Trojaner-Board - Mein Rechner ist sehr sehr langsam, woran kann es liegen und was kann man dagegen tun?

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Mein Rechner ist sehr sehr langsam, woran kann es liegen und was kann man dagegen tun? (https://www.trojaner-board.de/153562-rechner-sehr-sehr-langsam-woran-liegen-man-dagegen-tun.html)

Mein Rechner ist sehr sehr langsam, woran kann es liegen und was kann man dagegen tun?

Hallo zusammen,

wie schon oben erwähnt ist mein Laptop sehr langsam, ob ich Chrome aufmache oder Word-Dokument, dauert es sehr lange. Kann man den Laptop irgendwie bereinigen, vielleicht habe ich auch Viren drauf, die dafür zuständig sind...

Für weitere Fragen und Infos stehe ich gerne zur Verfügung!

Mit freundlichen Grüßen

Elias Kramer

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo, das habe ich schon gestern gemacht. Hier ist das Ergebnis:
FRST.txt:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:07-05-2014

Ran by ilja (administrator) on ILJA-PC on 07-05-2014 20:28:47

Running from C:\Users\ilja\Downloads

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

(Acer Inc.) C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

(Acer Inc.) C:\Acer\Empowering Technology\eNet\eNet Service.exe

(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

() C:\Acer\Mobility Center\MobilityService.exe

() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

(PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe

(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE

(Sophos Limited) C:\Program Files\Sophos\AutoUpdate\ALsvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(acer) C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe

(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

() C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe

(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe

(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe

() C:\Program Files\OpenVPN\bin\openvpn-gui.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac207\Monitor.exe

(FK2) C:\Windows\System32\svchospt.exe

(Realtek Semiconductor Corp.) C:\Users\ilja\AppData\Local\Temp\RtkBtMnt.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe

(Sophos Limited) C:\Program Files\Sophos\AutoUpdate\ALMon.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe

() C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

(Sun Microsystems, Inc.) C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

(Apple Inc.) D:\Ipod\iTunesHelper.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Nokia) C:\Program Files\NOKIA\Nokia PC Suite 7\PCSuite.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

() C:\VkontakteDJ\VKontakteDJ.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Logitech, Inc.) C:\Program Files\Maus\SetPoint\SetPoint.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Acer Inc.) C:\Acer\Empowering Technology\eNet\eNMTray.exe

(Acer Inc.) C:\Acer\Empowering Technology\ePower\ePower_DMC.exe

(Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe

(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRAgent.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

(-) C:\Windows\System32\svchosptd.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe

(Microsoft Corporation) C:\Windows\System32\wuauclt.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Sophos Limited) C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\ALUpdate.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-10-03] (Intel Corporation)

HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-07] (Synaptics, Inc.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4853760 2008-01-08] (Realtek Semiconductor)

HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [81920 2008-01-22] (Cyberlink Corp.)

HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [62760 2007-10-11] ()

HKLM\...\Run: [eDataSecurity Loader] => C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [521776 2008-01-03] (Egis Incorporated)

HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [858632 2008-01-08] (Dritek System Inc.)

HKLM\...\Run: [eRecoveryService] => [X]

HKLM\...\Run: [WarReg_PopUp] => C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe [303104 2008-01-29] (Acer Incorporated)

HKLM\...\Run: [openvpn-gui] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [99328 2005-08-18] ()

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)

HKLM\...\Run: [svchospt] => C:\Windows\system32\svchospt.exe [962560 2009-09-01] (FK2)

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2010-06-20] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [AppleSyncNotifier] => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.)

HKLM\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)

HKLM\...\Run: [Sophos AutoUpdate Monitor] => C:\Program Files\Sophos\AutoUpdate\almon.exe [900160 2012-10-06] (Sophos Limited)

HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)

HKLM\...\Run: [SSDMonitor] => C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe [103896 2011-10-25] (PC Tools)

HKLM\...\Run: [HTC Sync Loader] => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] ()

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe [132496 2007-07-12] (Sun Microsystems, Inc.)

HKLM\...\Run: [iTunesHelper] => D:\Ipod\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1

HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1

Code:

HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [PC Suite Tray] => C:\Program Files\NOKIA\Nokia PC Suite 7\PCSuite.exe [1451520 2009-11-11] (Nokia)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [MultiCalc] => C:\Program Files\MultiCalc-Taschenrechner\MultiCalc.exe WinStart

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [VkontakteDJ] => C:\VkontakteDJ\VKontakteDJ.exe [2771280 2011-11-24] ()

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [MobileDocuments] => C:\Program Files\Common Files\Apple\Internet Services\ubd.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [NTRedirect] => C:\Windows\system32\rundll32.exe  "C:\Users\ilja\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [Praetorian] => C:\Users\ilja\AppData\Local\Yandex\Updater\praetorian.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe [841096 2014-04-05] (Adobe Systems Incorporated)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {4ab25c20-1b0e-11de-bcc0-000000000000} - H:\setup.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {7eb802d1-b226-11e0-ab85-000000000000} - H:\LaunchU3.exe -a

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {aaef9465-781f-11de-be56-000000000000} - G:\setup.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {c5eca59a-94a3-11df-aba7-000000000000} - G:\AutoRun.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {c5eca5bc-94a3-11df-aba7-000000000000} - G:\AutoRun.exe

AppInit_DLLs: c:\progra~2\browse~1\261519~1.190\{c16c1~1\browse~1.dll => c:\progra~2\browse~1\261519~1.190\{c16c1~1\browse~1.dll File Not Found

AppInit_DLLs:  acaptuser32.dll => C:\Windows\system32\acaptuser32.dll [111992 2008-06-11] (Adobe Systems, Inc.)

AppInit_DLLs: ,C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL => C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll [221840 2012-12-08] (Sophos Limited)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk

ShortcutTarget: Empowering Technology Launcher.lnk -> C:\Acer\Empowering Technology\eAPLauncher.exe (Acer Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk

ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Maus\SetPoint\SetPoint.exe (Logitech, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=ie9hp

HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.msn.com/?pc=BB07

HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=240E001F3C568A54&affID=120692&tsp=4967

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.intl.acer.yahoo.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.intl.acer.yahoo.com

SearchScopes: HKCU - DefaultScope {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://yandex.ru/yandsearch?clid=143436&text={searchTerms}

SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

SearchScopes: HKCU - Moikrug URL = hxxp://moikrug.ru/persons/?clid=143436&charset=utf-8&keywords={searchTerms}&submitted=1

SearchScopes: HKCU - Yandex URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-acer

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=240E001F3C568A54&affID=120692&tsp=4967

SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://tbsearch.ask.com/redirect?client=ie&tb=UT2V5&o=15158&src=crm&q={searchTerms}&locale=de_DE

SearchScopes: HKCU - {4EE790E3-D710-4D30-B222-53E335756EC2} URL = hxxp://www.flickr.com/search/?q={searchTerms}

SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9} URL = hxxp://www.daemon-search.com/search/web?q={searchTerms}

SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://yandex.ru/yandsearch?clid=143436&text={searchTerms}

SearchScopes: HKCU - {EC41D154-2C04-4D31-AF37-86B28CB021C7} URL = hxxp://rover.ebay.com/rover/1/707-37276-23097-0/4?satitle={searchTerms}

BHO: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} -  No File

BHO: Mein Gutscheincode - {11111111-1111-1111-1111-110211941181} - C:\Program Files\Mein Gutscheincode\Mein Gutscheincode-bho.dll (Mein Gutscheincode GmbH)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.22.0\bh\delta.dll (Delta-search.com)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} -  No File

Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)

Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.22.0\deltaTlbr.dll (Delta-search.com)

Toolbar: HKLM - No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} -  No File

Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} -  No File

Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 21 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default

FF user.js: detected! => C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\user.js

FF NewTab: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=240E001F3C568A54&affID=120692&tsp=4967

FF DefaultSearchEngine: ICQ Search

FF SelectedSearchEngine: ICQ Search

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - D:\Ipod\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\11-suche.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\englische-ergebnisse.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\gmx-suche.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-10.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-11.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-12.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-13.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-14.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-15.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-16.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-17.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-18.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-19.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-2.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-20.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-21.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-22.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-23.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-24.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-25.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-26.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-27.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-3.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-4.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-5.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-6.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-7.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-8.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-9.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin.gif

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin.src

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\lastminute.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\searchplugins-backup

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\webde-suche.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: TubeSaver - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\126 [2013-08-07]

FF Extension: Mein Gutscheincode - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com [2014-04-07]

FF Extension: Delta Toolbar - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\ffxtlbr@delta.com [2013-08-07]

FF Extension: Microsoft .NET Framework Assistant - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-27]

FF Extension: Yahoo! Toolbar - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2014-04-05]

FF Extension: ICQ Toolbar - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-04-12]

FF Extension: WEB.DE MailCheck - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\toolbar@web.de.xpi [2012-02-03]

FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2014-04-05]

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-04-05]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ []

FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-02]

FF HKCU\...\Firefox\Extensions: [Tubesaver@istqt.co] - C:\Program Files\TubeSaver\126.xpi

FF Extension: TubeSaver - C:\Program Files\TubeSaver\126.xpi [2013-08-07]

Code:

Chrome: 

=======

CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=240E001F3C568A54&affID=120692&tsp=4967

CHR StartupUrls: "hxxp://www.google.de/"

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.220.4) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U22) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll No File

CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.116\pdf.dll ()

CHR Plugin: (DivX Player Netscape Plugin) - C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll No File

CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - D:\Ipod\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (YouTube) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-14]

CHR Extension: (Google-Suche) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-14]

CHR Extension: (Google Wallet) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-07]

CHR Extension: (Mehr Leistung und Videoformate für dein HTML5 <video>) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2011-12-14]

CHR Extension: (TubeSaver) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojcdnngpmbenohhjlickdajclhbcaada [2013-08-07]

CHR Extension: (Google Mail) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-14]

CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\ilja\AppData\Roaming\BabSolution\CR\Delta.crx [2013-08-07]

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]

CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

CHR HKLM\...\Chrome\Extension: [ojcdnngpmbenohhjlickdajclhbcaada] - C:\Program Files\TubeSaver\126.crx [2013-08-06]
 

========================== Services (Whitelisted) =================
 

R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [506416 2008-01-03] (Egis Incorporated)

R2 eLockService; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576 2007-10-01] (Acer Inc.)

R2 eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [131072 2007-12-20] (Acer Inc.)

R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [57344 2007-09-10] (Acer Inc.)

R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-12-19] ()

R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-11-27] ()

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [16384 2006-10-01] ()

R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()

R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [793048 2011-10-25] (PC Tools)

R2 SAVAdminService; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [216640 2012-12-08] (Sophos Limited)

R2 SAVService; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [139840 2012-10-06] (Sophos Limited)

R2 Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [232512 2012-10-06] (Sophos Limited)

R2 Sophos Web Control Service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [357400 2012-10-06] (Sophos Limited)

R2 swi_service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [2869824 2012-12-08] (Sophos Limited)

S2 swi_update; C:\ProgramData\Sophos\Web Intelligence\swi_update.exe [1459264 2012-12-08] (Sophos Limited)

R2 WMIService; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [167936 2007-09-20] (acer)
 

==================== Drivers (Whitelisted) ====================
 

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [483200 2011-04-26] (ITETech                  )

S3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [40720 2009-06-17] (Logitech, Inc.)

S3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [10384 2009-06-17] (Logitech, Inc.)

S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [507136 2006-12-05] (PixArt Imaging Inc.)

R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [123680 2012-10-06] (Sophos Limited)

S3 sdcfilter; C:\Windows\System32\DRIVERS\sdcfilter.sys [33696 2012-10-06] (Sophos Limited)

S3 SilverLink; C:\Windows\System32\Drivers\SilvrLnk.sys [21456 2004-01-28] (Texas Instruments Incorporated)

R1 SKMScan; C:\Windows\System32\DRIVERS\skmscan.sys [31736 2012-10-06] (Sophos Plc)

S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [22536 2011-10-20] (Sophos Plc)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2009-11-30] ()

R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] ()

S3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [26624 2006-10-01] (The OpenVPN Project)

S2 TICalc; C:\Windows\system32\Drivers\TICalc.sys [9152 2001-01-29] ()

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

U1 sysaseop; \??\C:\Windows\system32\drivers\sysaseop.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-07 20:34 - 2014-05-07 20:34 - 01316991 _____ () C:\Users\ilja\Downloads\adwcleaner (1).exe

2014-05-07 20:33 - 2014-05-07 20:33 - 01316991 _____ () C:\Users\ilja\Desktop\adwcleaner.exe

2014-05-07 20:29 - 2014-05-07 20:29 - 00994160 _____ () C:\Users\ilja\Downloads\setup (9).exe

2014-05-07 20:28 - 2014-05-07 20:33 - 00038739 _____ () C:\Users\ilja\Downloads\FRST.txt

2014-05-07 20:26 - 2014-05-07 20:28 - 00000000 ____D () C:\FRST

2014-05-07 20:25 - 2014-05-07 20:25 - 01053184 _____ (Farbar) C:\Users\ilja\Downloads\FRST.exe

2014-05-07 20:20 - 2014-05-07 20:21 - 02063872 _____ (Farbar) C:\Users\ilja\Downloads\FRST64.exe

2014-04-14 22:14 - 2014-04-14 22:14 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD

2014-04-11 06:31 - 2014-04-11 06:31 - 00005279 _____ () C:\Users\ilja\Downloads\AdwCleaner[S0].txt

2014-04-10 19:40 - 2014-04-10 19:41 - 00993720 _____ () C:\Users\ilja\Downloads\setup (8).exe

2014-04-10 19:34 - 2014-04-10 19:37 - 00993720 _____ () C:\Users\ilja\Downloads\setup (7).exe

2014-04-10 19:33 - 2014-04-10 19:34 - 00993720 _____ () C:\Users\ilja\Downloads\setup (6).exe

2014-04-10 11:42 - 2014-03-08 01:51 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-04-10 11:42 - 2014-03-08 01:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-10 11:42 - 2014-03-08 01:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-10 11:42 - 2014-03-08 01:03 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-10 11:42 - 2014-03-08 01:02 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-10 11:42 - 2014-03-08 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-10 11:42 - 2014-03-08 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-04-10 11:42 - 2014-03-08 00:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-10 11:42 - 2014-03-08 00:57 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-04-10 11:42 - 2014-03-08 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-10 11:42 - 2014-03-08 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-10 11:42 - 2014-03-08 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-10 11:42 - 2014-03-08 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-10 11:42 - 2014-03-08 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-04-10 11:42 - 2014-03-08 00:52 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-04-10 11:42 - 2014-03-08 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-10 09:27 - 2014-02-06 03:56 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
 

==================== One Month Modified Files and Folders =======
 

2014-05-07 20:34 - 2014-05-07 20:34 - 01316991 _____ () C:\Users\ilja\Downloads\adwcleaner (1).exe

2014-05-07 20:33 - 2014-05-07 20:33 - 01316991 _____ () C:\Users\ilja\Desktop\adwcleaner.exe

2014-05-07 20:33 - 2014-05-07 20:28 - 00038739 _____ () C:\Users\ilja\Downloads\FRST.txt

2014-05-07 20:29 - 2014-05-07 20:29 - 00994160 _____ () C:\Users\ilja\Downloads\setup (9).exe

2014-05-07 20:29 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-07 20:29 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-07 20:28 - 2014-05-07 20:26 - 00000000 ____D () C:\FRST

2014-05-07 20:25 - 2014-05-07 20:25 - 01053184 _____ (Farbar) C:\Users\ilja\Downloads\FRST.exe

2014-05-07 20:22 - 2011-10-21 00:10 - 00000000 ____D () C:\Users\ilja\AppData\Local\CrashDumps

2014-05-07 20:22 - 2009-03-26 23:30 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Skype

2014-05-07 20:21 - 2014-05-07 20:20 - 02063872 _____ (Farbar) C:\Users\ilja\Downloads\FRST64.exe

2014-05-07 19:56 - 2009-03-25 13:02 - 01101873 _____ () C:\Windows\WindowsUpdate.log

2014-05-07 19:55 - 2012-12-08 16:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-07 19:50 - 2010-12-23 21:33 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-07 12:50 - 2010-12-23 21:33 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-04-15 22:47 - 2013-08-07 22:57 - 00000346 _____ () C:\Windows\Tasks\TubeSaver Update.job

2014-04-14 23:37 - 2014-01-07 17:24 - 00001967 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-04-14 22:19 - 2006-11-02 12:33 - 01573724 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-04-14 22:16 - 2011-10-20 20:46 - 00000000 ____D () C:\Users\ilja\AppData\Local\Htc

2014-04-14 22:14 - 2014-04-14 22:14 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD

2014-04-14 22:12 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-04-14 22:11 - 2014-01-14 13:43 - 00145626 _____ () C:\Windows\PFRO.log

2014-04-11 14:07 - 2009-03-25 13:24 - 00000012 _____ () C:\Windows\bthservsdp.dat

2014-04-11 14:07 - 2006-11-02 15:01 - 00032586 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-04-11 06:31 - 2014-04-11 06:31 - 00005279 _____ () C:\Users\ilja\Downloads\AdwCleaner[S0].txt

2014-04-10 19:41 - 2014-04-10 19:40 - 00993720 _____ () C:\Users\ilja\Downloads\setup (8).exe

2014-04-10 19:37 - 2014-04-10 19:34 - 00993720 _____ () C:\Users\ilja\Downloads\setup (7).exe

2014-04-10 19:34 - 2014-04-10 19:33 - 00993720 _____ () C:\Users\ilja\Downloads\setup (6).exe

2014-04-10 16:09 - 2012-05-16 00:05 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2014-04-10 11:45 - 2008-03-27 22:27 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-04-10 11:38 - 2013-09-27 03:05 - 00000000 ____D () C:\Windows\system32\MRT

2014-04-10 11:27 - 2006-11-02 12:24 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2014-04-10 09:21 - 2011-12-11 15:38 - 00000000 ____D () C:\Users\ilja\Desktop\SS 12

2014-04-07 19:16 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
 

Some content of TEMP:

====================

C:\Users\ilja\AppData\Local\Temp\instruct.exe

C:\Users\ilja\AppData\Local\Temp\RtkBtMnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\system32\winlogon.exe => MD5 is legit

C:\Windows\system32\wininit.exe => MD5 is legit

C:\Windows\system32\svchost.exe => MD5 is legit

C:\Windows\system32\services.exe => MD5 is legit

C:\Windows\system32\User32.dll => MD5 is legit

C:\Windows\system32\userinit.exe => MD5 is legit

C:\Windows\system32\rpcss.dll => MD5 is legit

C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-04-14 22:26
 

==================== End Of Log ============================

--- --- ---

--- --- ---

hier ist Addition.txt:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:07-05-2014

Ran by ilja at 2014-05-07 20:39:42

Running from C:\Users\ilja\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Sophos Anti-Virus (Enabled - Up to date) {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Sophos Anti-Virus (Enabled - Up to date) {DE9A3984-B0E2-7A61-FD5D-409005EB0337}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)

ABBYY FineReader 6.0 Sprint (HKLM\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)

Acer eDataSecurity Management (HKLM\...\{A5633652-3795-4829-BB0B-644F0279E279}) (Version: 2.8.4354 - Egis Inc.)

Acer eLock Management (HKLM\...\{116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}) (Version: 2.5.4302 - Acer Inc.)

Acer Empowering Technology (HKLM\...\{AB6097D9-D722-4987-BD9E-A076E2848EE2}) (Version: 2.5.4301 - Acer Inc.)

Acer eNet Management (HKLM\...\{C06554A1-2C1E-4D20-B613-EE62C79927CC}) (Version: 2.6.4303 - Acer Inc.)

Acer ePower Management (HKLM\...\{58E5844B-7CE2-413D-83D1-99294BF6C74F}) (Version: 2.5.4309 - Acer Inc.)

Acer ePresentation Management (HKLM\...\{BF839132-BD43-4056-ACBF-4377F4A88E2A}) (Version: 2.5.4300 - Acer Inc.)

Acer eSettings Management (HKLM\...\{CE65A9A0-9686-45C6-9098-3C9543A412F0}) (Version: 2.5.4302 - Acer Inc.)

Acer GridVista (HKLM\...\GridVista) (Version: 2.72.317 - )

Acer Mobility Center Plug-In (HKLM\...\{11316260-6666-467B-AC34-183FCB5D4335}) (Version: 1.0.4301 - Acer Inc.)

Acer ScreenSaver (HKLM\...\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}) (Version: 2.11.20071207 - Acer Inc.)

Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)

Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden

Adobe Acrobat 9 Pro Extended - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-7761-000000000004}{AC76BA86-1033-F400-7761-000000000004}) (Version: 9.0.0 - Adobe Systems)

Adobe Acrobat 9 Pro Extended - English, Français, Deutsch (Version: 9.0.0 - Adobe Systems) Hidden

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)

Adobe AIR (Version: 3.2.0.2070 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated)

Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Adobe Reader 9.3.4 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A93000000001}) (Version: 9.3.4 - Adobe Systems Incorporated)

Alice-Installationsdateien entfernen (HKLM\...\Alice) (Version:  - )

Apple Application Support (HKLM\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Bing Bar (HKLM\...\{3D31D37A-864C-46EE-89AD-7F80E851372B}) (Version: 7.0.756.0 - Microsoft Corporation)

BlazeDTV 6.0 (HKLM\...\BlazeDTV 6.0_is1) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

Broadcom Gigabit Integrated Controller (HKLM\...\{FC57FC53-104C-415C-98D7-B05E659461A9}) (Version: 10.50.08 - Broadcom Corporation)

BrowserDefender (HKLM\...\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}) (Version:  - Bit89 Inc) <==== ATTENTION

Camera RAW Plug-In for EPSON Creativity Suite (HKLM\...\{42EDF895-158C-484E-A7F2-42B90759F281}) (Version: 2.3.0.0 - SEIKO EPSON CORPORATION)

CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)

CDDRV_Installer (Version: 4.60 - Logitech) Hidden

Delta Chrome Toolbar (HKLM\...\Delta Chrome Toolbar) (Version:  - Visual Tools) <==== ATTENTION

Delta toolbar   (HKLM\...\delta) (Version: 1.8.22.0 - Delta) <==== ATTENTION

DivX Converter (HKLM\...\{13F3917B56CD4C25848BDC69916971BB}) (Version: 7.1.0 - DivX, Inc.)

DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)

DivX Plus DirectShow Filters (HKLM\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)

DivX Version Checker (HKLM\...\{3FC7CBBC4C1E11DCA1A752EA55D89593}) (Version: 7.1.0.9 - DivX, Inc.)

DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.5 - DivX, LLC)

Documentation of lcc-win32 (HKLM\...\Documentation of lcc-win32_is1) (Version:  - )

EPSON Attach To Email (HKLM\...\InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}) (Version: 1.01.0000 - SEIKO EPSON)

EPSON Attach To Email (Version: 1.01.0000 - SEIKO EPSON) Hidden

EPSON Easy Photo Print (HKLM\...\{8A8F8391-4C2C-4BE1-A984-CD4A5A546467}) (Version: 1.5.1.0 - SEIKO EPSON CORPORATION)

EPSON File Manager (HKLM\...\{46CBBDF8-55B5-40DB-B459-7B848394309C}) (Version: 1.3.1.0 - )

EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - )

EPSON Scan Assistant (HKLM\...\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}) (Version: 1.10.00 - )

EPSON Stylus SX200_SX400_TX200_TX400 Handbuch (HKLM\...\EPSON Stylus SX200_SX400_TX200_TX400 Benutzerhandbuch) (Version:  - )

EPSON Stylus SX400 Series Printer Uninstall (HKLM\...\EPSON Stylus SX400 Series) (Version:  - SEIKO EPSON Corporation)

erLT (Version: 1.20.0137 - Logitech, Inc.) Hidden

Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.)

Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden

HDAUDIO Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118) (Version:  - )

HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)

HTC Driver Installer (HKLM\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.021 - HTC Corporation)

HTC Sync (HKLM\...\{AB77DFDE-9949-4AEF-B180-BE322C3E65D0}) (Version: 3.2.20 - HTC Corporation)

iCloud (HKLM\...\{79BD66B2-4DAE-4C3B-B08E-DC72E507C163}) (Version: 2.1.3.25 - Apple Inc.)

ICQ7.2 (HKLM\...\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}) (Version: 7.2 - ICQ)

Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - )

Intel(R) Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - )

iTunes (HKLM\...\{2F21564D-DE05-4C6D-B21E-08B9D313FAB3}) (Version: 11.1.5.5 - Apple Inc.)

Java 7 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.400 - Oracle)

Java(TM) 6 Update 2 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160020}) (Version: 1.6.0.20 - Sun Microsystems, Inc.)

Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden

Launch Manager (HKLM\...\LManager) (Version:  - )

lcc-win32 version 3.1 (Base system) (HKLM\...\lcc-win32 version 3.1 (Base system)_is1) (Version:  - )

LightScribe  1.4.142.1 (Version: 1.4.142.1 - hxxp://www.lightscribe.com) Hidden

Logitech SetPoint (HKLM\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.80 - Logitech)

Maxima 5.25.1 (HKLM\...\Maxima-5.25.1_is1) (Version: 5.25.1 - The Maxima Development Team)

Mein Gutscheincode (HKLM\...\Mein Gutscheincode) (Version: 1.27.153.0 - Mein Gutscheincode GmbH)

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook Connector (HKLM\...\{95120000-0122-0407-0000-0000000FF1CE}) (Version: 12.0.6423.1000 - Microsoft Corporation)

Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server Native Client (HKLM\...\{547DCEC7-DD2A-47E9-82C7-5CF1EAB526DA}) (Version: 9.00.2047.00 - Microsoft Corporation)

Microsoft SQL Server VSS Writer (HKLM\...\{2DFB5485-A3EF-4298-9280-4AF80C9F4BE9}) (Version: 9.00.2047.00 - Microsoft Corporation)

Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

MobileMe Control Panel (HKLM\...\{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}) (Version: 3.1.8.0 - Apple Inc.)

Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

MSVC80_x86 (Version: 1.0.1.0 - Nokia) Hidden

MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden

MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)

MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.4 - F.J. Wechselberger)

Nokia Connectivity Cable Driver (HKLM\...\{6869591A-7DD8-46D2-837F-57CBF7358955}) (Version: 7.1.22.0 - Nokia)

Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.40.1 - Nokia)

Nokia PC Suite (Version: 7.1.40.1 - Nokia) Hidden

Nokia Software Updater (HKLM\...\{4C911A61-39EA-41CC-AB3C-FE3BFFDB5F78}) (Version: 01.08.010.40008 - Nokia Corporation)

NTI Backup NOW! 4.7 (HKLM\...\InstallShield_{1598034D-7147-432C-8CA8-888E0632D124}) (Version: 1.00.0000 - NewTech Infosystems)

NTI Backup NOW! 4.7 (Version: 1.00.0000 - NewTech Infosystems) Hidden

NTI CD & DVD-Maker (HKLM\...\InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}) (Version: 7 - NewTech Infosystems)

NTI CD & DVD-Maker (Version: 7 - NewTech Infosystems) Hidden

NTI Shadow (HKLM\...\InstallShield_{6F7EA6CA-79F4-44A0-A370-8E82BB16534A}) (Version: 3.7.6.37 - NewTech Infosystems)

NTI Shadow (Version: 3.7.6.37 - NewTech Infosystems) Hidden

OpenVPN 2.0.9-gui-1.0.3-HE3.0 (HKLM\...\OpenVPN) (Version: 2.0.9-gui-1.0.3-HE3.0 - )

PartyPoker (HKLM\...\PartyPoker) (Version:  - PartyGaming)

PC Connectivity Solution (HKLM\...\{6E0352EE-6F0D-4FBC-B1B8-4FF032C78BE0}) (Version: 9.44.0.3 - Nokia)

PC Tools Registry Mechanic 11.0 (HKLM\...\Registry Mechanic_is1) (Version: 11.0 - PC Tools)

Poker 770 (HKLM\...\Poker 770) (Version:  - )

PokerStars (HKLM\...\PokerStars) (Version:  - PokerStars)

PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.32.3704d.0 - CyberLink Corporation)

Pro/ENGINEER Release Wildfire 4.0 Datecode M080 (HKLM\...\Pro/ENGINEER Release Wildfire 4.0 Datecode M080) (Version: Wildfire 4.0 - PTC)

PTC ProductView Express - Wildfire 4.0 (M080) (HKLM\...\{7D2D3D30-EDB3-4E86-BEE2-3E13A5C8A6BB}) (Version: 4.0.906.0 - PTC)

QuickTime (HKLM\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5543 - Realtek Semiconductor Corp.)

Safari (HKLM\...\{6D172D0A-B9F1-4046-AFAB-8599288545BF}) (Version: 5.34.55.3 - Apple Inc.)

SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )

Samsung Mobile phone USB driver Software (HKLM\...\Samsung Mobile phone USB driver) (Version:  - )

SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )

SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )

Samsung PC Studio 3 USB Driver Installer (HKLM\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.)

Schreibmaschinenkurs 3.5 Shareware (HKLM\...\{661E5E8A-C9AF-4815-8996-C2A809196864}) (Version: 3.5 - )

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.)

Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

Sophos Anti-Virus (HKLM\...\{9ACB414D-9347-40B6-A453-5EFB2DB59DFA}) (Version: 10.0.11 - Sophos Limited)

Sophos AutoUpdate (HKLM\...\{15C418EB-7675-42be-B2B3-281952DA014D}) (Version: 2.7.4.317 - Sophos Limited)

Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.0.15.0 - Synaptics)

TI Connect 1.6 (HKLM\...\{A8B94669-8654-4126-BD28-D0D2412CDED6}) (Version: 1.6.0 - Texas Instruments Incorporated)

TI-Black Link (HKLM\...\TI-Black Link) (Version:  - )

TI-Graph Link 92 Plus (HKLM\...\TI-Graph Link 92 Plus) (Version:  - )

TubeSaver (HKLM\...\Tubesaver@istqt.co) (Version:  - istqt Soft)

Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.2047.00 - Microsoft Corporation)

Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0 - DivX, Inc) Hidden

VkontakteDJ (HKLM\...\VkontakteDJ) (Version:  - )

VLC media player 1.1.8 (HKLM\...\VLC media player) (Version: 1.1.8 - VideoLAN)

Windows Live Call (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Communications Platform (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

Windows Live Essentials (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live Fotogalerie (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live ID-Anmelde-Assistent (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)

Windows Live Mail (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Messenger (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Movie Maker (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)

Windows Live Writer (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

Windows-Treiberpaket - Nokia Modem  (06/01/2009 7.01.0.4) (HKLM\...\8CDCFB95BB84DD9C0F88F22266A0CA86035E55BA) (Version: 06/01/2009 7.01.0.4 - Nokia)

Windows-Treiberpaket - Nokia Modem  (10/05/2009 4.2) (HKLM\...\05B59228C7E1C21DFBE89260F879BD95880548D8) (Version: 10/05/2009 4.2 - Nokia)

Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)

WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
 

==================== Restore Points  =========================
 

06-04-2014 01:02:08 Windows Update

06-04-2014 19:51:15 Windows Update

08-04-2014 01:01:10 Windows Update

10-04-2014 09:24:17 Windows Update

15-04-2014 14:57:02 Windows Update

24-04-2014 06:37:24 Windows Update

07-05-2014 15:27:25 Windows Update
 

==================== Hosts content: ==========================
 

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

::1             localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0876CC00-6BF0-42C3-9263-7139D19141DE} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert <==== ATTENTION

Task: {0E96E38B-C151-4F31-925D-CF9C6954BF93} - System32\Tasks\RMSmartUpdate => C:\Program Files\PC Tools Registry Mechanic\update.exe [2011-10-25] (PC Tools)

Task: {19184399-7677-45C4-A996-14B5B5AB0C9D} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - ilja => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)

Task: {1BA29F86-1E78-4609-9102-4BD1C6642898} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-12-23] (Google Inc.)

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {1D80F730-72CA-4ACB-9DEA-1408773CC160} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI

Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)

Task: {50BE2043-97EC-4E11-BD8F-61297DAC9686} - System32\Tasks\{27E5BB39-9AD6-4902-8BEC-1F16F2D69EB9} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.112.259/en/abandoninstall?page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered

Task: {65DCFC2D-32A7-44E2-AF4B-B477A7B525D9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-12-23] (Google Inc.)

Task: {778D59B8-2C65-4E05-AFD8-CADD6829FC1E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-05] (Adobe Systems Incorporated)

Task: {84490AA9-64AD-4971-AB96-84082798CB7A} - System32\Tasks\TubeSaver Update => C:\Program Files\TubeSaver\tbsUd.exe [2013-08-06] ()

Task: {8F6BB06E-51CF-4C31-8E64-938B9C7CB799} - System32\Tasks\{B1C50F9F-FA3F-4403-A8FC-F67E913BB928} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.112.259/en/abandoninstall?page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:offered-installed;madedefault

Task: {ACFB8D3C-520C-4934-A1D7-B6C214A5BF0C} - System32\Tasks\{9E302664-CCFF-4249-B5F3-376DFFD2D535} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.1.0.136/de/abandoninstall?source=lightinstaller&amp;page=tsMain&amp;installinfo=google-toolbar:offered-installed,google-chrome:offered-installed

Task: {B0B480CB-7E63-479E-996D-84FB606F2F2F} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)

Task: {B5786722-614A-4735-965F-F424D1A059ED} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] ()

Task: {DCEF2D01-7DEC-4C8F-B50B-D0D0C0288F4C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)

Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()

Task: {EE08DA89-E94B-46FC-B7A4-DB80FCFBA546} - System32\Tasks\EPUpdater => C:\Users\ilja\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] () <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\TubeSaver Update.job => C:\Program Files\TubeSaver\tbsUd.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2009-03-25 13:29 - 2007-11-27 19:54 - 00110592 _____ () C:\Acer\Mobility Center\MobilityService.exe

2009-03-25 13:29 - 2007-11-27 16:08 - 00032768 _____ () C:\Acer\Mobility Center\MobilityInterface.dll

2012-03-23 14:25 - 2012-03-23 14:25 - 00087040 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

2009-03-25 13:28 - 2007-02-13 07:26 - 00016384 _____ () C:\Acer\Empowering Technology\eRecovery\ServiceInterface.dll

2009-03-25 13:28 - 2007-02-13 07:26 - 00016384 _____ () C:\Acer\Empowering Technology\eRecovery\IERYETF.dll

2009-03-25 13:28 - 2007-12-19 19:09 - 00024576 _____ () C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

2009-03-25 13:28 - 2007-12-19 19:09 - 00118784 _____ () C:\Acer\Empowering Technology\eSettings\Service\eSettings.Model.Computer.dll

2009-03-25 13:28 - 2007-12-19 19:08 - 00032768 _____ () C:\Acer\Empowering Technology\eSettings\Service\eSettings.Model.ComputerInterfaces.dll

2009-03-25 13:28 - 2007-12-19 19:08 - 00118784 _____ () C:\Acer\Empowering Technology\eSettings\Service\eSettings.Model.Library.dll

2009-03-25 13:28 - 2007-12-19 19:09 - 00006656 _____ () C:\Acer\Empowering Technology\eSettings\Service\CPUID.dll

2009-03-25 13:24 - 2007-09-20 15:01 - 00208896 _____ () C:\Acer\Empowering Technology\EPOWER\SysHook.dll

2009-03-27 21:57 - 2008-09-16 21:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll

2008-01-03 03:00 - 2008-01-03 03:00 - 00227888 _____ () C:\Acer\Empowering Technology\eDataSecurity\x86\ShowErrMsg.dll

2009-03-25 21:53 - 2003-06-07 23:30 - 00057344 _____ () C:\Program Files\Launch Manager\PowerUtl.dll

2005-08-18 11:55 - 2005-08-18 11:55 - 00099328 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe

2006-10-01 15:37 - 2006-10-01 15:37 - 00947200 _____ () C:\Program Files\OpenVPN\bin\libeay32.dll

2005-11-27 22:06 - 2005-11-27 22:06 - 00360448 _____ () C:\Windows\system32\CoolXPLabel.ocx

2005-11-27 22:07 - 2005-11-27 22:07 - 00491520 _____ () C:\Windows\system32\CoolXPButton.ocx

2005-11-27 22:07 - 2005-11-27 22:07 - 00417792 _____ () C:\Windows\system32\CoolXPCombo.ocx

2011-07-29 01:08 - 2011-07-29 01:08 - 01259376 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe

2011-07-29 01:09 - 2011-07-29 01:09 - 00096112 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll

2012-04-17 15:05 - 2012-04-17 15:05 - 00651264 _____ () C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

2012-04-17 15:05 - 2012-04-17 15:05 - 00103936 _____ () C:\Program Files\HTC\HTC Sync 3.0\OutputLog.dll

2012-04-17 15:05 - 2012-04-17 15:05 - 00516599 _____ () C:\Program Files\HTC\HTC Sync 3.0\sqlite3.dll

2012-04-17 15:05 - 2012-04-17 15:05 - 00094208 _____ () C:\Program Files\HTC\HTC Sync 3.0\fdHttpd.dll

2012-04-17 15:05 - 2012-04-17 15:05 - 00389120 _____ () C:\Program Files\HTC\HTC Sync 3.0\HtcDetect.dll

2012-04-17 15:05 - 2012-04-17 15:05 - 00151552 _____ () C:\Program Files\HTC\HTC Sync 3.0\htcDisk.dll

2012-04-17 15:05 - 2012-04-17 15:05 - 00172032 _____ () C:\Program Files\HTC\HTC Sync 3.0\htcDetectLegend.dll

2012-04-17 15:05 - 2012-04-17 15:05 - 00559244 _____ () C:\Program Files\HTC\HTC Sync 3.0\sqlite3.7.dll

2012-04-17 15:05 - 2012-04-17 15:05 - 01515520 _____ () C:\Program Files\HTC\HTC Sync 3.0\Maps\R66Api.dll

2008-08-12 11:16 - 2008-08-12 11:16 - 02023424 _____ () C:\Program Files\NOKIA\Nokia PC Suite 7\QtCore4.dll

2008-07-29 14:01 - 2008-07-29 14:01 - 07331840 _____ () C:\Program Files\NOKIA\Nokia PC Suite 7\QtGui4.dll

2008-07-29 13:50 - 2008-07-29 13:50 - 00364544 _____ () C:\Program Files\NOKIA\Nokia PC Suite 7\QtXml4.dll

2008-07-29 14:47 - 2008-07-29 14:47 - 00135168 _____ () C:\Program Files\NOKIA\Nokia PC Suite 7\imageformats\qjpeg4.dll

2008-07-29 14:47 - 2008-07-29 14:47 - 00016384 _____ () C:\Program Files\NOKIA\Nokia PC Suite 7\imageformats\qsvg4.dll

2008-07-29 14:11 - 2008-07-29 14:11 - 00253952 _____ () C:\Program Files\NOKIA\Nokia PC Suite 7\QtSvg4.dll

2011-12-24 19:09 - 2011-11-24 11:31 - 02771280 _____ () C:\VkontakteDJ\VKontakteDJ.exe

2011-12-24 19:09 - 2011-09-01 14:38 - 00692224 _____ () C:\VkontakteDJ\libeay32.dll

2011-12-24 19:09 - 2011-09-01 14:38 - 00151552 _____ () C:\VkontakteDJ\ssleay32.dll

2013-09-27 11:11 - 2013-08-22 12:02 - 00187888 _____ () C:\Users\ilja\AppData\Roaming\BabSolution\Shared\enhancedNT.dll

2009-11-23 14:32 - 2009-07-20 13:27 - 00017936 _____ () C:\Program Files\Maus\SetPoint\khalwrapper.dll

2008-03-27 22:06 - 2008-01-09 19:43 - 00057344 _____ () C:\Acer\Empowering Technology\Acer.Empowering.Framework.DialogManager.dll

2008-03-27 21:45 - 2008-01-09 19:42 - 00024576 _____ () C:\Acer\Empowering Technology\Acer.Empowering.Framework.PasswordSetting.dll

2009-03-25 13:25 - 2007-09-11 10:59 - 00307200 _____ () C:\Acer\Empowering Technology\ePresentation\ePresentationCTL.dll

2009-03-25 13:25 - 2007-04-17 11:43 - 00077824 _____ () C:\Acer\Empowering Technology\ePresentation\de\ePresentationCTL.resources.dll

2009-03-25 13:27 - 2007-12-20 14:58 - 00679936 _____ () C:\Acer\Empowering Technology\eLock\eLockCTL.dll

2009-03-25 13:27 - 2007-12-20 14:58 - 00106496 _____ () C:\Acer\Empowering Technology\eLock\de\eLockCTL.resources.dll

2009-03-25 13:28 - 2007-12-19 19:09 - 00028672 _____ () C:\Acer\Empowering Technology\eSettings\eSettings.Plugin.dll

2009-03-25 13:28 - 2007-12-19 19:08 - 00032768 _____ () C:\Acer\Empowering Technology\eSettings.Model.ComputerInterfaces.dll

2009-03-25 13:28 - 2007-12-19 19:08 - 03420160 _____ () C:\Acer\Empowering Technology\eSettings\eSettings.View.dll

2009-03-25 13:28 - 2007-12-19 19:08 - 00155648 _____ () C:\Acer\Empowering Technology\eSettings\eSettings.Presenter.dll

2009-03-25 13:26 - 2007-12-20 12:33 - 00249856 _____ () C:\Acer\Empowering Technology\eNet\eNetPlugin.dll

2009-03-25 13:28 - 2007-12-19 19:09 - 00003584 _____ () C:\Acer\Empowering Technology\eSettings\de\eSettings.Plugin.resources.dll

2009-03-25 13:28 - 2007-12-19 19:08 - 00010752 _____ () C:\Acer\Empowering Technology\eSettings\de\eSettings.Presenter.resources.dll

2014-04-14 23:37 - 2014-04-02 03:57 - 00065352 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\chrome_elf.dll

2014-04-14 23:37 - 2014-04-02 03:57 - 04081480 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\pdf.dll

2014-04-14 23:37 - 2014-04-02 03:58 - 00390472 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll

2014-04-14 23:37 - 2014-04-02 03:57 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\ffmpegsumo.dll

2014-04-14 23:37 - 2014-04-02 03:58 - 13691720 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll

2012-05-16 01:26 - 2012-10-06 19:55 - 00752664 _____ () C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\LIBEAY32.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\Users\ilja\Downloads\Parascha.eml:OECustomProperty
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
 

==================== EXE Association (whitelisted) =============
 
 

==================== Disabled items from MSCONFIG ==============
 
 

==================== Faulty Device Manager Devices =============
 

Name: Microsoft-ISATAP-Adapter #3

Description: Microsoft-ISATAP-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: Broadcom NetLink (TM) Gigabit Ethernet

Description: Broadcom NetLink (TM) Gigabit Ethernet

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Broadcom

Service: b57nd60x

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Massenspeichercontroller

Description: Massenspeichercontroller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: TAP-Win32 Adapter V8

Description: TAP-Win32 Adapter V8

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: TAP-Win32 Provider

Service: tap0801

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/07/2014 08:21:39 PM) (Source: Application Error) (User: ) (EventID: 1000)

Description: Fehlerhafte Anwendung SynTPEnh.exe, Version 10.0.15.0, Zeitstempel 0x46e19971, fehlerhaftes Modul SynTPEnh.exe, Version 10.0.15.0, Zeitstempel 0x46e19971, Ausnahmecode 0xc0000409, Fehleroffset 0x000289dc,

Prozess-ID 0x1010, Anwendungsstartzeit SynTPEnh.exe0.
 

