{CFF04D2A-6FD8-4B18-AB20-EE0B00202B9B}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D0C4D779-EA5F-4804-B9A9-F27B277AC015}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D1107B3E-DC2D-4432-B843-C1C7ABEA2049}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D1927CF8-DE25-4659-86AE-43C5CEB2CDE1}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D1982308-865A-4880-8FC5-5EA40C4332F5}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D28BAD63-A03D-4F6B-B02D-760C6FBE847A}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D2ABCB68-CD7D-48BA-9F2D-D998981117E3}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D50C0A77-2B6A-400E-90D8-5A3D35B5DD0E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D68D9A48-DFD8-4782-918E-0119C8FDDAEC}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D799F63C-023F-4550-BAFB-EC7D5F932CB7}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D8FA88E1-08B4-4EFE-9524-C6D25CA985D2}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{D976F730-02C8-4C82-B274-87A7A620BC49}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{DA6D4923-0A56-424D-B169-87242622C727}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{DB92836A-BDB6-4154-90EE-FCA0111D326F}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{DE9F2501-4AD8-4BF0-878D-E578DE70861E}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{DEF3110A-E964-4FDC-B14C-660707851BA8}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{DFC560C9-08BC-45DE-8DBE-32C0A60CEED9}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{E086ABF0-108D-40A2-BF83-E705D47ADC15}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{E19D5CA8-5477-447A-891C-6A6A2EC5D1DE}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{E2F27C8C-ECBF-453A-A5B0-54F2DBC0F9BA}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{E40D6C77-769C-4F05-8721-B97E18244077}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{E8E8FF54-CDC9-4F98-B6D1-188BF96A2331}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{E9773E13-3337-4575-AB7E-52F20DF54D64}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{E9809E18-9C9A-40C8-940C-FB699F18E35C}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{EABFA70A-7AA0-4246-A551-229106752088}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{EAD4ABB7-0FC3-430B-83EE-5F5CD56C64A7}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{EB66566F-EC5E-4800-92A4-B366EC500D9F}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{EB922DF4-EEE1-45D4-B340-041C3E697693}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{EDC08955-19C9-40CF-9CE3-CD84C5DBDA43}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{EFA80639-99AD-467C-9129-629AB9566A08}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{F07DF9D6-E129-45F1-BEDF-4AD3F1F308CD}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{F58E3358-661F-482C-8519-27241D013704}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{F72A424E-45A9-40A3-8EE7-647EAD4D1FD8}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{F95FE786-1F09-486A-8BFE-F04E54FAFDDC}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{FB1B4885-EE79-4E79-A8E4-539DB8134B85}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{FC3A2FAF-4161-4B7C-A779-DE8BA5A5158C}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{FDD17E3A-B06C-4B73-8693-FA360743BF40}
Successfully deleted: [Empty Folder] C:\Users\Angelo\appdata\local\{FEB215C4-1EF3-4072-94DA-25DD9F96BC1C}
~~~ FireFox
Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\Angelo\AppData\Roaming\mozilla\firefox\profiles\uleljibu.default-1381056090091\minidumps [27 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.03.2014 at 11:51:41,31
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile:
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Angelo (administrator) on ANGELO-PC on 21-03-2014 11:52:56
Running from C:\Users\Angelo\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums
==================== Processes (Whitelisted) =================
(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\vsnpstd3.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-11-29] (Realtek Semiconductor)
HKLM\...\Run: [snpstd3] - C:\Windows\vsnpstd3.exe [827392 2006-09-19] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [811792 2014-01-20] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1157425635-1458772921-92447920-1002\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-11-06] (Samsung)
HKU\S-1-5-21-1157425635-1458772921-92447920-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}: [NameServer]8.8.8.8,8.8.4.4
FireFox:
========
FF ProfilePath: C:\Users\Angelo\AppData\Roaming\Mozilla\Firefox\Profiles\uleljibu.default-1381056090091
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Angelo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ghostery - C:\Users\Angelo\AppData\Roaming\Mozilla\Firefox\Profiles\uleljibu.default-1381056090091\Extensions\firefox@ghostery.com.xpi [2014-02-02]
FF Extension: GMX MailCheck - C:\Users\Angelo\AppData\Roaming\Mozilla\Firefox\Profiles\uleljibu.default-1381056090091\Extensions\toolbar@gmx.net.xpi [2013-10-06]
FF Extension: NoScript - C:\Users\Angelo\AppData\Roaming\Mozilla\Firefox\Profiles\uleljibu.default-1381056090091\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-02-02]
FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-03-04]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-03-04]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-03-04]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-03-04]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-03-04]
Chrome:
=======
CHR HomePage: hxxp://www.golsearch.com/?babsrc=HP_ss_Btisdt6&mntrId=204C8C89A5C73243&affID=120007&tt=280813_ctrl2&tsp=4989
CHR DefaultSearchKeyword: golsearch.com
CHR DefaultSearchProvider: Search the web
CHR DefaultSearchURL: hxxp://www.golsearch.com/?q={searchTerms}&babsrc=SP_ss_Btisdt6&mntrId=204C8C89A5C73243&affID=120007&tt=280813_ctrl2&tsp=4989
CHR DefaultNewTabURL:
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll No File
CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.110.21) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Google Docs) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-13]
CHR Extension: (Google Drive) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-13]
CHR Extension: (Kaspersky Protection) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-03-20]
CHR Extension: (YouTube) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-13]
CHR Extension: (Google-Suche) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-13]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-03-13]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-03-20]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-03-20]
CHR Extension: (Virtual Keyboard) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-03-13]
CHR Extension: (Skype Click to Call) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-03-13]
CHR Extension: (DvdVideoSoft Free Youtube Download) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2013-03-13]
CHR Extension: (Google Wallet) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-14]
CHR Extension: (Google Mail) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-13]
CHR Extension: (Anti-Banner) - C:\Users\Angelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-03-13]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Angelo\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-20]
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [2012-09-20]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hendmekoldfacfhlojkjcnbjegkahclb] - C:\Program Files (x86)\diamondata\hendmekoldfacfhlojkjcnbjegkahclb.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-08-13]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-01-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-01-20] (BlueStack Systems, Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4979992 2013-11-25] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2013-07-17] (Enigma Software Group USA, LLC.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143072 2012-05-29] (TuneUp Software)
S2 vToolbarUpdater18.0.5; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.5\ToolbarUpdater.exe [X]
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [49952 2014-03-21] (AVG Technologies)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [115472 2014-01-20] (BlueStack Systems)
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2010-09-06] (Devguru Co., Ltd)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-03-04] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-03-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-03-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-03-04] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-03-04] (Kaspersky Lab ZAO)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-03] (INCA Internet Co., Ltd.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-05-08] (TuneUp Software)
R1 wStLib64; C:\Windows\System32\drivers\wStLib64.sys [61120 2014-03-18] (StdLib)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-21 11:51 - 2014-03-21 11:51 - 00027066 _____ () C:\Users\Angelo\Desktop\JRT.txt
2014-03-21 11:47 - 2014-03-21 11:47 - 01037734 _____ (Thisisu) C:\Users\Angelo\Downloads\JRT.exe
2014-03-21 11:47 - 2014-03-21 11:47 - 00000000 ____D () C:\Windows\ERUNT
2014-03-21 11:40 - 2014-03-21 11:41 - 00000000 ____D () C:\AdwCleaner
2014-03-21 11:29 - 2014-03-21 11:29 - 00000000 ____D () C:\Users\Angelo\AppData\Roaming\Malwarebytes
2014-03-21 11:28 - 2014-03-21 11:28 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-21 11:28 - 2014-03-21 11:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-21 11:28 - 2014-03-21 11:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-21 11:28 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-21 11:25 - 2014-03-21 11:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Angelo\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-21 11:25 - 2014-03-21 11:25 - 01950720 _____ () C:\Users\Angelo\Downloads\adwcleaner(1).exe
2014-03-20 11:25 - 2014-03-20 11:25 - 00034981 _____ () C:\ComboFix.txt
2014-03-20 11:09 - 2014-03-20 11:09 - 00353280 _____ () C:\Windows\Minidump\032014-27877-01.dmp
2014-03-20 11:08 - 2014-03-20 11:25 - 00000000 ____D () C:\Qoobox
2014-03-20 11:08 - 2014-03-20 11:24 - 00000000 ____D () C:\Windows\erdnt
2014-03-20 11:08 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-20 11:08 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-20 11:08 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-20 11:08 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-20 11:08 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-20 11:08 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-20 11:08 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-20 11:08 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-20 11:05 - 2014-03-20 11:05 - 05190052 ____R (Swearware) C:\Users\Angelo\Downloads\ComboFix.exe