Error: (04/24/2014 02:07:14 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: m->NextScheduledSPRetry 9344
 

Error: (04/24/2014 02:07:14 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: m->NextScheduledEvent 9344
 

Error: (04/24/2014 02:07:14 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (04/24/2014 02:07:13 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: m->NextScheduledSPRetry 8346
 

Error: (04/24/2014 02:07:13 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: m->NextScheduledEvent 8346
 

Error: (04/24/2014 02:07:13 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (04/24/2014 02:07:12 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: m->NextScheduledSPRetry 7316
 

Error: (04/24/2014 02:07:12 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: m->NextScheduledEvent 7316
 

Error: (04/24/2014 02:07:12 PM) (Source: Bonjour Service) (User: ) (EventID: 100)

Description: Task Scheduling Error: Continuously busy for more than a second
 
 

System errors:

=============

Error: (06/20/2009 07:35:59 PM) (Source: Dhcp) (User: ) (EventID: 1002)

Description: Die IP-Adresslease 134.108.83.230 für die Netzwerkkarte mit der Netzwerkadresse 00FFC08CC59E wurde durch den DHCP-Server 134.108.87.121 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).
 

Error: (06/20/2009 06:17:54 PM) (Source: Service Control Manager) (User: ) (EventID: 7000)

Description: Parallel port driver%%1058
 

Error: (06/20/2009 06:17:48 PM) (Source: HTTP) (User: ) (EventID: 15016)

Description: \Device\Http\ReqQueueKerberos
 

Error: (06/20/2009 02:51:01 PM) (Source: Dhcp) (User: ) (EventID: 1002)

Description: Die IP-Adresslease 134.108.85.174 für die Netzwerkkarte mit der Netzwerkadresse 00FFC08CC59E wurde durch den DHCP-Server 134.108.83.229 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).
 

Error: (06/20/2009 02:45:59 PM) (Source: Dhcp) (User: ) (EventID: 1001)

Description: Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server für die Netzwerkkarte mit der Netzwerkadresse 001F3C568A54 zugeteilt werden. Der folgende Fehler ist aufgetreten: 

%%1223. Es wird weiterhin im Hintergrund versucht, eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen.
 

Error: (06/20/2009 02:45:57 PM) (Source: Dhcp) (User: ) (EventID: 1001)

Description: Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server für die Netzwerkkarte mit der Netzwerkadresse 001F3C568A54 zugeteilt werden. Der folgende Fehler ist aufgetreten: 

%%1223. Es wird weiterhin im Hintergrund versucht, eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen.
 

Error: (06/20/2009 09:40:12 AM) (Source: Dhcp) (User: ) (EventID: 1001)

Description: Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server für die Netzwerkkarte mit der Netzwerkadresse 001F3C568A54 zugeteilt werden. Der folgende Fehler ist aufgetreten: 

%%121. Es wird weiterhin im Hintergrund versucht, eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen.
 

Error: (06/20/2009 09:39:05 AM) (Source: Service Control Manager) (User: ) (EventID: 7000)

Description: Parallel port driver%%1058
 

Error: (06/20/2009 09:39:00 AM) (Source: HTTP) (User: ) (EventID: 15016)

Description: \Device\Http\ReqQueueKerberos
 

Error: (06/20/2009 09:37:48 AM) (Source: Service Control Manager) (User: ) (EventID: 7043)

Description: Windows Update
 
 

Microsoft Office Sessions:

=========================

Error: (01/17/2014 11:09:26 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 265 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/11/2011 03:36:08 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6565.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 8 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/10/2011 11:16:14 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 9 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (11/11/2011 03:51:29 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 55 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (11/09/2010 01:37:04 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (11/09/2010 01:36:36 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (11/09/2010 00:07:15 AM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (11/08/2010 11:53:46 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (06/22/2009 11:39:06 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (06/21/2009 09:37:44 PM) (Source: Microsoft Office 12 Sessions) (User: ) (EventID: 7001)

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 160 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-05-07 20:32:56.921

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-05-07 20:32:53.587

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-05-07 20:32:50.777

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-05-07 20:32:49.458

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-04-28 08:27:01.231

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-04-28 08:27:00.570

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-04-28 08:26:59.825

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-04-28 08:26:59.260

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2011-10-11 00:22:51.771

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2011-10-11 00:22:51.389

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\savonaccess.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 78%

Total physical RAM: 2037.68 MB

Available physical RAM: 428.18 MB

Total Pagefile: 4318.38 MB

Available Pagefile: 1730 MB

Total Virtual: 2047.88 MB

Available Virtual: 1895.89 MB
 

==================== Drives ================================
 

Drive c: (ACER) (Fixed) (Total:110.06 GB) (Free:33.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (DATA) (Fixed) (Total:110.06 GB) (Free:90.6 GB) NTFS

Drive e: (XPe) (Fixed) (Total:3 GB) (Free:2.85 GB) NTFS

Drive f: (Кавказ) (CDROM) (Total:0.65 GB) (Free:0 GB) UDF
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 233 GB) (Disk ID: 93C9BF8A)

Partition 1: (Not Active) - (Size=10 GB) - (Type=27)

Partition 2: (Active) - (Size=110 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=110 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=3 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Revo Uninstaller - Download - Filepony
Damit alles deinstallieren was Du in der Additional.txt findest mit dem Zusatz <== ATTENTION

Mit Revo auch Moderat die Reste entfernen lassen.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo Schrauber, war letzte Zeit krank. Fange aber gleich wieder an...

mfg russak777

Hallo,

hier sind weitere Dateien:

mbab:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Protection, 15.05.2014 17:34:47, SYSTEM, ILJA-PC, Protection, Malware Protection, Starting, 

Protection, 15.05.2014 17:34:47, SYSTEM, ILJA-PC, Protection, Malware Protection, Started, 

Protection, 15.05.2014 17:34:47, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Starting, 

Update, 15.05.2014 17:34:55, SYSTEM, ILJA-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1, 

Update, 15.05.2014 17:35:09, SYSTEM, ILJA-PC, Manual, Malware Database, 2014.3.4.9, 2014.5.15.6, 

Protection, 15.05.2014 17:35:15, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Started, 

Protection, 15.05.2014 17:35:27, SYSTEM, ILJA-PC, Protection, Refresh, Starting, 

Protection, 15.05.2014 17:35:27, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Stopping, 

Protection, 15.05.2014 17:35:28, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Stopped, 

Protection, 15.05.2014 17:35:42, SYSTEM, ILJA-PC, Protection, Refresh, Success, 

Protection, 15.05.2014 17:35:43, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Starting, 

Protection, 15.05.2014 17:35:46, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Started, 

Update, 15.05.2014 18:17:42, SYSTEM, ILJA-PC, Scheduler, Malware Database, 2014.5.15.6, 2014.5.15.7, 

Protection, 15.05.2014 18:17:44, SYSTEM, ILJA-PC, Protection, Refresh, Starting, 

Protection, 15.05.2014 18:17:44, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Stopping, 

Protection, 15.05.2014 18:17:44, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Stopped, 

Protection, 15.05.2014 18:19:13, SYSTEM, ILJA-PC, Protection, Refresh, Success, 

Protection, 15.05.2014 18:19:13, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Starting, 

Protection, 15.05.2014 18:19:19, SYSTEM, ILJA-PC, Protection, Malicious Website Protection, Started, 
 

(end)

AdwCleaner[S1]:

Code:

# AdwCleaner v3.208 - Bericht erstellt am 15/05/2014 um 19:04:54

# Aktualisiert 11/05/2014 von Xplode

# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

# Benutzername : ilja - ILJA-PC

# Gestartet von : C:\Users\ilja\Downloads\adwcleaner_3.208 (1).exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\bProtector_extensions.rdf

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\11-suche.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin.gif

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin.src

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-10.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-11.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-12.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-13.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-14.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-15.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-16.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-17.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-18.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-19.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-2.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-20.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-21.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-22.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-23.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-24.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-25.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-3.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-4.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-5.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-6.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-7.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-8.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-9.xml

Datei Gelöscht : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\user.js

Datei Gelöscht : C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage

Datei Gelöscht : C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage-journal

Datei Gelöscht : C:\Windows\System32\Tasks\BrowserDefendert
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [Tubesaver@istqt.co]

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ojcdnngpmbenohhjlickdajclhbcaada

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0876CC00-6BF0-42C3-9263-7139D19141DE}

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0876CC00-6BF0-42C3-9263-7139D19141DE}

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{84490AA9-64AD-4971-AB96-84082798CB7A}

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{84490AA9-64AD-4971-AB96-84082798CB7A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKCU\Software\592de8cbd35b840

Schlüssel Gelöscht : HKLM\SOFTWARE\592de8cbd35b840

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB9}

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Schlüssel Gelöscht : HKCU\Software\BabSolution

Schlüssel Gelöscht : HKCU\Software\Cr_Installer

Schlüssel Gelöscht : HKCU\Software\Grand Virtual

Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\TubeSaver

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\dt soft\daemon tools toolbar

Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mein Gutscheincode

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Tubesaver@istqt.co

Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\browse~1\261519~1.190\{c16c1~1\browse~1.dll

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
 

***** [ Browser ] *****
 

-\\ Internet Explorer v9.0.8112.16545
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
 

-\\ Mozilla Firefox v28.0 (de)
 

[ Datei : C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.internaldb.Resources_meta.value", "%7B%22css/icon_128.png%22%3A%7B%22id%22%3A155226%2C%22ver%22%3A[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.internaldb.Resources_resource_155237.value", "%22/*%21%20jQuery%20v1.8.2%20jquery.com%20%7C%20jque[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_13.name", "CrossriderAppUtils");

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_14.name", "CrossriderUtils");

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]

Zeile gelöscht : user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.plugins.plugin_78.name", "CrossriderInfo");

Zeile gelöscht : user_pref("extensions.enabledAddons", "ffxtlbr%40delta.com:1.5.0,%7B800b5000-a755-47e1-992b-48a1c1357f07%7D:2.0.1.6,126c9ec1-e913-410f-94df-6262dd70e044%4094392a4b-d7bd-4563-8bcd-ba96cf8055b2.com:0.94[...]

Zeile gelöscht : user_pref("icqtoolbar.allowSendURL", false);

Zeile gelöscht : user_pref("icqtoolbar.engineVerified", false);

Zeile gelöscht : user_pref("icqtoolbar.geolastmodified", 1399612352);

Zeile gelöscht : user_pref("icqtoolbar.hiddenElements", "itb_options");

Zeile gelöscht : user_pref("icqtoolbar.history", "N%20klasse%20f%C3%BChrerschein||%D0%9A%D1%83%D1%87%D0%B8%D0%BD%20%D0%98%D0%B2%D0%B0%D0%BD%20%D1%87%D0%B5%D0%BB%D0%BE%D0%B2%D0%B5%D0%BA%20%D0%B2%20%D1%82%D0%B5%D0%BB%D0[...]

Zeile gelöscht : user_pref("icqtoolbar.icqgeo", 49);

Zeile gelöscht : user_pref("icqtoolbar.installTime", "1334233214");

Zeile gelöscht : user_pref("icqtoolbar.installsource", "1");

Zeile gelöscht : user_pref("icqtoolbar.itbsitescount", 0);

Zeile gelöscht : user_pref("icqtoolbar.newtab_state", "1");

Zeile gelöscht : user_pref("icqtoolbar.numberOfSearches", 0);

Zeile gelöscht : user_pref("icqtoolbar.previousFFVersion", "28.0");

Zeile gelöscht : user_pref("icqtoolbar.removedsitescount", 28);

Zeile gelöscht : user_pref("icqtoolbar.skip_default_search", "no");

Zeile gelöscht : user_pref("icqtoolbar.suggestions", false);

Zeile gelöscht : user_pref("icqtoolbar.uniqueID", "127723581612772352691277320616925");

Zeile gelöscht : user_pref("icqtoolbar.usageStatstTimestamp", 1399612392);

Zeile gelöscht : user_pref("icqtoolbar.version", "2.0.1.6");

Zeile gelöscht : user_pref("icqtoolbar.voucherHideClicks", 0);

Zeile gelöscht : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);

Zeile gelöscht : user_pref("icqtoolbar.voucherRedeemClicks", 0);

Zeile gelöscht : user_pref("icqtoolbar.voucherWasShown", 0);

Zeile gelöscht : user_pref("icqtoolbar.xmlEnableSuggestions", false);

Zeile gelöscht : user_pref("icqtoolbar.xmlLanguage", "de");
 

-\\ Google Chrome v34.0.1847.131
 

[ Datei : C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=240E001F3C568A54&affID=120692&tsp=4967

Gelöscht [Homepage] : hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=240E001F3C568A54&affID=120692&tsp=4967

Gelöscht [Extension] : eooncjejnppfjjklapaamhcdmjbilmde
 

*************************
 

AdwCleaner[R0].txt - [46125 octets] - [07/05/2014 20:52:24]

AdwCleaner[R1].txt - [46125 octets] - [07/05/2014 21:22:16]

AdwCleaner[R2].txt - [46125 octets] - [07/05/2014 21:29:37]

AdwCleaner[R3].txt - [45741 octets] - [08/05/2014 09:15:55]

AdwCleaner[R4].txt - [46644 octets] - [08/05/2014 09:22:11]

AdwCleaner[R5].txt - [40115 octets] - [15/05/2014 17:00:34]

AdwCleaner[R6].txt - [15095 octets] - [15/05/2014 18:43:06]

AdwCleaner[R7].txt - [14246 octets] - [15/05/2014 19:02:48]

AdwCleaner[S0].txt - [1339 octets] - [15/05/2014 18:47:46]

AdwCleaner[S1].txt - [14122 octets] - [15/05/2014 19:04:54]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [14183 octets] ##########

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows Vista (TM) Home Premium x86

Ran by ilja on 15.05.2014 at 19:59:47,29

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Successfully deleted: [Folder] C:\Users\ilja\AppData\Roaming\mozilla\firefox\profiles\wjxcasbq.default\extensions\126

Emptied folder: C:\Users\ilja\AppData\Roaming\mozilla\firefox\profiles\wjxcasbq.default\minidumps [6 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 15.05.2014 at 20:16:01,25

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

neue FRST-Datei:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:15-05-2014

Ran by ilja (administrator) on ILJA-PC on 15-05-2014 21:52:46

Running from C:\Users\ilja\Downloads

Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

(Acer Inc.) C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

(Acer Inc.) C:\Acer\Empowering Technology\eNet\eNet Service.exe

(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

() C:\Acer\Mobility Center\MobilityService.exe

() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

(PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe

(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE

(Sophos Limited) C:\Program Files\Sophos\AutoUpdate\ALsvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(acer) C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe

(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

() C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe

(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe

(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

(Realtek Semiconductor Corp.) C:\Users\ilja\AppData\Local\Temp\RtkBtMnt.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe

() C:\Program Files\OpenVPN\bin\openvpn-gui.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac207\Monitor.exe

(FK2) C:\Windows\System32\svchospt.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe

(Sophos Limited) C:\Program Files\Sophos\AutoUpdate\ALMon.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe

() C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Sun Microsystems, Inc.) C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

(Apple Inc.) D:\Ipod\iTunesHelper.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Nokia) C:\Program Files\NOKIA\Nokia PC Suite 7\PCSuite.exe

() C:\VkontakteDJ\VKontakteDJ.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Logitech, Inc.) C:\Program Files\Maus\SetPoint\SetPoint.exe

(Acer Inc.) C:\Acer\Empowering Technology\eNet\eNMTray.exe

(Acer Inc.) C:\Acer\Empowering Technology\ePower\ePower_DMC.exe

(Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe

(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRAgent.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Farbar) C:\Users\ilja\Downloads\FRST (1).exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-10-03] (Intel Corporation)

HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-07] (Synaptics, Inc.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4853760 2008-01-08] (Realtek Semiconductor)

HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [81920 2008-01-22] (Cyberlink Corp.)

HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [62760 2007-10-11] ()

HKLM\...\Run: [eDataSecurity Loader] => C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [521776 2008-01-03] (Egis Incorporated)

HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [858632 2008-01-08] (Dritek System Inc.)

HKLM\...\Run: [eRecoveryService] => [X]

HKLM\...\Run: [WarReg_PopUp] => C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe [303104 2008-01-29] (Acer Incorporated)

HKLM\...\Run: [openvpn-gui] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [99328 2005-08-18] ()

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)

HKLM\...\Run: [svchospt] => C:\Windows\system32\svchospt.exe [962560 2009-09-01] (FK2)

HKLM\...\Run: [AppleSyncNotifier] => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.)

HKLM\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)

HKLM\...\Run: [Sophos AutoUpdate Monitor] => C:\Program Files\Sophos\AutoUpdate\almon.exe [900160 2012-10-06] (Sophos Limited)

HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)

HKLM\...\Run: [SSDMonitor] => C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe [103896 2011-10-25] (PC Tools)

HKLM\...\Run: [HTC Sync Loader] => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] ()

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe [132496 2007-07-12] (Sun Microsystems, Inc.)

HKLM\...\Run: [iTunesHelper] => D:\Ipod\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1

HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1

HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [PC Suite Tray] => C:\Program Files\NOKIA\Nokia PC Suite 7\PCSuite.exe [1451520 2009-11-11] (Nokia)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [MultiCalc] => C:\Program Files\MultiCalc-Taschenrechner\MultiCalc.exe WinStart

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [VkontakteDJ] => C:\VkontakteDJ\VKontakteDJ.exe [2771280 2011-11-24] ()

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [MobileDocuments] => C:\Program Files\Common Files\Apple\Internet Services\ubd.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [Praetorian] => C:\Users\ilja\AppData\Local\Yandex\Updater\praetorian.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {4ab25c20-1b0e-11de-bcc0-000000000000} - H:\setup.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {7eb802d1-b226-11e0-ab85-000000000000} - H:\LaunchU3.exe -a

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {aaef9465-781f-11de-be56-000000000000} - G:\setup.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {c5eca59a-94a3-11df-aba7-000000000000} - G:\AutoRun.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {c5eca5bc-94a3-11df-aba7-000000000000} - G:\AutoRun.exe

AppInit_DLLs: acaptuser32.dll => C:\Windows\system32\acaptuser32.dll [111992 2008-06-11] (Adobe Systems, Inc.)

AppInit_DLLs: ,C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL => C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll [221840 2012-12-08] (Sophos Limited)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk

ShortcutTarget: Empowering Technology Launcher.lnk -> C:\Acer\Empowering Technology\eAPLauncher.exe (Acer Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk

ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Maus\SetPoint\SetPoint.exe (Logitech, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=ie9hp

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.msn.com/?pc=BB07

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.intl.acer.yahoo.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.intl.acer.yahoo.com

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - Moikrug URL = hxxp://moikrug.ru/persons/?clid=143436&charset=utf-8&keywords={searchTerms}&submitted=1

SearchScopes: HKCU - Yandex URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-acer

SearchScopes: HKCU - {4EE790E3-D710-4D30-B222-53E335756EC2} URL = hxxp://www.flickr.com/search/?q={searchTerms}

SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://yandex.ru/yandsearch?clid=143436&text={searchTerms}

SearchScopes: HKCU - {EC41D154-2C04-4D31-AF37-86B28CB021C7} URL = hxxp://rover.ebay.com/rover/1/707-37276-23097-0/4?satitle={searchTerms}

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} -  No File

Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)

Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM - No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} -  No File

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 21 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Code:

FireFox:

========

FF ProfilePath: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default

FF Homepage: user_pref("browser.startup.homepage", );

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - D:\Ipod\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\englische-ergebnisse.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\gmx-suche.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-26.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-27.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\lastminute.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\searchplugins-backup

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\webde-suche.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Microsoft .NET Framework Assistant - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-27]

FF Extension: WEB.DE MailCheck - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\toolbar@web.de.xpi [2012-02-03]

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-04-05]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ []

FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-02]
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR StartupUrls: "hxxp://www.google.de/"

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.131\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.220.4) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U22) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll No File

CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.131\pdf.dll ()

CHR Plugin: (DivX Player Netscape Plugin) - C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll No File

CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - D:\Ipod\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (YouTube) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-14]

CHR Extension: (Google-Suche) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-14]

CHR Extension: (Google Wallet) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-07]

CHR Extension: (Mehr Leistung und Videoformate für dein HTML5 video>) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2011-12-14]

CHR Extension: (Google Mail) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-14]

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]

CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
 

========================== Services (Whitelisted) =================
 

R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [506416 2008-01-03] (Egis Incorporated)

R2 eLockService; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576 2007-10-01] (Acer Inc.)

R2 eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [131072 2007-12-20] (Acer Inc.)

R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [57344 2007-09-10] (Acer Inc.)

R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-12-19] ()

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)

R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-11-27] ()

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [16384 2006-10-01] ()

R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()

R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [793048 2011-10-25] (PC Tools)

R2 SAVAdminService; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [216640 2012-12-08] (Sophos Limited)

R2 SAVService; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [139840 2012-10-06] (Sophos Limited)

R2 Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [232512 2012-10-06] (Sophos Limited)

R2 Sophos Web Control Service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [357400 2012-10-06] (Sophos Limited)

R2 swi_service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [2869824 2012-12-08] (Sophos Limited)

S2 swi_update; C:\ProgramData\Sophos\Web Intelligence\swi_update.exe [1459264 2012-12-08] (Sophos Limited)

R2 WMIService; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [167936 2007-09-20] (acer)
 

==================== Drivers (Whitelisted) ====================
 

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [483200 2011-04-26] (ITETech                  )

S3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [40720 2009-06-17] (Logitech, Inc.)

S3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [10384 2009-06-17] (Logitech, Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-15] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)

S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [507136 2006-12-05] (PixArt Imaging Inc.)

R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [123680 2012-10-06] (Sophos Limited)

S3 sdcfilter; C:\Windows\System32\DRIVERS\sdcfilter.sys [33696 2012-10-06] (Sophos Limited)

S3 SilverLink; C:\Windows\System32\Drivers\SilvrLnk.sys [21456 2004-01-28] (Texas Instruments Incorporated)

R1 SKMScan; C:\Windows\System32\DRIVERS\skmscan.sys [31736 2012-10-06] (Sophos Plc)

S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [22536 2011-10-20] (Sophos Plc)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2009-11-30] ()

R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] ()

S3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [26624 2006-10-01] (The OpenVPN Project)

S2 TICalc; C:\Windows\system32\Drivers\TICalc.sys [9152 2001-01-29] ()

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

U1 sysaseop; \??\C:\Windows\system32\drivers\sysaseop.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-15 21:51 - 2014-05-15 21:52 - 01056768 _____ (Farbar) C:\Users\ilja\Downloads\FRST (1).exe

2014-05-15 21:45 - 2014-05-15 21:45 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD

2014-05-15 21:02 - 2014-05-15 21:02 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER

2014-05-15 20:55 - 2014-05-06 01:32 - 12347392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-15 20:55 - 2014-05-06 01:14 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-15 20:55 - 2014-05-06 01:14 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-15 20:16 - 2014-05-15 20:16 - 00000882 _____ () C:\Users\ilja\Desktop\JRT.txt

2014-05-15 19:58 - 2014-05-15 19:32 - 01016261 _____ (Thisisu) C:\Users\ilja\Desktop\JRT (1).exe

2014-05-15 19:33 - 2014-05-15 19:33 - 00000000 ____D () C:\Windows\ERUNT

2014-05-15 19:32 - 2014-05-15 19:32 - 01016261 _____ (Thisisu) C:\Users\ilja\Downloads\JRT (1).exe

2014-05-15 19:29 - 2014-05-15 19:29 - 00000000 ____D () C:\Users\ilja\Desktop\Reinigung

2014-05-15 18:39 - 2014-05-15 18:42 - 01325827 _____ () C:\Users\ilja\Downloads\adwcleaner_3.208 (1).exe

2014-05-15 18:35 - 2014-05-15 18:37 - 01325827 _____ () C:\Users\ilja\Downloads\adwcleaner_3.208.exe

2014-05-15 17:34 - 2014-05-15 21:51 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-05-15 17:33 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-05-15 17:33 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-05-15 17:33 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-05-15 17:31 - 2014-05-15 17:31 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\ilja\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-15 16:29 - 2014-03-25 15:26 - 11587584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-15 15:37 - 2014-05-15 15:37 - 00000000 ____D () C:\Program Files\VS Revo Group

2014-05-15 15:36 - 2014-05-15 15:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\ilja\Downloads\revosetup95.exe

2014-05-15 15:26 - 2014-05-15 15:26 - 210160215 _____ () C:\Windows\MEMORY.DMP

2014-05-15 15:26 - 2014-05-15 15:26 - 00143424 _____ () C:\Windows\Minidump\Mini051514-01.dmp

2014-05-08 09:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll

2014-05-08 06:43 - 2014-05-08 06:45 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk

2014-05-08 06:43 - 2014-05-08 06:45 - 00001891 _____ () C:\Users\Public\Desktop\Adobe Reader 9.lnk

2014-05-07 20:52 - 2014-05-15 19:09 - 00000000 ____D () C:\AdwCleaner

2014-05-07 20:39 - 2014-05-07 20:48 - 00047566 _____ () C:\Users\ilja\Downloads\Addition.txt

2014-05-07 20:37 - 2014-05-07 20:37 - 01016261 _____ (Thisisu) C:\Users\ilja\Downloads\JRT.exe

2014-05-07 20:34 - 2014-05-07 20:34 - 01316991 _____ () C:\Users\ilja\Downloads\adwcleaner (1).exe

2014-05-07 20:28 - 2014-05-15 21:52 - 00031917 _____ () C:\Users\ilja\Downloads\FRST.txt

2014-05-07 20:26 - 2014-05-15 21:52 - 00000000 ____D () C:\FRST

2014-05-07 20:25 - 2014-05-07 20:25 - 01053184 _____ (Farbar) C:\Users\ilja\Downloads\FRST.exe

2014-05-07 20:20 - 2014-05-07 20:21 - 02063872 _____ (Farbar) C:\Users\ilja\Downloads\FRST64.exe
 

==================== One Month Modified Files and Folders =======
 

2014-05-15 21:55 - 2012-12-08 16:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-15 21:54 - 2014-05-07 20:28 - 00031917 _____ () C:\Users\ilja\Downloads\FRST.txt

2014-05-15 21:52 - 2014-05-15 21:51 - 01056768 _____ (Farbar) C:\Users\ilja\Downloads\FRST (1).exe

2014-05-15 21:52 - 2014-05-07 20:26 - 00000000 ____D () C:\FRST

2014-05-15 21:51 - 2014-05-15 17:34 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-15 21:49 - 2006-11-02 12:33 - 01573724 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-15 21:47 - 2011-10-20 20:46 - 00000000 ____D () C:\Users\ilja\AppData\Local\Htc

2014-05-15 21:45 - 2014-05-15 21:45 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD

2014-05-15 21:44 - 2010-12-23 21:33 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-05-15 21:41 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-15 21:41 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-15 21:41 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-15 21:40 - 2014-01-14 13:43 - 00229694 _____ () C:\Windows\PFRO.log

2014-05-15 21:23 - 2009-03-25 13:24 - 00000012 _____ () C:\Windows\bthservsdp.dat

2014-05-15 21:23 - 2009-03-25 13:02 - 01337537 _____ () C:\Windows\WindowsUpdate.log

2014-05-15 21:23 - 2006-11-02 15:01 - 00032586 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-05-15 21:22 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET

2014-05-15 21:20 - 2008-03-27 22:27 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-15 21:12 - 2010-12-23 21:33 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-15 21:04 - 2013-09-27 03:05 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-15 21:04 - 2006-11-02 12:24 - 90547776 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2014-05-15 21:02 - 2014-05-15 21:02 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER

2014-05-15 20:16 - 2014-05-15 20:16 - 00000882 _____ () C:\Users\ilja\Desktop\JRT.txt

2014-05-15 19:33 - 2014-05-15 19:33 - 00000000 ____D () C:\Windows\ERUNT

2014-05-15 19:32 - 2014-05-15 19:58 - 01016261 _____ (Thisisu) C:\Users\ilja\Desktop\JRT (1).exe

2014-05-15 19:32 - 2014-05-15 19:32 - 01016261 _____ (Thisisu) C:\Users\ilja\Downloads\JRT (1).exe

2014-05-15 19:29 - 2014-05-15 19:29 - 00000000 ____D () C:\Users\ilja\Desktop\Reinigung

2014-05-15 19:09 - 2014-05-07 20:52 - 00000000 ____D () C:\AdwCleaner

2014-05-15 18:47 - 2010-06-23 21:16 - 00000000 ____D () C:\ProgramData\ICQ

2014-05-15 18:42 - 2014-05-15 18:39 - 01325827 _____ () C:\Users\ilja\Downloads\adwcleaner_3.208 (1).exe

2014-05-15 18:37 - 2014-05-15 18:35 - 01325827 _____ () C:\Users\ilja\Downloads\adwcleaner_3.208.exe

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-05-15 17:31 - 2014-05-15 17:31 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\ilja\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-15 15:56 - 2012-12-08 16:14 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-05-15 15:56 - 2011-12-03 00:42 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-05-15 15:37 - 2014-05-15 15:37 - 00000000 ____D () C:\Program Files\VS Revo Group

2014-05-15 15:37 - 2014-05-15 15:36 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\ilja\Downloads\revosetup95.exe

2014-05-15 15:26 - 2014-05-15 15:26 - 210160215 _____ () C:\Windows\MEMORY.DMP

2014-05-15 15:26 - 2014-05-15 15:26 - 00143424 _____ () C:\Windows\Minidump\Mini051514-01.dmp

2014-05-15 15:26 - 2009-06-27 09:20 - 00000000 ____D () C:\Windows\Minidump

2014-05-08 22:47 - 2012-04-04 13:10 - 00002631 _____ () C:\Users\ilja\Desktop\Microsoft Office Word 2007.lnk

2014-05-08 06:45 - 2014-05-08 06:43 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk

2014-05-08 06:45 - 2014-05-08 06:43 - 00001891 _____ () C:\Users\Public\Desktop\Adobe Reader 9.lnk

2014-05-08 06:39 - 2008-03-27 21:07 - 00000000 ____D () C:\ProgramData\Adobe

2014-05-07 22:08 - 2009-03-26 23:30 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Skype

2014-05-07 21:06 - 2014-01-07 17:24 - 00001967 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-05-07 20:48 - 2014-05-07 20:39 - 00047566 _____ () C:\Users\ilja\Downloads\Addition.txt

2014-05-07 20:37 - 2014-05-07 20:37 - 01016261 _____ (Thisisu) C:\Users\ilja\Downloads\JRT.exe

2014-05-07 20:34 - 2014-05-07 20:34 - 01316991 _____ () C:\Users\ilja\Downloads\adwcleaner (1).exe

2014-05-07 20:25 - 2014-05-07 20:25 - 01053184 _____ (Farbar) C:\Users\ilja\Downloads\FRST.exe

2014-05-07 20:22 - 2011-10-21 00:10 - 00000000 ____D () C:\Users\ilja\AppData\Local\CrashDumps

2014-05-07 20:21 - 2014-05-07 20:20 - 02063872 _____ (Farbar) C:\Users\ilja\Downloads\FRST64.exe

2014-05-06 01:32 - 2014-05-15 20:55 - 12347392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 01:14 - 2014-05-15 20:55 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 01:14 - 2014-05-15 20:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
 

Some content of TEMP:

====================

C:\Users\ilja\AppData\Local\Temp\Quarantine.exe

C:\Users\ilja\AppData\Local\Temp\RtkBtMnt.exe

C:\Users\ilja\AppData\Local\Temp\uninst1.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\system32\winlogon.exe => MD5 is legit

C:\Windows\system32\wininit.exe => MD5 is legit

C:\Windows\system32\svchost.exe => MD5 is legit

C:\Windows\system32\services.exe => MD5 is legit

C:\Windows\system32\User32.dll => MD5 is legit

C:\Windows\system32\userinit.exe => MD5 is legit

C:\Windows\system32\rpcss.dll => MD5 is legit

C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-15 21:51

Code:



==================== End Of Log ============================

--- --- ---

--- --- ---

Ich glaube jetzt ist alles da.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Hallo,
wenn ich ESET Online Scanner starte, Und bei "Computer-Prüfeinstellungen" auf "Erweiterte Einstellungen" klicke um "Auf eventuell unerwünschte Anwendungen prüfen" zu wählen, dann sitzt dort schon ein Hacken bei "Anti-Stealth-Technologie aktivieren". Soll ich disen Hacken behalten oder nicht?

mfg russak777

Habe den Hacken bei "Anti-Stealth-Technologie" weggemacht.

log:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=da52564a947a8943bd73015caa1ceda1

# engine=18288

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-05-16 04:40:51

# local_time=2014-05-16 06:40:51 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=5892 16776573 100 100 91193 237791179 0 0

# compatibility_mode=8450 16777213 100 98 19283 81128681 0 0

# scanned=341595

# found=3

# cleaned=0

# scan_time=17181

sh=42C580B0D4305E520EF3B3D02109688375065B6A ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\ilja\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\72dcf456-4e9a3a8e"

sh=68E799A4D6E543FE9972E5E1FA5781D480B5F754 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\ilja\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\3440aba-5e8cd4ae"

sh=88FFF8404FA61957915B3BF12C199F972A66AC51 ft=1 fh=6f3609c8abc38f65 vn="Variante von Win32/Webprefix.A Trojaner" ac=I fn="C:\Users\ilja\Downloads\video_components_update.exe"

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=da52564a947a8943bd73015caa1ceda1

# engine=18294

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=false

# utc_time=2014-05-17 03:46:38

# local_time=2014-05-17 05:46:38 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=5892 16776573 100 100 55067 237831126 0 0

# compatibility_mode=8450 16777213 100 98 27496 81168628 0 0

# scanned=471733

# found=3

# cleaned=0

# scan_time=22790

sh=42C580B0D4305E520EF3B3D02109688375065B6A ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\ilja\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\72dcf456-4e9a3a8e"

sh=68E799A4D6E543FE9972E5E1FA5781D480B5F754 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\ilja\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\3440aba-5e8cd4ae"

sh=88FFF8404FA61957915B3BF12C199F972A66AC51 ft=1 fh=6f3609c8abc38f65 vn="Variante von Win32/Webprefix.A Trojaner" ac=I fn="C:\Users\ilja\Downloads\video_components_update.exe"

checkup.txt:

Code:

 Results of screen317's Security Check version 0.99.82  

 Windows Vista Service Pack 2 x86 (UAC is enabled)  

 Internet Explorer 9  

 Internet Explorer 8  
 ``````````````Antivirus/Firewall Check:`````````````` 

Sophos Anti-Virus   

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 CCleaner     

 Java 7 Update 40  

 Java(TM) 6 Update 2  

 Java version out of Date! 

 Adobe Flash Player 10 Flash Player out of Date! 

 Adobe Flash Player         13.0.0.214  

 Adobe Reader 9 Adobe Reader out of Date! 

 Mozilla Firefox (28.0) 

 Google Chrome 34.0.1847.131  

 Google Chrome 34.0.1847.137  
 ````````Process Check: objlist.exe by Laurent````````  

 Windows Defender MSASCui.exe 

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbam.exe  

 Windows Defender MSASCui.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

frisches FRST:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:17-05-2014

Ran by ilja (administrator) on ILJA-PC on 17-05-2014 10:57:01

Running from C:\Users\ilja\Downloads

Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

(Acer Inc.) C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

(Acer Inc.) C:\Acer\Empowering Technology\eNet\eNet Service.exe

(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

() C:\Acer\Mobility Center\MobilityService.exe

() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

(PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe

(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE

(Sophos Limited) C:\Program Files\Sophos\AutoUpdate\ALsvc.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(acer) C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe

(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

() C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe

(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe

(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

(Realtek Semiconductor Corp.) C:\Users\ilja\AppData\Local\Temp\RtkBtMnt.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe

() C:\Program Files\OpenVPN\bin\openvpn-gui.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac207\Monitor.exe

(FK2) C:\Windows\System32\svchospt.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe

(Sophos Limited) C:\Program Files\Sophos\AutoUpdate\ALMon.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(PC Tools) C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe

() C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Sun Microsystems, Inc.) C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

(Apple Inc.) D:\Ipod\iTunesHelper.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Nokia) C:\Program Files\NOKIA\Nokia PC Suite 7\PCSuite.exe

() C:\VkontakteDJ\VKontakteDJ.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Logitech, Inc.) C:\Program Files\Maus\SetPoint\SetPoint.exe

(Acer Inc.) C:\Acer\Empowering Technology\eNet\eNMTray.exe

(Acer Inc.) C:\Acer\Empowering Technology\ePower\ePower_DMC.exe

(Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe

(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRAgent.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Farbar) C:\Users\ilja\Downloads\FRST (2).exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-10-03] (Intel Corporation)

HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-07] (Synaptics, Inc.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4853760 2008-01-08] (Realtek Semiconductor)

HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [81920 2008-01-22] (Cyberlink Corp.)

HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [62760 2007-10-11] ()

HKLM\...\Run: [eDataSecurity Loader] => C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [521776 2008-01-03] (Egis Incorporated)

HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [858632 2008-01-08] (Dritek System Inc.)

HKLM\...\Run: [eRecoveryService] => [X]

HKLM\...\Run: [WarReg_PopUp] => C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe [303104 2008-01-29] (Acer Incorporated)

HKLM\...\Run: [openvpn-gui] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [99328 2005-08-18] ()

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)

HKLM\...\Run: [svchospt] => C:\Windows\system32\svchospt.exe [962560 2009-09-01] (FK2)

HKLM\...\Run: [AppleSyncNotifier] => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.)

HKLM\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)

HKLM\...\Run: [Sophos AutoUpdate Monitor] => C:\Program Files\Sophos\AutoUpdate\almon.exe [900160 2012-10-06] (Sophos Limited)

HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)

HKLM\...\Run: [SSDMonitor] => C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe [103896 2011-10-25] (PC Tools)

HKLM\...\Run: [HTC Sync Loader] => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] ()

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe [132496 2007-07-12] (Sun Microsystems, Inc.)

HKLM\...\Run: [iTunesHelper] => D:\Ipod\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1

HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1

HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [PC Suite Tray] => C:\Program Files\NOKIA\Nokia PC Suite 7\PCSuite.exe [1451520 2009-11-11] (Nokia)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [MultiCalc] => C:\Program Files\MultiCalc-Taschenrechner\MultiCalc.exe WinStart

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [VkontakteDJ] => C:\VkontakteDJ\VKontakteDJ.exe [2771280 2011-11-24] ()

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [MobileDocuments] => C:\Program Files\Common Files\Apple\Internet Services\ubd.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [Praetorian] => C:\Users\ilja\AppData\Local\Yandex\Updater\praetorian.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {4ab25c20-1b0e-11de-bcc0-000000000000} - H:\setup.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {7eb802d1-b226-11e0-ab85-000000000000} - H:\LaunchU3.exe -a

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {aaef9465-781f-11de-be56-000000000000} - G:\setup.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {c5eca59a-94a3-11df-aba7-000000000000} - G:\AutoRun.exe

HKU\S-1-5-21-2905236926-120331663-3061100549-1003\...\MountPoints2: {c5eca5bc-94a3-11df-aba7-000000000000} - G:\AutoRun.exe

AppInit_DLLs: acaptuser32.dll => C:\Windows\system32\acaptuser32.dll [111992 2008-06-11] (Adobe Systems, Inc.)

AppInit_DLLs: ,C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL => C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll [221840 2012-12-08] (Sophos Limited)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk

ShortcutTarget: Empowering Technology Launcher.lnk -> C:\Acer\Empowering Technology\eAPLauncher.exe (Acer Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk

ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Maus\SetPoint\SetPoint.exe (Logitech, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=ie9hp

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.msn.com/?pc=BB07

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.intl.acer.yahoo.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.intl.acer.yahoo.com

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - Moikrug URL = hxxp://moikrug.ru/persons/?clid=143436&charset=utf-8&keywords={searchTerms}&submitted=1

SearchScopes: HKCU - Yandex URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-acer

SearchScopes: HKCU - {4EE790E3-D710-4D30-B222-53E335756EC2} URL = hxxp://www.flickr.com/search/?q={searchTerms}

SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://yandex.ru/yandsearch?clid=143436&text={searchTerms}

SearchScopes: HKCU - {EC41D154-2C04-4D31-AF37-86B28CB021C7} URL = hxxp://rover.ebay.com/rover/1/707-37276-23097-0/4?satitle={searchTerms}

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} -  No File

Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)

Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM - No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} -  No File

Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Winsock: Catalog9 21 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default

FF Homepage: user_pref("browser.startup.homepage", );

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - D:\Ipod\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\englische-ergebnisse.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\gmx-suche.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-26.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\icqplugin-27.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\lastminute.xml

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\searchplugins-backup

FF SearchPlugin: C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\searchplugins\webde-suche.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Microsoft .NET Framework Assistant - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-27]

FF Extension: WEB.DE MailCheck - C:\Users\ilja\AppData\Roaming\Mozilla\Firefox\Profiles\wjxcasbq.default\Extensions\toolbar@web.de.xpi [2012-02-03]

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-04-05]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

FF HKLM\...\Firefox\Extensions: [bkmrksync@nokia.com] - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\

FF Extension: PC Sync 2 Synchronisation Extension - C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ []

FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-02]
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR StartupUrls: "hxxp://www.google.de/"

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.131\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.220.4) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U22) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll No File

CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.131\pdf.dll ()

CHR Plugin: (DivX Player Netscape Plugin) - C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll No File

CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - D:\Ipod\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (YouTube) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-14]

CHR Extension: (Google-Suche) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-14]

CHR Extension: (Google Wallet) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-07]

CHR Extension: (Mehr Leistung und Videoformate für dein HTML5 video>) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2011-12-14]

CHR Extension: (Google Mail) - C:\Users\ilja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-14]

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]

CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
 

========================== Services (Whitelisted) =================
 

R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [506416 2008-01-03] (Egis Incorporated)

R2 eLockService; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576 2007-10-01] (Acer Inc.)

R2 eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [131072 2007-12-20] (Acer Inc.)

R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [57344 2007-09-10] (Acer Inc.)