2014-03-20 09:47 - 2014-03-21 11:52 - 00025805 _____ () C:\Users\Angelo\Desktop\FRST.txt
2014-03-20 09:47 - 2014-03-21 11:52 - 00000000 ____D () C:\FRST
2014-03-20 09:47 - 2014-03-20 09:48 - 00041025 _____ () C:\Users\Angelo\Desktop\Addition.txt
2014-03-20 09:45 - 2014-03-20 09:45 - 02157056 _____ (Farbar) C:\Users\Angelo\Desktop\FRST64.exe
2014-03-20 02:57 - 2014-03-20 02:57 - 01950720 _____ () C:\Users\Angelo\Downloads\adwcleaner.exe
2014-03-20 02:57 - 2014-03-20 02:57 - 00464381 _____ () C:\Users\Angelo\Downloads\SpyHunterKiller.exe
2014-03-20 02:51 - 2014-03-20 02:52 - 00000000 ____D () C:\sh4ldr
2014-03-20 02:51 - 2014-03-20 02:51 - 00002290 _____ () C:\Users\Angelo\Desktop\SpyHunter.lnk
2014-03-20 02:51 - 2014-03-20 02:51 - 00000000 ____D () C:\Users\Angelo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-03-20 02:50 - 2013-09-12 10:41 - 00000000 ____D () C:\Users\Angelo\Desktop\SpyHunter v4.15.1.4270 Incl Crack - [MUMBAI]
2014-03-20 02:36 - 2014-03-20 02:36 - 00000000 ____D () C:\Program Files (x86)\Enigma Software Group
2014-03-20 02:35 - 2014-03-20 02:51 - 00000000 ____D () C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP
2014-03-20 02:35 - 2013-09-12 10:42 - 00000578 ____R () C:\Users\Angelo\Desktop\Readme.txt
2014-03-20 02:19 - 2014-03-20 02:34 - 45237249 _____ () C:\Users\Angelo\Desktop\SpyHunter v4.15.1.4270 Incl Crack - [MUMBAI].rar
2014-03-20 01:36 - 2014-03-20 01:36 - 00000000 _____ () C:\autoexec.bat
2014-03-20 01:35 - 2014-03-20 02:36 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-20 01:35 - 2014-03-20 01:35 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-20 01:28 - 2014-03-20 01:28 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Angelo\Downloads\SpyHunter-Installer.exe
2014-03-20 01:25 - 2014-02-12 22:26 - 00000426 _____ () C:\AVScanner.ini
2014-03-18 06:42 - 2014-03-18 06:42 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\wStLib64.sys
2014-03-18 01:43 - 2014-03-20 11:08 - 01998848 _____ () C:\Windows\SysWOW64\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯慤
2014-03-17 00:15 - 2014-03-17 00:16 - 00000000 ____D () C:\Users\Angelo\Desktop\kollegah event palast
2014-03-17 00:13 - 2014-03-17 00:17 - 00000000 ____D () C:\Users\Angelo\Desktop\auto bilder
2014-03-16 19:44 - 2013-12-26 00:50 - 00145933 ____N () C:\Users\Angelo\Desktop\IMG_71977030593326.jpeg
2014-03-13 07:38 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 07:38 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 07:38 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 07:38 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 07:38 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 07:38 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 07:38 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 07:38 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 07:38 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 07:38 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 07:38 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 07:38 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 07:38 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 07:38 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 07:38 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 07:38 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 07:38 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 07:38 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 07:38 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 07:38 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 07:38 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 07:38 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 07:38 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 07:38 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 07:38 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 07:38 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 07:38 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 07:38 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 07:38 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 07:38 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 07:38 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 07:38 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 07:38 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 07:38 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 07:38 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 07:38 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 07:38 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 07:38 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 07:38 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 07:38 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 07:38 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 07:38 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 07:38 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 07:38 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 07:37 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 07:37 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 07:37 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 07:37 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-04 20:51 - 2014-03-04 20:50 - 00001128 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-03-04 20:50 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-03-04 20:49 - 2014-03-04 20:49 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-03-04 20:41 - 2014-03-04 20:44 - 257813336 _____ () C:\Users\Angelo\Downloads\kis14.0.0.4651de-de.exe