R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-12-19] ()

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)

R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-11-27] ()

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [16384 2006-10-01] ()

R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()

R2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [793048 2011-10-25] (PC Tools)

R2 SAVAdminService; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [216640 2012-12-08] (Sophos Limited)

R2 SAVService; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [139840 2012-10-06] (Sophos Limited)

R2 Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [232512 2012-10-06] (Sophos Limited)

R2 Sophos Web Control Service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [357400 2012-10-06] (Sophos Limited)

R2 swi_service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [2869824 2012-12-08] (Sophos Limited)

S2 swi_update; C:\ProgramData\Sophos\Web Intelligence\swi_update.exe [1459264 2012-12-08] (Sophos Limited)

R2 WMIService; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [167936 2007-09-20] (acer)
 

==================== Drivers (Whitelisted) ====================
 

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [483200 2011-04-26] (ITETech                  )

S3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [40720 2009-06-17] (Logitech, Inc.)

S3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [10384 2009-06-17] (Logitech, Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-17] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)

S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [507136 2006-12-05] (PixArt Imaging Inc.)

R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [123680 2012-10-06] (Sophos Limited)

S3 sdcfilter; C:\Windows\System32\DRIVERS\sdcfilter.sys [33696 2012-10-06] (Sophos Limited)

S3 SilverLink; C:\Windows\System32\Drivers\SilvrLnk.sys [21456 2004-01-28] (Texas Instruments Incorporated)

R1 SKMScan; C:\Windows\System32\DRIVERS\skmscan.sys [31736 2012-10-06] (Sophos Plc)

S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [22536 2011-10-20] (Sophos Plc)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2009-11-30] ()

R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] ()

S3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [26624 2006-10-01] (The OpenVPN Project)

S2 TICalc; C:\Windows\system32\Drivers\TICalc.sys [9152 2001-01-29] ()

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

U1 sysaseop; \??\C:\Windows\system32\drivers\sysaseop.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-17 10:54 - 2014-05-17 10:55 - 01056768 _____ (Farbar) C:\Users\ilja\Downloads\FRST (2).exe

2014-05-17 10:42 - 2014-05-17 10:42 - 00855379 _____ () C:\Users\ilja\Downloads\SecurityCheck (1).exe

2014-05-15 21:51 - 2014-05-15 21:52 - 01056768 _____ (Farbar) C:\Users\ilja\Downloads\FRST (1).exe

2014-05-15 21:45 - 2014-05-15 21:45 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD

2014-05-15 21:02 - 2014-05-15 21:02 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER

2014-05-15 20:55 - 2014-05-06 01:32 - 12347392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-15 20:55 - 2014-05-06 01:14 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-15 20:55 - 2014-05-06 01:14 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-15 19:33 - 2014-05-15 19:33 - 00000000 ____D () C:\Windows\ERUNT

2014-05-15 19:32 - 2014-05-15 19:32 - 01016261 _____ (Thisisu) C:\Users\ilja\Downloads\JRT (1).exe

2014-05-15 19:29 - 2014-05-17 10:53 - 00000000 ____D () C:\Users\ilja\Desktop\Reinigung

2014-05-15 18:39 - 2014-05-15 18:42 - 01325827 _____ () C:\Users\ilja\Downloads\adwcleaner_3.208 (1).exe

2014-05-15 18:35 - 2014-05-15 18:37 - 01325827 _____ () C:\Users\ilja\Downloads\adwcleaner_3.208.exe

2014-05-15 17:34 - 2014-05-17 02:03 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-05-15 17:33 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-05-15 17:33 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-05-15 17:33 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-05-15 17:31 - 2014-05-15 17:31 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\ilja\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-15 16:29 - 2014-03-25 15:26 - 11587584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-15 15:37 - 2014-05-15 15:37 - 00000000 ____D () C:\Program Files\VS Revo Group

2014-05-15 15:36 - 2014-05-15 15:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\ilja\Downloads\revosetup95.exe

2014-05-15 15:26 - 2014-05-15 15:26 - 210160215 _____ () C:\Windows\MEMORY.DMP

2014-05-15 15:26 - 2014-05-15 15:26 - 00143424 _____ () C:\Windows\Minidump\Mini051514-01.dmp

2014-05-08 09:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll

2014-05-08 06:43 - 2014-05-08 06:45 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk

2014-05-08 06:43 - 2014-05-08 06:45 - 00001891 _____ () C:\Users\Public\Desktop\Adobe Reader 9.lnk

2014-05-07 20:52 - 2014-05-15 19:09 - 00000000 ____D () C:\AdwCleaner

2014-05-07 20:39 - 2014-05-07 20:48 - 00047566 _____ () C:\Users\ilja\Downloads\Addition.txt

2014-05-07 20:37 - 2014-05-07 20:37 - 01016261 _____ (Thisisu) C:\Users\ilja\Downloads\JRT.exe

2014-05-07 20:34 - 2014-05-07 20:34 - 01316991 _____ () C:\Users\ilja\Downloads\adwcleaner (1).exe

2014-05-07 20:28 - 2014-05-17 10:57 - 00032076 _____ () C:\Users\ilja\Downloads\FRST.txt

2014-05-07 20:26 - 2014-05-17 10:57 - 00000000 ____D () C:\FRST

2014-05-07 20:25 - 2014-05-07 20:25 - 01053184 _____ (Farbar) C:\Users\ilja\Downloads\FRST.exe

2014-05-07 20:20 - 2014-05-07 20:21 - 02063872 _____ (Farbar) C:\Users\ilja\Downloads\FRST64.exe
 

==================== One Month Modified Files and Folders =======
 

2014-05-17 10:59 - 2014-05-07 20:28 - 00032076 _____ () C:\Users\ilja\Downloads\FRST.txt

2014-05-17 10:57 - 2014-05-07 20:26 - 00000000 ____D () C:\FRST

2014-05-17 10:56 - 2010-12-23 21:33 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-17 10:55 - 2014-05-17 10:54 - 01056768 _____ (Farbar) C:\Users\ilja\Downloads\FRST (2).exe

2014-05-17 10:55 - 2012-12-08 16:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-17 10:53 - 2014-05-15 19:29 - 00000000 ____D () C:\Users\ilja\Desktop\Reinigung

2014-05-17 10:42 - 2014-05-17 10:42 - 00855379 _____ () C:\Users\ilja\Downloads\SecurityCheck (1).exe

2014-05-17 10:28 - 2009-03-25 13:02 - 01400293 _____ () C:\Windows\WindowsUpdate.log

2014-05-17 09:09 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-17 09:09 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-17 02:03 - 2014-05-15 17:34 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-16 21:56 - 2010-12-23 21:33 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-05-16 13:49 - 2014-01-07 17:24 - 00001967 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-05-16 13:14 - 2006-11-02 12:33 - 01573724 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-15 21:52 - 2014-05-15 21:51 - 01056768 _____ (Farbar) C:\Users\ilja\Downloads\FRST (1).exe

2014-05-15 21:47 - 2011-10-20 20:46 - 00000000 ____D () C:\Users\ilja\AppData\Local\Htc

2014-05-15 21:45 - 2014-05-15 21:45 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD

2014-05-15 21:41 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-15 21:40 - 2014-01-14 13:43 - 00229694 _____ () C:\Windows\PFRO.log

2014-05-15 21:23 - 2009-03-25 13:24 - 00000012 _____ () C:\Windows\bthservsdp.dat

2014-05-15 21:23 - 2006-11-02 15:01 - 00032586 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-05-15 21:22 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET

2014-05-15 21:20 - 2008-03-27 22:27 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-15 21:17 - 2013-09-27 03:05 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-15 21:04 - 2006-11-02 12:24 - 90547776 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2014-05-15 21:02 - 2014-05-15 21:02 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER

2014-05-15 19:33 - 2014-05-15 19:33 - 00000000 ____D () C:\Windows\ERUNT

2014-05-15 19:32 - 2014-05-15 19:32 - 01016261 _____ (Thisisu) C:\Users\ilja\Downloads\JRT (1).exe

2014-05-15 19:09 - 2014-05-07 20:52 - 00000000 ____D () C:\AdwCleaner

2014-05-15 18:47 - 2010-06-23 21:16 - 00000000 ____D () C:\ProgramData\ICQ

2014-05-15 18:42 - 2014-05-15 18:39 - 01325827 _____ () C:\Users\ilja\Downloads\adwcleaner_3.208 (1).exe

2014-05-15 18:37 - 2014-05-15 18:35 - 01325827 _____ () C:\Users\ilja\Downloads\adwcleaner_3.208.exe

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-15 17:33 - 2014-05-15 17:33 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-05-15 17:31 - 2014-05-15 17:31 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\ilja\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-15 15:56 - 2012-12-08 16:14 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-05-15 15:56 - 2011-12-03 00:42 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-05-15 15:37 - 2014-05-15 15:37 - 00000000 ____D () C:\Program Files\VS Revo Group

2014-05-15 15:37 - 2014-05-15 15:36 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\ilja\Downloads\revosetup95.exe

2014-05-15 15:26 - 2014-05-15 15:26 - 210160215 _____ () C:\Windows\MEMORY.DMP

2014-05-15 15:26 - 2014-05-15 15:26 - 00143424 _____ () C:\Windows\Minidump\Mini051514-01.dmp

2014-05-15 15:26 - 2009-06-27 09:20 - 00000000 ____D () C:\Windows\Minidump

2014-05-08 22:47 - 2012-04-04 13:10 - 00002631 _____ () C:\Users\ilja\Desktop\Microsoft Office Word 2007.lnk

2014-05-08 06:45 - 2014-05-08 06:43 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk

2014-05-08 06:45 - 2014-05-08 06:43 - 00001891 _____ () C:\Users\Public\Desktop\Adobe Reader 9.lnk

2014-05-08 06:39 - 2008-03-27 21:07 - 00000000 ____D () C:\ProgramData\Adobe

2014-05-07 22:08 - 2009-03-26 23:30 - 00000000 ____D () C:\Users\ilja\AppData\Roaming\Skype

2014-05-07 20:48 - 2014-05-07 20:39 - 00047566 _____ () C:\Users\ilja\Downloads\Addition.txt

2014-05-07 20:37 - 2014-05-07 20:37 - 01016261 _____ (Thisisu) C:\Users\ilja\Downloads\JRT.exe

2014-05-07 20:34 - 2014-05-07 20:34 - 01316991 _____ () C:\Users\ilja\Downloads\adwcleaner (1).exe

2014-05-07 20:25 - 2014-05-07 20:25 - 01053184 _____ (Farbar) C:\Users\ilja\Downloads\FRST.exe

2014-05-07 20:22 - 2011-10-21 00:10 - 00000000 ____D () C:\Users\ilja\AppData\Local\CrashDumps

2014-05-07 20:21 - 2014-05-07 20:20 - 02063872 _____ (Farbar) C:\Users\ilja\Downloads\FRST64.exe

2014-05-06 01:32 - 2014-05-15 20:55 - 12347392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 01:14 - 2014-05-15 20:55 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 01:14 - 2014-05-15 20:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
 

Some content of TEMP:

====================

C:\Users\ilja\AppData\Local\Temp\Quarantine.exe

C:\Users\ilja\AppData\Local\Temp\RtkBtMnt.exe

C:\Users\ilja\AppData\Local\Temp\uninst1.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\system32\winlogon.exe => MD5 is legit

C:\Windows\system32\wininit.exe => MD5 is legit

C:\Windows\system32\svchost.exe => MD5 is legit

C:\Windows\system32\services.exe => MD5 is legit

C:\Windows\system32\User32.dll => MD5 is legit

C:\Windows\system32\userinit.exe => MD5 is legit

C:\Windows\system32\rpcss.dll => MD5 is legit

C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-15 21:51
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Habe den Laptop jetzt ausgeschaltet und wieder eingeschaltet. Es hat 11 Minuten gedauert bis ich eine Webseite öffnen könnte.... Kann man in die Richtung auch was machen?

mfg russak777

Java, Flash und Aobe updaten.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKLM\...\Run: [svchospt] => C:\Windows\system32\svchospt.exe [962560 2009-09-01] (FK2)

C:\Windows\system32\svchospt.exe

HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1

HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Habe Windowas Update geöffnet, aber es gibt gerade keine Updates für diese Programme...

Fixlog:

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:17-05-2014

Ran by ilja at 2014-05-18 13:35:50 Run:1

Running from C:\Users\ilja\Desktop

Boot Mode: Normal
 

==============================================
 

Content of fixlist:

*****************

HKLM\...\Run: [svchospt] => C:\Windows\system32\svchospt.exe [962560 2009-09-01] (FK2) 

C:\Windows\system32\svchospt.exe 

HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1 

HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1

*****************
 

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\svchospt => Value deleted successfully.

C:\Windows\system32\svchospt.exe => Moved successfully.

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\AllowLegacyWebView => Value deleted successfully.

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\AllowUnhashedWebView => Value deleted successfully.
 

==== End of Fixlog ====

Zitat:

Habe Windowas Update geöffnet, aber es gibt gerade keine Updates für diese Programme...

Was haben die Programme mit Windows Update zu tun?

Nach dem ich die Nachricht gelesen habe, stellte ich mir die gleiche Frage:) Habe jetzt Java und Flash Player deinstalliert und neu installiert.

Aber ein andere Frage: Wenn ich Task-Manager aufmache und auf Leistung gehe, dann springt CPU-Auslastung immer hoch und runter. Bei meinem neuem Laptop ist es ja okay(höchstens von 1% auf 12% wenn ich nichts mache) aber an diesem Rechner springt es zwischen 10 und 50%. dabei ist nur ein Tab in Chrome offen und ich mache dort nichts. Kann man etwas machen, damit CPU-Auslastung nicht so "stark" beansprucht wird, wenn man nichts macht?

mfg russak777

ProcessExplorer als Ersatz für den Windows Taskmanager installieren

Lade Dir den Process Explorer als Ersatz für den Taskmanager herunter und installiere ihn, hier findest Du eine Anleitung. Das ist ein wesentlich leistungsfähigerer Ersatz für den Windows-Taskmanager. Im Menü unter "Options" kannst Du den ProcessExplorer dauerhaft als Ersatz für den Taskmanager einrichten (Replace Taskmanager). Das ist sehr empfehlenswert, weil der ProcessExplorer erheblich mehr Funktionen als der Taskmanager hat. Wenn Du diese Einstellung gemacht hast, öffnet sich mit der Tastenkombination STRG + ALT + Entf. nicht mehr der Taskmanager, sondern der ProcessExplorer. Das kann jederzeit durch Abhaken dieser Einstellung wieder rückgängig gemacht werden.

Was wir jetzt konkret brauchen: In jeder Zeile steht ein Prozess, ein paar der Zeilen sind keine richtigen Prozesse, sondern nur Pseudoprozesse für die Tätigkeit des Windos-Kernels. Im Menü View => Select Columns wird ein Dialog geöffnet, in dem Du auswählen kannst, welche Spalten mit Informationen zu den Prozessen angezeigt werden sollen. In dem gehe in das Register "Process Performance" und stelle sicher, dass dort "CPU Usage" angehakt ist, "CPU History" wäre ebenfalls sinnvoll. Unter "CPU Usage" wird der aktuelle Wert der Prozessorauslastung für jeden Prozess angezeigt (im Tabellentitel steht nur kurz "CPU"), "CPU History" blendet für jeden Prozess ein Diagramm ein, das eine Kurve mit der Prozessorauslastung für die letzte Zeit anzeigt.

Damit sollte es Dir möglich sein, zu identifizieren, welcher Prozess Deine CPU in Trab hält. Mache einen Doppelklick auf den Prozess. Du kannst von dem ganzen auch einen Screenshot machen und ihn als Anhang mit Deiner Antwort hochladen (auf "Erweitert" unter dem Textfeld klicken und über "Anhänge verwalten" auf Deinem Rechner suchen lassen und über "Hochladen" anhängen).

Guten Morgen Schrauber,

habe jetzt alles gemacht und im Anhang findest du 3 Word-Dokumente. So wie ich es sehe, sind es zwei Prozesse, die auf CPU die größte Auswirkung haben.

mfg russak777

Ich brauch die Grafik nicht, sondern einfach nur das hauptfenster von processexplorer, dann den Prozess markieren der viel zieht, dort auf das + Zeichen klicken, damit man den Unterprozess sieht. So erkenne ich leider gar nix.

Alles klar, passt es so jetzt?

mfg russak777

Deinstalliere mal alles von Sophos.

Das ist mein Antivirusprogramm. Was mache ich danach?

mfg russak777

jetzt ist die CPU-Auslastung zw. 7 und 18 %. Aber ohne Antivirus ist es doch gefährlich, oder?

Installier es jetzt nochmal neu, hatte warscheinlich nur nen Schluckauf.

hallo Leute,
ihr kennt euch hier in Vergleich zu mir richtig gut mit Rechnern aus. Kann mir bitte jemand helfen, mein Rechner ist sehr langsam :( selbst beim Tippen muss ich ewig warten bis die Buchstaben kommen :(
Vielen Dank im Voraus.
Gruß

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Additions Logfile:
[CODE]Additional
FRST Logfile:

Code:

scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015

Ran by Georgii at 2015-07-21 12:02:15

Running from C:\Users\Georgii\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-3968757505-1059699835-2356866766-500 - Administrator - Disabled)

Gast (S-1-5-21-3968757505-1059699835-2356866766-501 - Limited - Disabled)

Georgii (S-1-5-21-3968757505-1059699835-2356866766-1001 - Administrator - Enabled) => C:\Users\Georgii

HomeGroupUser$ (S-1-5-21-3968757505-1059699835-2356866766-1003 - Limited - Enabled)
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)

Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)

Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.00.3000 - Acer Incorporated)

Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)

Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)

CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)

Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)

Dropbox (HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Dropbox) (Version: 3.6.8 - Dropbox, Inc.)

ETDWare PS/2-X64 11.6.27.201_WHQL (HKLM\...\Elantech) (Version: 11.6.27.201 - ELAN Microelectronic Corp.)

Etymonix SoftReel (HKLM-x32\...\Etymonix SoftReel) (Version:  - )

FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)

Free YouTube Download version 3.2.60.713 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.60.713 - DVDVideoSoft Ltd.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

MyFreeCodec (HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\MyFreeCodec) (Version:  - )

Open Office 2013 Packages (HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Open Office 2013 Packages) (Version:  - ) <==== ATTENTION

Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)

Shopping Helper Smartbar (HKLM-x32\...\{96F1EBE2-6BF6-44E8-84AC-DB577BAD1DD5}) (Version: 11.49.63.16848 - ReSoft Ltd.) <==== ATTENTION

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)

Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)

TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.353 - TuneUp Software) Hidden

TV Wizard (HKLM-x32\...\TVWizard) (Version: 2.7.35 - Small Island Development) <==== ATTENTION

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

Web Bar 2.0.5574.22315 (HKLM\...\{0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1) (Version: 2.0.5574.22315 - Web Bar Media) <==== ATTENTION!

WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
 

==================== Custom CLSID (Whitelisted): ==========================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
 

==================== Restore Points =========================
 

05-07-2015 03:16:23 Geplanter Prüfpunkt

10-07-2015 15:18:00 Windows Update

12-07-2015 16:18:34 avast! antivirus system restore point

16-07-2015 15:16:19 Windows Update

20-07-2015 19:58:13 Windows Update
 

==================== Hosts content: ===============================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (Whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

Task: {00F43762-3BE7-4B17-90A4-BDDCCBF0FF7A} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-5_user => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-5.exe <==== ATTENTION

Task: {0E7BDD08-CB81-476F-9C22-589BC4FEA189} - \APSnotifierPP3 No Task File <==== ATTENTION

Task: {0FD918A5-6307-41B5-9317-67EB4734BDFF} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001UA => C:\Users\Georgii\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)

Task: {12EFB127-B6AC-41DB-B505-507F86A7213D} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-7 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-7.exe <==== ATTENTION

Task: {1EA8F2BE-88B3-4A15-9961-0244FE710749} - \APSnotifierPP2 No Task File <==== ATTENTION

Task: {23DD9E66-CC91-476C-ACD1-2CC3C65CF305} - \LaunchSignup No Task File <==== ATTENTION

Task: {24DC50DC-3B7D-4632-918A-89CE490F8665} - \Optimizer Pro Schedule No Task File <==== ATTENTION

Task: {2C6EB95D-06CC-4C6F-9323-704F2F824E40} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)

Task: {2D67D0A4-2854-4A05-A39E-B7A8B26F568C} - \APSnotifierPP1 No Task File <==== ATTENTION

Task: {2D89B63E-FD68-4C04-8CDC-C534C75FA8AA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-07-12] (Avast Software s.r.o.)

Task: {323E239A-BB86-4AB3-8D3C-6B37B0AEE39F} - \ALUAgent No Task File <==== ATTENTION

Task: {3404E5FB-C766-4DBD-9ED1-1A6303C0FDCC} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-5 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-5.exe <==== ATTENTION

Task: {39F8C479-CC76-4B00-8CB8-4A193C611E87} - \Launch Manager No Task File <==== ATTENTION

Task: {3C305F7D-2312-494E-AF61-1472BF2DBFB9} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-3 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-3.exe <==== ATTENTION

Task: {46A7A6EC-D9A7-4C61-9832-85A6C42D1DCF} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe

Task: {4C69BD98-BD4E-43DC-822C-FD00D14D5E63} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-07-03] (Microsoft Corporation)

Task: {4CA71155-728E-41E0-B523-32111BF473BB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-19] (Google Inc.)