==================== One Month Modified Files and Folders =======
2014-03-21 11:53 - 2014-03-20 09:47 - 00025805 _____ () C:\Users\Angelo\Desktop\FRST.txt
2014-03-21 11:52 - 2014-03-20 09:47 - 00000000 ____D () C:\FRST
2014-03-21 11:51 - 2014-03-21 11:51 - 00027066 _____ () C:\Users\Angelo\Desktop\JRT.txt
2014-03-21 11:50 - 2009-07-14 05:45 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-21 11:50 - 2009-07-14 05:45 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-21 11:49 - 2012-05-07 20:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-21 11:47 - 2014-03-21 11:47 - 01037734 _____ (Thisisu) C:\Users\Angelo\Downloads\JRT.exe
2014-03-21 11:47 - 2014-03-21 11:47 - 00000000 ____D () C:\Windows\ERUNT
2014-03-21 11:44 - 2012-05-07 19:36 - 00000000 ____D () C:\Users\Angelo\AppData\Roaming\Skype
2014-03-21 11:43 - 2013-03-13 10:51 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-21 11:43 - 2012-05-07 19:17 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-21 11:42 - 2013-05-15 20:30 - 00349316 _____ () C:\Windows\PFRO.log
2014-03-21 11:42 - 2013-05-14 16:53 - 00029297 _____ () C:\Windows\setupact.log
2014-03-21 11:42 - 2012-02-22 15:34 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-21 11:42 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-21 11:41 - 2014-03-21 11:40 - 00000000 ____D () C:\AdwCleaner
2014-03-21 11:41 - 2012-05-07 19:14 - 01749551 _____ () C:\Windows\WindowsUpdate.log
2014-03-21 11:41 - 2009-07-14 03:34 - 00000603 _____ () C:\Windows\win.ini
2014-03-21 11:32 - 2012-07-07 22:30 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1157425635-1458772921-92447920-1002UA.job
2014-03-21 11:29 - 2014-03-21 11:29 - 00000000 ____D () C:\Users\Angelo\AppData\Roaming\Malwarebytes
2014-03-21 11:28 - 2014-03-21 11:28 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-21 11:28 - 2014-03-21 11:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-21 11:28 - 2014-03-21 11:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-21 11:25 - 2014-03-21 11:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Angelo\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-21 11:25 - 2014-03-21 11:25 - 01950720 _____ () C:\Users\Angelo\Downloads\adwcleaner(1).exe
2014-03-21 11:10 - 2013-05-20 21:47 - 00003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2014-03-21 11:10 - 2013-04-23 18:11 - 00049952 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-03-21 10:56 - 2013-03-13 10:51 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-21 02:00 - 2012-05-07 19:30 - 00000000 ____D () C:\Users\Angelo\AppData\Local\Adobe
2014-03-20 23:32 - 2012-07-07 22:30 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1157425635-1458772921-92447920-1002Core.job
2014-03-20 11:25 - 2014-03-20 11:25 - 00034981 _____ () C:\ComboFix.txt
2014-03-20 11:25 - 2014-03-20 11:08 - 00000000 ____D () C:\Qoobox
2014-03-20 11:25 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-03-20 11:24 - 2014-03-20 11:08 - 00000000 ____D () C:\Windows\erdnt
2014-03-20 11:24 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-03-20 11:23 - 2012-05-07 19:18 - 00000000 ____D () C:\Users\Angelo
2014-03-20 11:15 - 2013-10-04 15:36 - 00000000 ____D () C:\Users\Test
2014-03-20 11:09 - 2014-03-20 11:09 - 00353280 _____ () C:\Windows\Minidump\032014-27877-01.dmp
2014-03-20 11:09 - 2013-12-25 13:45 - 898190659 _____ () C:\Windows\MEMORY.DMP
2014-03-20 11:09 - 2012-06-22 22:39 - 00000000 ____D () C:\Windows\Minidump
2014-03-20 11:08 - 2014-03-18 01:43 - 01998848 _____ () C:\Windows\SysWOW64\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯慤
2014-03-20 11:05 - 2014-03-20 11:05 - 05190052 ____R (Swearware) C:\Users\Angelo\Downloads\ComboFix.exe
2014-03-20 10:20 - 2013-10-17 15:47 - 00625248 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-03-20 10:20 - 2013-06-08 20:18 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-03-20 09:48 - 2014-03-20 09:47 - 00041025 _____ () C:\Users\Angelo\Desktop\Addition.txt
2014-03-20 09:45 - 2014-03-20 09:45 - 02157056 _____ (Farbar) C:\Users\Angelo\Desktop\FRST64.exe
2014-03-20 02:57 - 2014-03-20 02:57 - 01950720 _____ () C:\Users\Angelo\Downloads\adwcleaner.exe
2014-03-20 02:57 - 2014-03-20 02:57 - 00464381 _____ () C:\Users\Angelo\Downloads\SpyHunterKiller.exe
2014-03-20 02:52 - 2014-03-20 02:51 - 00000000 ____D () C:\sh4ldr
2014-03-20 02:51 - 2014-03-20 02:51 - 00002290 _____ () C:\Users\Angelo\Desktop\SpyHunter.lnk
2014-03-20 02:51 - 2014-03-20 02:51 - 00000000 ____D () C:\Users\Angelo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-03-20 02:51 - 2014-03-20 02:35 - 00000000 ____D () C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP
2014-03-20 02:49 - 2012-05-07 19:34 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-20 02:36 - 2014-03-20 02:36 - 00000000 ____D () C:\Program Files (x86)\Enigma Software Group