Task: {5405E5C1-2D08-4354-AC5C-BC15D886B5FD} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001Core => C:\Users\Georgii\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)

Task: {73EF5D4C-0215-4431-905D-BB5C2B09D37F} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-11 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-11.exe <==== ATTENTION

Task: {791B4282-4D72-4D72-B21B-71974785A94D} - \AcerCloud No Task File <==== ATTENTION

Task: {7F7B0B66-3357-4FE3-B32C-199AD04400A6} - System32\Tasks\WebBarUpdateTask => C:\Program Files\WebBar\wbsvc.exe [2015-04-06] (Web Bar Media) <==== ATTENTION

Task: {864F00DF-C56A-4DE3-B8B2-DAF5802E9258} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-19] (Google Inc.)

Task: {89F36C11-277E-4949-B39D-3020DA4EC1E3} - \2457c43f-96a8-41ce-8e31-60a4d0f191f9-5 No Task File <==== ATTENTION

Task: {92334DDA-2094-4557-A5A5-69C3A6CEABF0} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-4 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-4.exe <==== ATTENTION

Task: {AA6D6AE8-9D5A-48DB-A020-7C751ED5B7FE} - \ALU No Task File <==== ATTENTION

Task: {B2CD3B4D-5841-4369-80E3-43E65C6A20D9} - \Quick Access No Task File <==== ATTENTION

Task: {BC14AFF9-72FF-41FD-BED2-A164733D3367} - \Power Management No Task File <==== ATTENTION

Task: {C32A8A0A-0B13-4CFD-999D-15E8A4B56A65} - System32\Tasks\WSE_Astromenda => C:\Users\Georgii\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: {C84B1DB9-396D-4BEE-94E3-955A97DA82AE} - \AllmyappsUpdateTask No Task File <==== ATTENTION

Task: {D143AC07-17F0-4AD6-AC5D-B9572FA32CD1} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-2 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-2.exe <==== ATTENTION

Task: {DAAC1ED1-0741-4EA9-8D17-733A381A245D} - \LaunchApp No Task File <==== ATTENTION

Task: {E1D28045-4085-4BA0-AD60-27A448559990} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-1 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\HQ Pro Video 1.6V28.11-codedownloader.exe <==== ATTENTION

Task: {E270B083-7CDB-4F4C-86AA-0C1285644589} - System32\Tasks\WebBarLaunchTask => C:\Program Files\WebBar\wbsvc.exe [2015-04-06] (Web Bar Media) <==== ATTENTION

Task: {E63EF40D-017F-4622-8EC0-E2FA77CD9FA0} - \Optimize Start Menu Cache Files-S-1-5-21-3968757505-1059699835-2356866766-500 No Task File <==== ATTENTION

Task: {EA2DD0A2-C50F-41F5-AB67-B535D05AD382} - \pricemeterdownloader No Task File <==== ATTENTION

Task: {F13AE673-2E31-4D01-9784-2A15D495B1C3} - System32\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-6 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-6.exe <==== ATTENTION

Task: {FFC9F600-E439-4C67-9E0D-520A92677A56} - System32\Tasks\a7774df2-7162-4b37-a238-8fb180a0d9b9 => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\a7774df2-7162-4b37-a238-8fb180a0d9b9.exe <==== ATTENTION
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\2457c43f-96a8-41ce-8e31-60a4d0f191f9-5.job => C:\Program Files (x86)\MediaPlayerplus\2457c43f-96a8-41ce-8e31-60a4d0f191f9-5.exeȾ/UcuUkKW /xDkDNs='MediaPlayerplus' /LstTf=54246 /lmOea='001359' /guJbCPeTJ='verticals-ads,intext,shopping,pops' /AhcLHiII='0' /PnhQjAYA=3BEE695DA735428B91DCA7ADE0688B85IE /nMPXg=9b1ce6126d31ca8cdee7f7ca80aa4c66 /HJZbfSZY=1_34_04_10 /iyObc=1398101585 /KEemr=http:/stats.clientdemocloud.com /XWOgJrQI=http:/errors.clientdemocloud.com /XlBCPpuKk=http:/ipgeoapi.com/ /rBXJlS=http:/update.clientdemocloud.com /WFRdx=2 /KHaYT=http:/logs.clientdemocloud.com /AeslT='http:/update.clientdemocloud.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION

Task: C:\Windows\Tasks\a7774df2-7162-4b37-a238-8fb180a0d9b9.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\a7774df2-7162-4b37-a238-8fb180a0d9b9.exeȥ/agentregpath='HQ Pro Video 1.6V28.11' /appid=65779 /srcid='001874' /subid='0' /zdata='0' /bic=3BEE695DA735428B91DCA7ADE0688B85IE /verifier=9b1ce6126d31ca8cdee7f7ca80aa4c66 /installerversion=1_35_11_26 /installationtime=1417208747 /statsdomain=http:/stats.newstaticclientstack.com /errorsdomain=http:/errors.newstaticclientstack.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http:/logs.newstaticclientstack.com <==== ATTENTION

Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-1.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\HQ Pro Video 1.6V28.11-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-11.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-11.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-2.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-2.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-3.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-3.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-4.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-4.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-5.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-5_user.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-6.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-7.job => C:\Program Files (x86)\HQ Pro Video 1.6V28.11\b55d5c0e-bd29-49f8-b0b7-a61871569172-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001Core.job => C:\Users\Georgii\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001UA.job => C:\Users\Georgii\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\WSE_Astromenda.job => 0x03060100C9F870BDBDE2BB4AB50A3FBDC152EB9946000E010000000044440000200000000014730F020007800013040020208021DF070700020015000B003700000044000000400043003A005C00550073006500720073005C00470065006F0072006700690069005C0041007000700044006100740061005C0052006F0061006D0069006E0067005C005700530045005F00410053007E0031005C005500500044004100540045007E0031005C005500500044004100540045007E0031002E00450058004500000007002F0043006800650063006B000000000012004D006100720067006F0073006300680061005C00470065006F00720067006900690000000000000008000000000000000000010030000000D7070800070000000000000000003700A00500003C0000000000000001000000010000000000000000000000
 

==================== Loaded Modules (Whitelisted) ==============
 

2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll

2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

2013-09-03 21:45 - 2013-09-03 21:45 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2015-06-01 19:28 - 2015-06-01 19:28 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2015-07-18 11:00 - 2015-03-04 11:31 - 00808960 _____ () C:\Program Files\WebBar\2.0.5574.22315\ISightSDK_x64.dll

2015-07-21 11:40 - 2015-07-21 11:40 - 00003072 _____ () C:\Users\Georgii\AppData\Local\Temp\isdkOxD5PLpU\ISightHost.exe

2015-07-21 11:40 - 2015-03-04 11:31 - 00808960 _____ () C:\Users\Georgii\AppData\Local\Temp\isdkOxD5PLpU\ISightSDK.DLL

2015-07-12 16:21 - 2015-07-12 16:21 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll

2015-07-12 16:21 - 2015-07-12 16:21 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll

2015-07-18 11:05 - 2015-07-18 11:05 - 02956800 _____ () C:\Program Files\AVAST Software\Avast\defs\15071700\algo.dll

2015-07-20 12:53 - 2015-07-20 12:53 - 02956800 _____ () C:\Program Files\AVAST Software\Avast\defs\15072000\algo.dll

2013-10-20 02:53 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 01007104 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 00024576 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 00216576 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 00261120 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 00019456 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 00337408 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll

2015-01-27 18:36 - 2015-07-12 19:22 - 00228352 _____ () C:\Program Files (x86)\Origin\mediaservice\wmfengine.dll

2015-07-21 11:39 - 2015-07-21 11:39 - 00043008 _____ () c:\users\georgii\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpn10yig.dll

2015-03-04 23:45 - 2015-03-19 09:15 - 00750080 _____ () C:\Users\Georgii\AppData\Roaming\Dropbox\bin\libGLESv2.dll

2015-03-04 23:45 - 2015-03-19 09:15 - 00047616 _____ () C:\Users\Georgii\AppData\Roaming\Dropbox\bin\libEGL.dll

2015-03-04 23:45 - 2015-03-19 09:15 - 00865280 _____ () C:\Users\Georgii\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll

2015-03-04 23:45 - 2015-03-19 09:15 - 00200704 _____ () C:\Users\Georgii\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll

2015-06-16 11:13 - 2015-03-19 09:15 - 00010240 _____ () C:\Users\Georgii\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll

2015-06-16 11:13 - 2015-03-19 09:15 - 00726016 _____ () C:\Users\Georgii\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll

2015-06-16 11:13 - 2015-03-19 09:15 - 00010240 _____ () C:\Users\Georgii\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll

2015-07-12 16:21 - 2015-07-12 16:21 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2013-10-20 03:21 - 2013-07-30 18:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll

2015-07-16 15:57 - 2015-07-13 23:55 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libglesv2.dll

2015-07-16 15:57 - 2015-07-13 23:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libegl.dll
 

==================== Alternate Data Streams (Whitelisted) =========
 

(If an entry is included in the fixlist, only the ADS will be removed.)
 

AlternateDataStreams: C:\ProgramData\Temp:373E1720
 

==================== Safe Mode (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
 

==================== EXE Association (Whitelisted) ===============
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, it will be removed from the registry.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg

DNS Servers: 31.168.224.106 - 5.135.12.52

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== FirewallRules (Whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{A81232C3-360A-41E0-B1BD-336695ED6F53}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe

FirewallRules: [{B0EA15AC-0B3F-4CC1-8B8A-AED50AEC491C}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe

FirewallRules: [{C355B43A-83DA-458C-91C0-4DEE561D5E5A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe

FirewallRules: [{EBFD35F3-58F4-43AB-8363-328E4CB9FECA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe

FirewallRules: [{3BC2AF59-F005-41C4-B18A-7730FCADC7A6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe

FirewallRules: [{388C98C3-B336-4132-99B8-4D5A80DCA78D}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe

FirewallRules: [{237A0D78-0D97-4261-B971-9AE100F94E06}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe

FirewallRules: [{D00116D6-17E9-4727-AA8A-6754E6E7E4BC}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe

FirewallRules: [{91A02123-CACE-4710-9D2F-A6C270AC6145}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe

FirewallRules: [{9B3854A3-B690-4A6C-8D45-570581C770AD}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe

FirewallRules: [{568C0A7B-4FE8-4F31-A205-4CDFF5B014E0}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe

FirewallRules: [{EA368DC2-86E0-4387-A7AC-C51CD044F48F}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe

FirewallRules: [{742AFC4C-D852-4C0F-922F-893352805204}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe

FirewallRules: [{BF9FE63C-5284-4B3B-9179-25A0CCF9E525}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe

FirewallRules: [{6AD24B85-C5E7-467C-B918-05AE05B9C179}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe

FirewallRules: [{65EC4349-4255-4A52-9402-D7372D7BE493}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe

FirewallRules: [{781D6248-2A34-419E-8DCF-76D7BCC7492B}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe

FirewallRules: [{15AB4E5B-B0D0-43CD-9FCD-BE7127FCB56B}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe

FirewallRules: [{93D150B7-7E25-4FE0-9C67-D99E3A2515D8}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe

FirewallRules: [{E7DCC9D2-1AF8-4633-8039-1E28E99F5569}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe

FirewallRules: [{E0887C42-1AEF-423C-8F23-13766071360A}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe

FirewallRules: [{1D358BAF-D456-4FAE-955A-A9B15367A12E}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{A718DAFF-2AA0-4617-AF11-DDF54DCE0004}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{6E7DB763-86AA-4246-A246-28DDD65C110A}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\Sdd.exe

FirewallRules: [{547A478A-BE44-4518-A89B-3874AB95C539}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\Sdd.exe

FirewallRules: [{01317D40-9D84-4A73-835E-777239376466}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\virtualdrive.exe

FirewallRules: [{3F8F9FCF-E9EF-4F1E-A4B9-C130C6A6E397}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\virtualdrive.exe

FirewallRules: [{F0AE1322-C4A4-4825-8996-8E0F47091FFC}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{AF701AC7-D124-42C7-AC82-8145972C1C77}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{42621261-CF6A-4C84-B2BA-0A6985D5F3C9}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe

FirewallRules: [{69742512-F944-475E-B8FA-24823C70382D}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe

FirewallRules: [{A9D18FBF-83D5-420B-A84C-5CF2C39A30F0}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe

FirewallRules: [{8B0AFA78-BFB7-4569-AC0B-323990001322}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe

FirewallRules: [{F595700C-D6A8-4699-A445-92F7BE668519}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe

FirewallRules: [{99F9371C-73DE-470A-B26B-5015E49E10B0}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe

FirewallRules: [{6638338B-EB8F-4CEF-8C22-C2AC67612CA6}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe

FirewallRules: [{3740A403-3B6B-46F7-A1F4-1309C2A9549F}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe

FirewallRules: [{278134A7-4753-4FEA-9E5D-30B6ECBE86D4}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{7590F329-47FD-4D71-A63E-3EF82C3C7EE9}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{26EA1F64-0A4F-4728-BDD3-62419A694917}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{FA6AA058-A377-46C3-935A-5B41E8601646}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{B56F0656-356C-4F2C-9082-2C5E00FE2323}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{20010152-8F6D-4EB4-8762-F4086AF2FD3A}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{ACA47AD9-AEC9-4853-B7E0-EA1558771EBF}] => (Allow) C:\Users\Georgii\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{8F9F4BA9-FBB0-4F73-A6C3-90D352FF0CE3}] => (Allow) C:\Users\Georgii\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{B8DE12EB-12D9-4614-AC39-5046614C32C9}C:\users\georgii\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\georgii\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{D4EA90B6-9715-4062-99D5-533AD2CC4205}C:\users\georgii\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\georgii\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [TCP Query User{72B6FF32-A0C1-40C7-AC82-BEFB165A13F7}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{13239438-9911-4E01-9B4A-2154203FB335}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [TCP Query User{99782FF7-1F3E-4356-B48F-337DAFA278C7}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{53C94F93-6966-4D2D-8B41-D8EFD7B0E275}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{83F046B5-9638-46CC-8E27-A7D01D62504D}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe

FirewallRules: [{5FFF3C5D-1436-4112-A6BE-D09EC8D79041}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe

FirewallRules: [{1F75CACE-8538-47BE-9DBA-9F187EA82F26}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe

FirewallRules: [{8BDD9A3E-762D-4B06-BCAC-5D9A64800A2D}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe

FirewallRules: [{F61E69B7-2AF5-4180-976D-39E13BE5E27D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/20/2015 07:58:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 
 

Details:

AddWin32ServiceFiles: Unable to back up image of service Update ClearThink since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (07/20/2015 07:58:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 
 

Details:

AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdatem) since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (07/20/2015 07:15:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Margoscha)

Description: Bei der Aktivierung der App „winstore_cw5n1h2txyewy!Windows.Store“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (07/20/2015 12:07:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Margoscha)

Description: Bei der Aktivierung der App „Microsoft.BingSports_8wekyb3d8bbwe!AppexSports“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (07/19/2015 08:29:27 PM) (Source: MsiInstaller) (EventID: 11921) (User: NT-AUTORITÄT)

Description: Product: Nero Update -- Error 1921.Service Nero Update (NAUpdate) could not be stopped.  Verify that you have sufficient privileges to stop system services.
 

Error: (07/19/2015 08:21:18 PM) (Source: MsiInstaller) (EventID: 11921) (User: NT-AUTORITÄT)

Description: Product: Nero Update -- Error 1921.Service Nero Update (NAUpdate) could not be stopped.  Verify that you have sufficient privileges to stop system services.
 

Error: (07/18/2015 02:19:02 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80070005
 

Error: (07/18/2015 11:04:01 AM) (Source: MsiInstaller) (EventID: 11719) (User: Margoscha)

Description: Produkt: TuneUp Utilities 2014 -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten.
 

Error: (07/18/2015 11:01:34 AM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4
 

Error: (07/18/2015 11:01:32 AM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4
 
 

System errors:

=============

Error: (07/20/2015 07:18:33 PM) (Source: DCOM) (EventID: 10010) (User: Margoscha)

Description: Windows.Store
 

Error: (07/20/2015 01:41:46 PM) (Source: DCOM) (EventID: 10010) (User: Margoscha)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (07/20/2015 01:41:15 PM) (Source: DCOM) (EventID: 10010) (User: Margoscha)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (07/20/2015 12:59:11 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252.
 

Error: (07/20/2015 12:53:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung vom Remoteendpunkt empfangen. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 20.
 

Error: (07/20/2015 12:08:24 PM) (Source: DCOM) (EventID: 10001) (User: Margoscha)

Description: "C:\Windows\System32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.131Windows.Networking.ContentPrefetcher.Internal.ContentPrefetcherTask.ClassId.1Nicht verfügbarNicht verfügbar
 

Error: (07/19/2015 08:14:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Update ClearThink" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (07/19/2015 08:14:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1243
 

Error: (07/17/2015 03:40:17 AM) (Source: DCOM) (EventID: 10010) (User: Margoscha)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (07/17/2015 03:39:47 AM) (Source: DCOM) (EventID: 10010) (User: Margoscha)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 
 

Microsoft Office:

=========================

Error: (07/20/2015 07:58:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service Update ClearThink since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.
 

Error: (07/20/2015 07:58:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdatem) since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.
 

Error: (07/20/2015 07:15:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Margoscha)

Description: winstore_cw5n1h2txyewy!Windows.Store-2144927142
 

Error: (07/20/2015 12:07:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Margoscha)

Description: Microsoft.BingSports_8wekyb3d8bbwe!AppexSports-2144927142
 

Error: (07/19/2015 08:29:27 PM) (Source: MsiInstaller) (EventID: 11921) (User: NT-AUTORITÄT)

Description: Product: Nero Update -- Error 1921.Service Nero Update (NAUpdate) could not be stopped.  Verify that you have sufficient privileges to stop system services.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/19/2015 08:21:18 PM) (Source: MsiInstaller) (EventID: 11921) (User: NT-AUTORITÄT)

Description: Product: Nero Update -- Error 1921.Service Nero Update (NAUpdate) could not be stopped.  Verify that you have sufficient privileges to stop system services.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/18/2015 02:19:02 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80070005
 

Error: (07/18/2015 11:04:01 AM) (Source: MsiInstaller) (EventID: 11719) (User: Margoscha)

Description: Produkt: TuneUp Utilities 2014 -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/18/2015 11:01:34 AM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4
 

Error: (07/18/2015 11:01:32 AM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz

Percentage of memory in use: 43%

Total physical RAM: 6026.27 MB

Available physical RAM: 3399.63 MB

Total Virtual: 9164.42 MB

Available Virtual: 6457.27 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:680.83 GB) (Free:584.62 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 698.6 GB) (Disk ID: 944BECE0)
 

Partition: GPT Partition Type.
 

==================== End of log ============================

--- --- ---

--- --- ---

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015

Ran by Georgii (administrator) on MARGOSCHA on 21-07-2015 12:00:19

Running from C:\Users\Georgii\Downloads

Loaded Profiles: Georgii (Available Profiles: Georgii)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe

(Dropbox, Inc.) C:\Users\Georgii\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Web Bar Media) C:\Program Files\WebBar\2.0.5574.22315\wb.exe

() C:\Users\Georgii\AppData\Local\Temp\isdkOxD5PLpU\ISightHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)

HKLM-x32\...\Run: [fst_de_22] => [X]

HKLM-x32\...\Run: [t4pc_en_3] => [X]

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-07-12] (Avast Software s.r.o.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Atheros Communications)

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53288576 2015-06-30] (Skype Technologies S.A.)