2014-03-20 02:36 - 2014-03-20 01:35 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-20 02:34 - 2014-03-20 02:19 - 45237249 _____ () C:\Users\Angelo\Desktop\SpyHunter v4.15.1.4270 Incl Crack - [MUMBAI].rar
2014-03-20 01:36 - 2014-03-20 01:36 - 00000000 _____ () C:\autoexec.bat
2014-03-20 01:35 - 2014-03-20 01:35 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-20 01:28 - 2014-03-20 01:28 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Angelo\Downloads\SpyHunter-Installer.exe
2014-03-18 06:42 - 2014-03-18 06:42 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\wStLib64.sys
2014-03-18 03:19 - 2012-05-23 21:45 - 00000000 ____D () C:\Users\Angelo\Bilder
2014-03-18 01:39 - 2013-08-29 11:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 01:36 - 2011-07-18 21:31 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-17 00:17 - 2014-03-17 00:13 - 00000000 ____D () C:\Users\Angelo\Desktop\auto bilder
2014-03-17 00:16 - 2014-03-17 00:15 - 00000000 ____D () C:\Users\Angelo\Desktop\kollegah event palast
2014-03-15 19:57 - 2013-03-13 10:52 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-14 03:19 - 2009-07-14 05:45 - 04895056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 03:18 - 2013-08-30 09:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 03:18 - 2013-08-29 10:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 13:50 - 2012-05-07 20:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 13:50 - 2012-05-07 20:29 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 13:50 - 2011-12-01 22:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-05 20:40 - 2012-05-07 19:36 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-05 20:40 - 2012-05-07 19:36 - 00000000 ____D () C:\ProgramData\Skype
2014-03-04 21:03 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-03-04 21:03 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-03-04 21:03 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-03-04 20:50 - 2014-03-04 20:51 - 00001128 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-03-04 20:50 - 2012-05-07 19:17 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-03-04 20:49 - 2014-03-04 20:49 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-03-04 20:44 - 2014-03-04 20:41 - 257813336 _____ () C:\Users\Angelo\Downloads\kis14.0.0.4651de-de.exe
2014-03-01 07:05 - 2014-03-13 07:38 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 07:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 07:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 07:38 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 07:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 07:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 07:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 07:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 07:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 07:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 07:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 07:38 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 07:38 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 07:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 07:38 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 07:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 07:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 07:38 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 07:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 07:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 07:38 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 07:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 07:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 07:38 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 07:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 07:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 07:38 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 07:38 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 07:38 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 07:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 07:38 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 07:38 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 07:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 07:38 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 07:38 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 07:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 07:38 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 07:38 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 07:38 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 07:38 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-26 03:02 - 2012-10-16 17:08 - 01595580 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-26 03:02 - 2011-05-16 15:04 - 00699884 _____ () C:\Windows\system32\perfh007.dat
2014-02-26 03:02 - 2011-05-16 15:04 - 00149766 _____ () C:\Windows\system32\perfc007.dat
2014-02-26 03:02 - 2009-07-14 06:13 - 01595580 _____ () C:\Windows\system32\PerfStringBackup.INI
Files to move or delete:
====================
C:\Users\Angelo\burns.exe
Some content of TEMP:
====================
C:\Users\Angelo\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-20 05:17
==================== End Of Log ============================
--- --- ---
--- --- ---
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
WARNUNG an die MITLESER: 