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632112 2015-07-12] (Electronic Arts)

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Run: [Dropbox Update] => C:\Users\Georgii\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)

Startup: C:\Users\Georgii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-12]

ShortcutTarget: Dropbox.lnk -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-12] (Avast Software s.r.o.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-26] (Dropbox, Inc.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_37_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBtC0B0EzzyD0FtB0FyBtN0D0Tzu0SzyzzyBtN1L2XzutAtFtBtFyCtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByE0AtByCyBtDzytG0FzytAzytG0C0D0DyCtGtAyCtCtAtGtCzytB0D0D0B0ByBzztC0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtB0C0F0FyD0AtAtG0EtCtC0BtGyEyEzztCtGzztC0C0BtGzztC0DtDzzzzzztCzyyEyCyD2Q&cr=628351036&ir=

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_37_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBtC0B0EzzyD0FtB0FyBtN0D0Tzu0SzyzzyBtN1L2XzutAtFtBtFyCtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByE0AtByCyBtDzytG0FzytAzytG0C0D0DyCtGtAyCtCtAtGtCzytB0D0D0B0ByBzztC0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtB0C0F0FyD0AtAtG0EtCtC0BtGyEyEzztCtGzztC0C0BtGzztC0DtDzzzzzztCzyyEyCyD2Q&cr=628351036&ir=

SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = 

SearchScopes: HKLM -> {A25AC313-DD19-4238-ACA2-401D6BEE4321} URL = 

SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}

SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna1tPBS7p-JQBlPIYjVhf3WBP9F1qJcKF5DMxql4NMxaEaWxqOXRIRjC7qhNBWllqpLuIWuWtFbKIRNL8v6ljY3JQcR5xcYigiiMPXc5TpHcllf33gHAUXjA7sh8CInOUg,,&q={searchTerms}

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?type=prc265&hspart=avast&hsimp=yhs-001&p={searchTerms}

SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna1tPBS7p-JQBlPIYjVhf3WBP9F1qJcKF5DMxql4NMxaEaWxqOXRIRjC7qhNBWllqpLuIWuWtFbKIRNL8v6ljY3JQcR5xcYigiiMPXc5TpHcllf33gHAUXjA7sh8CInOVw,,&q={searchTerms}

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_dsites_14_38_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBtC0B0EzzyD0FtB0FyBtN0D0Tzu0SzyzytDtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StByE0AtByCyBtDzytG0FzytAzytG0C0D0DyCtGtAyCtCtAtGtCzytB0D0D0B0ByBzztC0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtB0C0F0FyD0AtAtG0EtCtC0BtGyEyEzztCtGzztC0C0BtGzztC0DtDzzzzzztCzyyEyCyD2Q&cr=1102708822&ir=

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://Lasaoren.com/results.php?f=4&q={searchTerms}&a=lrn_dsites_14_38_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBtC0B0EzzyD0FtB0FyBtN0D0Tzu0SzyzytDtN1L2XzutAtFtBtFyEtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByE0AtByCyBtDzytG0FzytAzytG0C0D0DyCtGtAyCtCtAtGtCzytB0D0D0B0ByBzztC0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtB0C0F0FyD0AtAtG0EtCtC0BtGyEyEzztCtGzztC0C0BtGzztC0DtDzzzzzztCzyyEyCyD2Q&cr=979804696&ir=

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://www.mystart.com/results.php?gen=ms&pr=vmn&id=mystarttb&v=5_4&ent=ch_5127&q={searchTerms}

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} URL = hxxp://terra.im/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {8E634135-5FDC-4192-8D95-6125AAA50A17} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3322288&octid=EB_ORIGINAL_CTID&ISID=M786F78DC-B9B7-4E3B-981A-866C227AB312&SearchSource=58&CUI=&UM=6&UP=SPB5EAD95B-7904-4D9D-8784-63056FA64A10&q={searchTerms}&SSPV=

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?type=prc265&hspart=avast&hsimp=yhs-001&p={searchTerms}

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {A25AC313-DD19-4238-ACA2-401D6BEE4321} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_38_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBtC0B0EzzyD0FtB0FyBtN0D0Tzu0SzyzzzytN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByE0AtByCyBtDzytG0FzytAzytG0C0D0DyCtGtAyCtCtAtGtCzytB0D0D0B0ByBzztC0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtB0C0F0FyD0AtAtG0EtCtC0BtGyEyEzztCtGzztC0C0BtGzztC0DtDzzzzzztCzyyEyCyD2Q&cr=218498141&ir=

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {B2D004DC-5809-4497-ACCD-E4531E66FA12} URL = 

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

BHO: No Name -> {11111111-1111-1111-1111-110511421146} ->  No File

BHO: No Name -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} ->  No File

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-12] (Avast Software s.r.o.)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File

BHO-x32: No Name -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} ->  No File

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-12] (Avast Software s.r.o.)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

Toolbar: HKLM-x32 - No Name - {3004627E-F8E9-4E8B-909D-316753CBA923} -  No File

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{930D7CCD-9C61-45EA-AB5D-27DBBAE6643A}: [NameServer] 31.168.224.106,5.135.12.52

Tcpip\..\Interfaces\{930D7CCD-9C61-45EA-AB5D-27DBBAE6643A}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{B5C0F132-FDAA-4DB0-A56E-475213FE7CD3}: [NameServer] 31.168.224.106,5.135.12.52

Tcpip\..\Interfaces\{B5C0F132-FDAA-4DB0-A56E-475213FE7CD3}: [DhcpNameServer] 192.168.178.1

StartMenuInternet: IEXPLORE.EXE - iexplore.exe
 

FireFox:

========

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)

FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File

FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-07-12]

FF HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Firefox\Extensions: [speedtest4354@BestOffers] - C:\Users\Georgii\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers

FF Extension: Speed Test 127 - C:\Users\Georgii\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers [2014-01-16]

FF HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Firefox\Extensions: [freegames4357@BestOffers] - C:\Users\Georgii\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers

FF Extension: Free Games 111 - C:\Users\Georgii\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers [2014-01-16]
 

Chrome: 

=======

CHR Profile: C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-15]

CHR Extension: (Adblock Plus) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-14]

CHR Extension: (Avast SafePrice) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-07-19]

CHR Extension: (Avast Online Security) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-14]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]

CHR Extension: (Google Wallet) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-28]

CHR HKLM\...\Chrome\Extension: [ehjldlodmkdlooagebfnaghgmkfccipn] - https://clients2.google.com/service/update2/crx

CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ehjldlodmkdlooagebfnaghgmkfccipn] - https://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [dghncoeocefmhkhiphdgikkamjeglbfh] - C:\Program Files (x86)\mystarttb\chrome-newtab-search.crx [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [ehjldlodmkdlooagebfnaghgmkfccipn] - https://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-07-12]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-12]

CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-13]

CHR HKLM-x32\...\Chrome\Extension: [jljheddigenhleadfofeccneimcmlefp] - C:\Users\Georgii\AppData\Roaming\speedtest4354\speedtest4354.crx [2013-12-19]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [File not signed]

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-07-12] (Avast Software s.r.o.)

R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-07-12] (Avast Software)

S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2797312 2013-12-06] (Acer Incorporated)

S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)

S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2004488 2015-07-12] (Electronic Arts)

S3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate)

S3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate)

S2 wbsvc; C:\Program Files\WebBar\wbsvc.exe [37144 2015-04-06] (Web Bar Media)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-07-12] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-07-12] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-12] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-07-12] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-07-12] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-07-12] (Avast Software s.r.o.)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-07-12] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-07-12] ()

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)

S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)

S2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)

R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2013-11-04] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)

R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)

R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )

S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation)

R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-07-12] (Avast Software)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== One Month Created files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2015-07-21 12:00 - 2015-07-21 12:01 - 00028059 _____ C:\Users\Georgii\Downloads\FRST.txt

2015-07-21 11:59 - 2015-07-21 12:00 - 00000000 ____D C:\FRST

2015-07-21 11:59 - 2015-07-21 11:59 - 02135552 _____ (Farbar) C:\Users\Georgii\Downloads\FRST64.exe

2015-07-20 13:22 - 2015-07-21 11:58 - 00127899 _____ C:\Windows\WindowsUpdate.log

2015-07-20 12:50 - 2015-07-20 12:50 - 00001740 _____ C:\Users\Public\Desktop\Defraggler.lnk

2015-07-20 12:50 - 2015-07-20 12:50 - 00000000 ____D C:\Program Files\Defraggler

2015-07-20 12:49 - 2015-07-20 12:50 - 04532776 _____ (Piriform Ltd) C:\Users\Georgii\Downloads\dfsetup219.exe

2015-07-20 12:36 - 2015-07-20 12:36 - 00002796 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2015-07-20 12:36 - 2015-07-20 12:36 - 00000838 _____ C:\Users\Public\Desktop\CCleaner.lnk

2015-07-20 12:36 - 2015-07-20 12:36 - 00000000 ____D C:\Program Files\CCleaner

2015-07-20 12:35 - 2015-07-20 12:35 - 05329360 _____ (Piriform Ltd) C:\Users\Georgii\Downloads\ccsetup507_slim.exe

2015-07-20 12:33 - 2015-07-20 12:33 - 00359656 _____ (Microsoft Corporation) C:\Users\Georgii\Downloads\msicuu2.exe

2015-07-19 20:15 - 2015-07-13 23:10 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-07-19 20:15 - 2015-07-13 23:10 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-07-18 11:00 - 2015-07-18 11:01 - 00000000 ____D C:\Users\Georgii\AppData\Local\WebBar

2015-07-18 11:00 - 2015-07-18 11:00 - 00003784 _____ C:\Windows\System32\Tasks\WebBarUpdateTask

2015-07-18 11:00 - 2015-07-18 11:00 - 00003260 _____ C:\Windows\System32\Tasks\WebBarLaunchTask

2015-07-18 11:00 - 2015-07-18 11:00 - 00001460 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk

2015-07-18 11:00 - 2015-07-18 11:00 - 00001265 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\ProgramData\InstallSightSDK

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\Program Files\WebBar

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2015-07-18 10:59 - 2015-07-18 10:59 - 34950064 _____ (DVDVideoSoft Ltd. ) C:\Users\Georgii\Downloads\FreeYouTubeDownload3.2.60.713.exe

2015-07-18 10:59 - 2015-07-18 10:59 - 34950064 _____ (DVDVideoSoft Ltd. ) C:\Users\Georgii\Downloads\FreeYouTubeDownload3.2.60.713 (1).exe

2015-07-16 10:00 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2015-07-16 10:00 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-07-16 10:00 - 2015-06-29 17:07 - 01084928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-07-16 10:00 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-07-16 10:00 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-07-16 10:00 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-07-16 10:00 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-07-16 10:00 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-07-16 10:00 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-07-16 10:00 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2015-07-16 10:00 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-07-16 10:00 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

2015-07-16 10:00 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-07-16 10:00 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-07-16 10:00 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-07-16 10:00 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2015-07-16 10:00 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-07-16 10:00 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2015-07-16 10:00 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-07-16 10:00 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2015-07-16 10:00 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2015-07-16 10:00 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll

2015-07-16 10:00 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-07-16 10:00 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-07-16 10:00 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2015-07-16 10:00 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2015-07-16 10:00 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-07-16 10:00 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2015-07-16 10:00 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2015-07-16 10:00 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys

2015-07-16 10:00 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys

2015-07-16 10:00 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys

2015-07-16 10:00 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys

2015-07-16 10:00 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys

2015-07-16 10:00 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys

2015-07-16 09:59 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-07-16 09:59 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-07-16 09:59 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-07-16 09:59 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-07-16 09:59 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-07-16 09:59 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-07-16 09:59 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-07-16 09:59 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-07-16 09:59 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2015-07-16 09:59 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-07-16 09:59 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-07-16 09:59 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2015-07-16 09:59 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-07-16 09:59 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll

2015-07-16 09:59 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2015-07-16 09:59 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-07-16 09:58 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-07-16 09:58 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-07-16 09:58 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-07-16 09:58 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-07-16 09:58 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-07-16 09:58 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2015-07-16 09:58 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-07-16 09:58 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-07-16 09:58 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-07-16 09:58 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-07-16 09:58 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-07-16 09:58 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-07-16 09:58 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-07-16 09:58 - 2015-07-03 15:52 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-07-16 09:58 - 2015-07-03 15:52 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-07-16 09:58 - 2015-07-03 15:50 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-07-16 09:58 - 2015-07-03 15:50 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-07-16 09:58 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-07-16 09:58 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-07-16 09:58 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-07-16 09:58 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-07-16 09:58 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-07-16 09:56 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-07-16 09:56 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-07-16 09:55 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-07-16 09:55 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-07-16 09:55 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-07-16 09:55 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-07-16 09:55 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-07-16 09:55 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-07-14 22:09 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2015-07-14 22:09 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-07-14 22:08 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2015-07-14 22:08 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2015-07-14 22:08 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-07-14 22:08 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-07-14 22:08 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-07-14 22:08 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-07-14 22:08 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2015-07-14 22:08 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-07-14 22:08 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-07-14 22:08 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-07-14 22:08 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-07-14 22:08 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2015-07-14 22:08 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-07-14 22:08 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-07-14 22:08 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-07-14 22:08 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-07-14 22:08 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-07-14 22:08 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-07-14 22:08 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-07-14 22:08 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-07-14 22:08 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2015-07-14 22:08 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-07-14 22:08 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-07-14 22:08 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-07-14 22:08 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-07-14 22:08 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2015-07-14 22:08 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-07-14 22:08 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-07-14 22:08 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-07-14 22:08 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-07-14 22:08 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2015-07-14 22:08 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-07-14 22:08 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-07-14 22:08 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-07-14 22:08 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-07-14 22:08 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2015-07-14 22:08 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll

2015-07-14 22:08 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll

2015-07-14 22:08 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2015-07-14 22:08 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2015-07-14 22:08 - 2015-05-02 01:33 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml

2015-07-14 22:08 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls

2015-07-14 22:08 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\system32\locale.nls

2015-07-14 22:08 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2015-07-14 22:08 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2015-07-12 16:24 - 2015-07-12 16:24 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\AVAST Software

2015-07-12 16:22 - 2015-07-18 11:04 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2015-07-12 16:22 - 2015-07-12 16:22 - 00001942 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk

2015-07-12 16:22 - 2015-07-12 16:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software

2015-07-12 16:21 - 2015-07-12 16:22 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswsp.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe

2015-07-12 16:21 - 2015-07-12 16:21 - 00272248 _____ C:\Windows\system32\Drivers\aswVmm.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00065736 _____ C:\Windows\system32\Drivers\aswRvrt.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr

2015-07-12 16:21 - 2015-07-12 16:21 - 00029168 _____ C:\Windows\system32\Drivers\aswHwid.sys

2015-07-12 16:19 - 2015-07-12 16:19 - 00000000 ____D C:\Program Files\AVAST Software

2015-07-12 16:17 - 2015-07-12 16:17 - 05499960 _____ (Avast Software s.r.o.) C:\Users\Georgii\Downloads\avast_free_antivirus_setup_online.exe

2015-07-10 18:39 - 2015-07-10 18:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Etymonix SoftReel

2015-07-10 18:39 - 2015-07-10 18:39 - 00000000 ____D C:\Program Files (x86)\Etymonix

2015-07-10 18:39 - 1997-11-19 16:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe

2015-07-10 18:35 - 2015-07-10 18:35 - 01004536 _____ C:\Users\Georgii\Downloads\SoftReel_Setup.exe

2015-07-10 15:27 - 2015-07-10 15:27 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-06-26 17:22 - 2015-06-26 17:22 - 00000706 _____ C:\Users\Georgii\Downloads\Setup                         .website
 

==================== One Month Modified files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2015-07-21 12:00 - 2014-08-16 14:04 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\Skype

2015-07-21 12:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru

2015-07-21 11:56 - 2015-02-19 13:39 - 00001138 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-07-21 11:55 - 2014-09-16 11:15 - 00000320 _____ C:\Windows\Tasks\WSE_Astromenda.job

2015-07-21 11:39 - 2015-01-27 18:35 - 00000000 ____D C:\ProgramData\Origin

2015-07-21 11:39 - 2014-06-17 19:50 - 00000000 ___RD C:\Users\Georgii\Dropbox

2015-07-21 11:39 - 2014-03-30 15:57 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\Dropbox

2015-07-21 11:38 - 2015-02-19 13:39 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00005544 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-7.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00005544 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-6.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00005210 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-11.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00004184 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-4.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00003494 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-1.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00002472 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-5_user.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00002472 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-5.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00002136 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-2.job

2015-07-21 11:38 - 2014-11-28 23:06 - 00001498 _____ C:\Windows\Tasks\a7774df2-7162-4b37-a238-8fb180a0d9b9.job

2015-07-21 11:38 - 2014-11-28 23:05 - 00004520 _____ C:\Windows\Tasks\b55d5c0e-bd29-49f8-b0b7-a61871569172-3.job

2015-07-21 11:38 - 2014-04-21 19:33 - 00001538 _____ C:\Windows\Tasks\2457c43f-96a8-41ce-8e31-60a4d0f191f9-5.job

2015-07-21 09:26 - 2014-09-20 08:14 - 00003942 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F20CBB1C-9178-44A6-9CDD-4C6809BB27A5}

2015-07-20 20:23 - 2015-06-16 11:11 - 00001252 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001UA.job

2015-07-20 20:23 - 2015-06-16 11:11 - 00001200 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001Core.job

2015-07-20 19:58 - 2014-09-14 11:04 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3968757505-1059699835-2356866766-1001

2015-07-20 19:58 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp

2015-07-20 12:41 - 2013-12-29 22:50 - 00000000 ____D C:\Users\Georgii\AppData\Local\CrashDumps

2015-07-20 12:41 - 2013-09-05 16:55 - 00000000 ____D C:\Windows\Panther

2015-07-19 20:20 - 2013-10-20 12:14 - 00765582 _____ C:\Windows\system32\perfh007.dat

2015-07-19 20:20 - 2013-10-20 12:14 - 00159366 _____ C:\Windows\system32\perfc007.dat

2015-07-19 20:20 - 2013-09-05 16:05 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI

2015-07-19 20:18 - 2015-06-16 11:11 - 00004202 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001UA

2015-07-19 20:18 - 2015-06-16 11:11 - 00003822 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001Core

2015-07-19 20:14 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-07-19 20:14 - 2013-08-22 16:44 - 00414856 _____ C:\Windows\system32\FNTCACHE.DAT

2015-07-19 20:11 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI

2015-07-19 20:09 - 2015-04-04 22:09 - 00000000 ___SD C:\Windows\SysWOW64\GWX

2015-07-19 20:09 - 2015-04-04 22:09 - 00000000 ___SD C:\Windows\system32\GWX

2015-07-19 20:09 - 2014-12-18 12:48 - 00000000 ____D C:\Windows\system32\appraiser

2015-07-19 20:09 - 2014-07-09 22:11 - 00000000 ___SD C:\Windows\system32\CompatTel

2015-07-19 20:09 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData

2015-07-19 20:09 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore

2015-07-19 20:06 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness

2015-07-18 11:01 - 2014-07-05 13:23 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\DVDVideoSoft

2015-07-18 11:00 - 2015-05-19 11:57 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\RPEng

2015-07-16 15:57 - 2015-02-19 13:40 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-07-16 15:51 - 2015-02-19 13:39 - 00004110 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-07-16 15:51 - 2015-02-19 13:39 - 00003874 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-07-16 15:27 - 2013-12-29 23:42 - 00000000 ____D C:\Windows\system32\MRT

2015-07-16 15:07 - 2014-08-16 14:04 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-07-16 15:07 - 2014-08-16 14:03 - 00000000 ____D C:\ProgramData\Skype

2015-07-12 19:24 - 2015-01-27 18:35 - 00000000 ____D C:\Program Files (x86)\Origin

2015-07-12 16:43 - 2014-08-17 13:05 - 00230912 ___SH C:\Users\Georgii\Downloads\Thumbs.db

2015-07-05 12:08 - 2014-01-31 18:32 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-07-03 08:43 - 2013-12-29 23:42 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Files in the root of some directories =======
 

2014-04-21 19:34 - 2014-04-21 19:45 - 0000318 _____ () C:\Users\Georgii\AppData\Roaming\aps.uninstall.scan.results

2014-04-21 21:44 - 2014-11-11 21:55 - 0000103 _____ () C:\Users\Georgii\AppData\Roaming\WB.CFG

2015-02-18 14:33 - 2015-02-18 14:33 - 0000000 _____ () C:\Users\Georgii\AppData\Local\{1F5BB354-C0CA-413F-832C-BC2054E65F40}

2013-10-20 02:56 - 2013-10-20 02:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

Some files in TEMP:

====================

C:\Users\Georgii\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpn10yig.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-07-17 03:39
 

==================== End of log ============================

--- --- ---

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Open Office 2013 Packages

Shopping Helper Smartbar

TV Wizard

Web Bar 2.0.5574.22315
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Malwarebytes Anti-Malware
www.malwarebytes.org

Update, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Manual, Domain Database, 0.0.0.0, 2015.6.12.1,
Update, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Manual, Remediation Database, 2015.3.9.1, 2015.7.20.1,
Update, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Manual, IP Database, 0.0.0.0, 2015.6.12.1,
Update, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Manual, Rootkit Database, 2015.2.25.1, 2015.7.17.1,
Update, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Manual, Malware Database, 2015.3.9.5, 2015.7.22.2,
Protection, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Protection, Malware Protection, Starting,
Protection, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Protection, Malware Protection, Started,
Protection, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Starting,
Protection, 22.07.2015 12:08, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Started,
Update, 22.07.2015 12:09, SYSTEM, MARGOSCHA, Manual, program, 2.1.6.1022, 2.1.8.0,
Protection, 22.07.2015 12:11, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Stopping,
Protection, 22.07.2015 12:11, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Stopped,
Protection, 22.07.2015 12:11, SYSTEM, MARGOSCHA, Protection, Malware Protection, Stopping,
Protection, 22.07.2015 12:11, SYSTEM, MARGOSCHA, Protection, Malware Protection, Stopped,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Malware Protection, Starting,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Malware Protection, Started,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Starting,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Started,
Error, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Update, Bad md5 or size: akadomains, 11,
Error, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Update, Bad md5 or size: akaips, 11,
Update, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Manual, Remediation Database, 2015.5.13.1, 2015.7.20.1,
Update, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Manual, IP Database, 0.0.0.0, 2015.6.12.1,
Update, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Manual, Rootkit Database, 2015.6.2.1, 2015.7.17.1,
Update, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Manual, Domain Database, 0.0.0.0, 2015.6.12.1,
Update, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Manual, AKA IP Database, 0.0.0.0, 2015.7.15.1,
Update, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Manual, AKA Domain Database, 0.0.0.0, 2015.7.20.2,
Update, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Manual, Malware Database, 2015.6.3.3, 2015.7.22.2,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Refresh, Starting,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Stopping,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Stopped,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Refresh, Success,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Starting,
Protection, 22.07.2015 12:12, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Started,
Scan, 22.07.2015 12:50, SYSTEM, MARGOSCHA, Manual, Start: 22.07.2015 12:13, Dauer: 33 Min. 15 Sek., Bedrohungssuchlauf, Abgeschlossen, 10 Malware-Erkennung, 669 Nicht-Malware-Erkennungen,
Protection, 22.07.2015 12:53, SYSTEM, MARGOSCHA, Protection, Malware Protection, Starting,
Protection, 22.07.2015 12:53, SYSTEM, MARGOSCHA, Protection, Malware Protection, Started,
Protection, 22.07.2015 12:53, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Starting,
Protection, 22.07.2015 12:53, SYSTEM, MARGOSCHA, Protection, Malicious Website Protection, Started,

(end)

AdwCleaner Logfile:

Code:

# AdwCleaner v4.208 - Bericht erstellt 22/07/2015 um 13:08:45

# Aktualisiert 09/07/2015 von Xplode

# Datenbank : 2015-07-15.1 [Server]

# Betriebssystem : Windows 8.1  (x64)

# Benutzername : Georgii - MARGOSCHA

# Gestarted von : C:\Users\Georgii\Downloads\AdwCleaner_4.208.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\TVWizard

Ordner Gelöscht : C:\ProgramData\Media Get LLC

Ordner Gelöscht : C:\ProgramData\WPM

Ordner Gelöscht : C:\ProgramData\Allmyapps

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverRestore

Ordner Gelöscht : C:\Program Files (x86)\predm

Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro

Ordner Gelöscht : C:\Program Files (x86)\Systweak Support Dock

Ordner Gelöscht : C:\Program Files (x86)\DriverRestore

Ordner Gelöscht : C:\Windows\SysWOW64\SearchProtect

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\Genesis

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\genienext

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\globalUpdate

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\Mobogenie

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\PackageAware

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\StormFall

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\Gameo

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\PerformerSoft

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\SetMyHomePage

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mail.Ru

Ordner Gelöscht : C:\Users\Georgii\Documents\Mobogenie

Ordner Gelöscht : C:\Users\Georgii\Documents\PC Speed Maximizer

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\Georgii\daemonprocess.txt

Datei Gelöscht : C:\Users\Georgii\AppData\Roaming\aps.uninstall.scan.results

Datei Gelöscht : C:\Users\Georgii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Goodgame Empire.lnk

Datei Gelöscht : C:\Users\Georgii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Goodgame Empire.lnk

Datei Gelöscht : C:\Users\Georgii\Desktop\Goodgame Empire.lnk
 

***** [ Geplante Tasks ] *****
 

Task Gelöscht : LaunchApp

Task Gelöscht : LaunchSignup

Task Gelöscht : Optimizer Pro Schedule

Task Gelöscht : pricemeterdownloader

Task Gelöscht : a7774df2-7162-4b37-a238-8fb180a0d9b9
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{37AC0F3B-749F-3B22-811B-5A019EED2E85}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{4392A6CC-7940-310E-8E16-799A8D93A438}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{66DF7821-ED6D-3534-893C-0E89E74B0F91}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{755CAFCC-F016-3B06-8F22-945EAA3AD10D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{76552F88-640C-314D-82B6-0D8A740907F7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{05660A04-00F1-3A04-AB3B-BC1074B84D67}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{903F9872-E87F-3B74-83B0-DBE10073B29D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{9558EEB4-CDA6-3778-B53B-98076F0A1E90}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{B25AA9BA-FD52-3E5E-BFE3-9B106779DA6E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{C852CF9F-37DC-35AC-926A-7E6CFFF7C501}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{C9777796-4378-3C90-B52D-7238FFFC2A5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{DB1BC8B2-FDBF-30E7-BE1C-AFF9160059E6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{F3D5729C-7DEB-3850-A026-D0E323ECFEF5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{FEC70973-CB8B-351C-8047-CAE1274CE249}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425546}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655575579}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666576679}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0BD19251-4B4B-4B94-AB16-617106245BB7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{44B29DDD-CF7A-454A-A275-A322A398D93F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B2DB115C-8278-4947-9A07-57B53D1C4215}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B97FC455-DB33-431D-84DB-6F1514110BD5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E72E9312-0367-4216-BFC7-21485FA8390B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425546}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655575579}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666576679}

Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A25AC313-DD19-4238-ACA2-401D6BEE4321}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}

Schlüssel Gelöscht : HKCU\Software\APN PIP

Schlüssel Gelöscht : HKCU\Software\ClickConnect

Schlüssel Gelöscht : HKCU\Software\eSupport.com

Schlüssel Gelöscht : HKCU\Software\genesis

Schlüssel Gelöscht : HKCU\Software\GlobalUpdate

Schlüssel Gelöscht : HKCU\Software\IM

Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions

Schlüssel Gelöscht : HKCU\Software\Media Get LLC

Schlüssel Gelöscht : HKCU\Software\Myfree Codec

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\simplytech

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKCU\Software\Tuto4PC

Schlüssel Gelöscht : HKCU\Software\DriverRestore

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech

Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate

Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions

Schlüssel Gelöscht : HKLM\SOFTWARE\Myfree Codec

Schlüssel Gelöscht : HKLM\SOFTWARE\PIP

Schlüssel Gelöscht : HKLM\SOFTWARE\systweak

Schlüssel Gelöscht : HKLM\SOFTWARE\Upt

Schlüssel Gelöscht : HKLM\SOFTWARE\WinUpd

Schlüssel Gelöscht : HKLM\SOFTWARE\SI-App

Schlüssel Gelöscht : HKLM\SOFTWARE\RST

Schlüssel Gelöscht : HKLM\SOFTWARE\Taronja

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Upt

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\WebBar

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
 

***** [ Internetbrowser ] *****
 

-\\ Internet Explorer v11.0.9600.17840
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
 

-\\ Google Chrome v44.0.2403.89
 

[C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Homepage] : hxxp://Lasaoren.com/?f=1&a=lrn_dsites_14_38_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBtC0B0EzzyD0FtB0FyBtN0D0Tzu0SzyzytDtN1L2XzutAtFtBtFyEtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByE0AtByCyBtDzytG0FzytAzytG0C0D0DyCtGtAyCtCtAtGtCzytB0D0D0B0ByBzztC0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtB0C0F0FyD0AtAtG0EtCtC0BtGyEyEzztCtGzztC0C0BtGzztC0DtDzzzzzztCzyyEyCyD2Q&cr=979804696&ir=
 

-\\ Opera v0.0.0.0
 
 

*************************
 

AdwCleaner[R0].txt - [13103 Bytes] - [22/07/2015 13:07:38]

AdwCleaner[S0].txt - [11254 Bytes] - [22/07/2015 13:08:45]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11314  Bytes] ##########

--- --- ---

AdwCleaner Logfile:

Code:

# AdwCleaner v4.208 - Bericht erstellt 22/07/2015 um 13:08:45

# Aktualisiert 09/07/2015 von Xplode

# Datenbank : 2015-07-15.1 [Server]

# Betriebssystem : Windows 8.1  (x64)

# Benutzername : Georgii - MARGOSCHA

# Gestarted von : C:\Users\Georgii\Downloads\AdwCleaner_4.208.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\TVWizard

Ordner Gelöscht : C:\ProgramData\Media Get LLC

Ordner Gelöscht : C:\ProgramData\WPM

Ordner Gelöscht : C:\ProgramData\Allmyapps

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverRestore

Ordner Gelöscht : C:\Program Files (x86)\predm

Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro

Ordner Gelöscht : C:\Program Files (x86)\Systweak Support Dock

Ordner Gelöscht : C:\Program Files (x86)\DriverRestore

Ordner Gelöscht : C:\Windows\SysWOW64\SearchProtect

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\Genesis

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\genienext

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\globalUpdate

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\Mobogenie

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\PackageAware

Ordner Gelöscht : C:\Users\Georgii\AppData\Local\StormFall

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\Gameo

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\PerformerSoft

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\SetMyHomePage

Ordner Gelöscht : C:\Users\Georgii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mail.Ru

Ordner Gelöscht : C:\Users\Georgii\Documents\Mobogenie

Ordner Gelöscht : C:\Users\Georgii\Documents\PC Speed Maximizer

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\Georgii\daemonprocess.txt

Datei Gelöscht : C:\Users\Georgii\AppData\Roaming\aps.uninstall.scan.results

Datei Gelöscht : C:\Users\Georgii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Goodgame Empire.lnk

Datei Gelöscht : C:\Users\Georgii\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Goodgame Empire.lnk

Datei Gelöscht : C:\Users\Georgii\Desktop\Goodgame Empire.lnk
 

***** [ Geplante Tasks ] *****
 

Task Gelöscht : LaunchApp

Task Gelöscht : LaunchSignup

Task Gelöscht : Optimizer Pro Schedule

Task Gelöscht : pricemeterdownloader

Task Gelöscht : a7774df2-7162-4b37-a238-8fb180a0d9b9
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{37AC0F3B-749F-3B22-811B-5A019EED2E85}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{4392A6CC-7940-310E-8E16-799A8D93A438}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{66DF7821-ED6D-3534-893C-0E89E74B0F91}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{755CAFCC-F016-3B06-8F22-945EAA3AD10D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{76552F88-640C-314D-82B6-0D8A740907F7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{05660A04-00F1-3A04-AB3B-BC1074B84D67}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{903F9872-E87F-3B74-83B0-DBE10073B29D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{9558EEB4-CDA6-3778-B53B-98076F0A1E90}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{B25AA9BA-FD52-3E5E-BFE3-9B106779DA6E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{C852CF9F-37DC-35AC-926A-7E6CFFF7C501}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{C9777796-4378-3C90-B52D-7238FFFC2A5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{DB1BC8B2-FDBF-30E7-BE1C-AFF9160059E6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{F3D5729C-7DEB-3850-A026-D0E323ECFEF5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{FEC70973-CB8B-351C-8047-CAE1274CE249}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425546}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655575579}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666576679}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0BD19251-4B4B-4B94-AB16-617106245BB7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{44B29DDD-CF7A-454A-A275-A322A398D93F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B2DB115C-8278-4947-9A07-57B53D1C4215}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B97FC455-DB33-431D-84DB-6F1514110BD5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E72E9312-0367-4216-BFC7-21485FA8390B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425546}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655575579}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666576679}

Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A25AC313-DD19-4238-ACA2-401D6BEE4321}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}

Schlüssel Gelöscht : HKCU\Software\APN PIP

Schlüssel Gelöscht : HKCU\Software\ClickConnect

Schlüssel Gelöscht : HKCU\Software\eSupport.com

Schlüssel Gelöscht : HKCU\Software\genesis

Schlüssel Gelöscht : HKCU\Software\GlobalUpdate

Schlüssel Gelöscht : HKCU\Software\IM

Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions

Schlüssel Gelöscht : HKCU\Software\Media Get LLC

Schlüssel Gelöscht : HKCU\Software\Myfree Codec

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\simplytech

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKCU\Software\Tuto4PC

Schlüssel Gelöscht : HKCU\Software\DriverRestore

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech

Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate

Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions

Schlüssel Gelöscht : HKLM\SOFTWARE\Myfree Codec

Schlüssel Gelöscht : HKLM\SOFTWARE\PIP

Schlüssel Gelöscht : HKLM\SOFTWARE\systweak

Schlüssel Gelöscht : HKLM\SOFTWARE\Upt

Schlüssel Gelöscht : HKLM\SOFTWARE\WinUpd

Schlüssel Gelöscht : HKLM\SOFTWARE\SI-App

Schlüssel Gelöscht : HKLM\SOFTWARE\RST

Schlüssel Gelöscht : HKLM\SOFTWARE\Taronja

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Upt

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\WebBar

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
 

***** [ Internetbrowser ] *****
 

-\\ Internet Explorer v11.0.9600.17840
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
 

-\\ Google Chrome v44.0.2403.89
 

[C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Homepage] : hxxp://Lasaoren.com/?f=1&a=lrn_dsites_14_38_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBtC0B0EzzyD0FtB0FyBtN0D0Tzu0SzyzytDtN1L2XzutAtFtBtFyEtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByE0AtByCyBtDzytG0FzytAzytG0C0D0DyCtGtAyCtCtAtGtCzytB0D0D0B0ByBzztC0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtB0C0F0FyD0AtAtG0EtCtC0BtGyEyEzztCtGzztC0C0BtGzztC0DtDzzzzzztCzyyEyCyD2Q&cr=979804696&ir=
 

-\\ Opera v0.0.0.0
 
 

*************************
 

AdwCleaner[R0].txt - [13103 Bytes] - [22/07/2015 13:07:38]

AdwCleaner[S0].txt - [11254 Bytes] - [22/07/2015 13:08:45]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11314  Bytes] ##########

--- --- ---JRT Logfile:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.5.1 (07.16.2015:1)

OS: Windows 8.1 x64

Ran by Georgii on 22.07.2015 at 13:15:53,85

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Tasks
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440544424446}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644574479}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440544424446}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644574479}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511421146}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511421146}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440544424446}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644574479}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440544424446}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644574479}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update ClearThink

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update SmarterPower

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util SmarterPower
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] C:\Program Files (x86)\myfree codec

Successfully deleted: [Folder] C:\Users\Georgii\Appdata\Local\crashrpt

Successfully deleted: [Folder] C:\Users\Georgii\AppData\Roaming\goldengate

Successfully deleted: [Folder] C:\Users\Georgii\AppData\Roaming\nico mak computing
 
 
 

~~~ Chrome
 
 

[C:\Users\Georgii\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
 

[C:\Users\Georgii\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
 

[C:\Users\Georgii\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
 

[C:\Users\Georgii\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

[

  booedmolknjekdopkepjjeckmjkdpfgl,

  ehjldlodmkdlooagebfnaghgmkfccipn,

  flpcjncodpafbgdpnkljologafpionhb,

  ifohbjbgfchkkfhphahclmkpgejiplfo,

  jljheddigenhleadfofeccneimcmlefp,

  pfkfdlcdbajamklbneflfbcmfgddmpae

]
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 22.07.2015 at 13:25:39,46

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a41599fd5a2a93458c03068552b2e6f2
# end=init
# utc_time=2015-07-23 07:54:14
# local_time=2015-07-23 09:54:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 24935
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a41599fd5a2a93458c03068552b2e6f2
# end=updated
# utc_time=2015-07-23 08:00:34
# local_time=2015-07-23 10:00:34 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=a41599fd5a2a93458c03068552b2e6f2
# engine=24935
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-07-23 08:02:12
# local_time=2015-07-23 10:02:12 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=771 16777213 66 68 924892 927656 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 927677 14720924 0 0
# scanned=1720
# found=0
# cleaned=0
# scan_time=98
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a41599fd5a2a93458c03068552b2e6f2
# end=init
# utc_time=2015-07-23 08:04:31
# local_time=2015-07-23 10:04:31 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 24935
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a41599fd5a2a93458c03068552b2e6f2
# end=updated
# utc_time=2015-07-23 08:04:48
# local_time=2015-07-23 10:04:48 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=a41599fd5a2a93458c03068552b2e6f2
# engine=24935
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-07-23 08:16:09
# local_time=2015-07-23 10:16:09 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=771 16777213 66 68 925729 928493 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 928514 14721761 0 0
# scanned=14369
# found=0
# cleaned=0
# scan_time=680

Results of screen317's Security Check version 1.004
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Defender
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
TuneUp Utilities 2014 (de-DE)
Google Chrome (43.0.2357.134)
Google Chrome (44.0.2403.89)
````````Process Check: objlist.exe by Laurent````````
AVAST Software Avast AvastSvc.exe
AVAST Software Avast ng ngservice.exe
AVAST Software Avast ng vbox\AvastVBoxSVC.exe
AVAST Software Avast avastui.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````

ich habe noch ne frage er ist immer nicht schneller geworden es hängt beim schreiben.
<Surfen geht es immer noch nicht so richtig möglich beim Chrom habe ich mal ad-blocker Instaliert aber es funkzenirt nicht

Das frische FRST log fehlt noch.

Zitat:

ich habe noch ne frage er ist immer nicht schneller geworden es hängt beim schreiben.
<Surfen geht es immer noch nicht so richtig möglich beim Chrom habe ich mal ad-blocker Instaliert aber es funkzenirt nicht

:wtf:
das musste ich jetzt 3mal lesen...

ich wollte fragen mein Ad-Blocker funkt nicht

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:28-07-2015

durchgeführt von Georgii (Administrator) auf MARGOSCHA (30-07-2015 11:55:30)

Gestartet von C:\Users\Georgii\Downloads

Geladene Profile: Georgii (Verfügbare Profile: Georgii)

Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Dropbox, Inc.) C:\Users\Georgii\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Farbar) C:\Users\Georgii\Downloads\FRST64 (1).exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-07-12] (Avast Software s.r.o.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Atheros Communications)

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53288576 2015-06-30] (Skype Technologies S.A.)

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632112 2015-07-12] (Electronic Arts)

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Run: [Dropbox Update] => C:\Users\Georgii\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)

Startup: C:\Users\Georgii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-12]

ShortcutTarget: Dropbox.lnk -> C:\Users\Georgii\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-12] (Avast Software s.r.o.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Georgii\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)

GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ATTENTION
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}

HKU\S-1-5-21-3968757505-1059699835-2356866766-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006

SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {B2D004DC-5809-4497-ACCD-E4531E66FA12} URL = 

SearchScopes: HKU\S-1-5-21-3968757505-1059699835-2356866766-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-12] (Avast Software s.r.o.)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{930D7CCD-9C61-45EA-AB5D-27DBBAE6643A}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{B5C0F132-FDAA-4DB0-A56E-475213FE7CD3}: [DhcpNameServer] 192.168.178.1

StartMenuInternet: IEXPLORE.EXE - iexplore.exe
 

FireFox:

========

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-07-12]
 

Chrome: 

=======

CHR Profile: C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-15]

CHR Extension: (Adblock Plus) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-14]

CHR Extension: (Avast SafePrice) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-07-19]

CHR Extension: (Avast Online Security) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-14]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Georgii\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-28]

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-07-12]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-12]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
 

==================== Services (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [Datei ist nicht signiert]

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-07-12] (Avast Software s.r.o.)

R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-07-12] (Avast Software)

S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2797312 2013-12-06] (Acer Incorporated)

S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)

S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2004488 2015-07-12] (Electronic Arts)

S3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate)

S3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
 

==================== Drivers (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-07-12] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-07-12] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-12] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-07-12] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-07-12] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-07-12] (Avast Software s.r.o.)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-07-12] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-07-12] ()

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)

S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)

S2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)

R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2013-11-04] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)

R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)

R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)

S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )

S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation)

R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-07-12] (Avast Software)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-07-30 11:55 - 2015-07-30 11:55 - 02169856 _____ (Farbar) C:\Users\Georgii\Downloads\FRST64 (1).exe

2015-07-30 11:33 - 2015-07-30 11:33 - 00000000 ____D C:\Windows\LastGood

2015-07-30 10:58 - 2015-07-30 10:58 - 01627424 _____ C:\Users\Georgii\Downloads\setup_Mueller_Fotowelt.exe

2015-07-30 10:25 - 2015-07-30 10:25 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-07-23 10:22 - 2015-07-23 10:22 - 00852662 _____ C:\Users\Georgii\Downloads\SecurityCheck.exe

2015-07-23 09:52 - 2015-07-23 09:52 - 02870984 _____ (ESET) C:\Users\Georgii\Downloads\esetsmartinstaller_deu.exe

2015-07-22 13:25 - 2015-07-22 13:25 - 00003489 _____ C:\Users\Georgii\Desktop\JRT.txt

2015-07-22 13:15 - 2015-07-22 13:15 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Georgii\Downloads\JRT.exe

2015-07-22 13:04 - 2015-07-22 13:04 - 00003796 _____ C:\lolk.txt

2015-07-22 13:03 - 2015-07-22 12:53 - 00011322 _____ C:\lol.xml

2015-07-22 12:56 - 2015-07-22 13:09 - 00000000 ____D C:\AdwCleaner

2015-07-22 12:28 - 2015-07-22 12:28 - 02248704 _____ C:\Users\Georgii\Downloads\AdwCleaner_4.208.exe

2015-07-22 12:07 - 2015-07-22 12:07 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-07-22 12:06 - 2015-07-22 12:07 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Georgii\Downloads\mbam-setup-2.1.6.1022.exe

2015-07-22 11:44 - 2015-07-22 11:44 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Georgii\Downloads\revosetup95.exe

2015-07-22 11:44 - 2015-07-22 11:44 - 00001288 _____ C:\Users\Georgii\Desktop\Revo Uninstaller.lnk

2015-07-22 11:44 - 2015-07-22 11:44 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2015-07-22 11:32 - 2015-07-30 11:34 - 00001984 _____ C:\Windows\setupact.log

2015-07-22 11:32 - 2015-07-22 11:32 - 00000000 _____ C:\Windows\setuperr.log

2015-07-22 11:29 - 2015-07-30 11:31 - 00117670 _____ C:\Windows\PFRO.log

2015-07-21 14:28 - 2015-07-30 11:54 - 00313193 _____ C:\Windows\WindowsUpdate.log

2015-07-21 12:02 - 2015-07-21 12:03 - 00039958 _____ C:\Users\Georgii\Downloads\Addition.txt

2015-07-21 12:00 - 2015-07-30 11:55 - 00020549 _____ C:\Users\Georgii\Downloads\FRST.txt

2015-07-21 11:59 - 2015-07-30 11:55 - 00000000 ____D C:\FRST

2015-07-21 11:59 - 2015-07-21 11:59 - 02135552 _____ (Farbar) C:\Users\Georgii\Downloads\FRST64.exe

2015-07-20 19:26 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-07-20 19:26 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-07-20 19:26 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-07-20 19:26 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-07-20 12:50 - 2015-07-20 12:50 - 00001740 _____ C:\Users\Public\Desktop\Defraggler.lnk

2015-07-20 12:50 - 2015-07-20 12:50 - 00000000 ____D C:\Program Files\Defraggler

2015-07-20 12:49 - 2015-07-20 12:50 - 04532776 _____ (Piriform Ltd) C:\Users\Georgii\Downloads\dfsetup219.exe

2015-07-20 12:36 - 2015-07-20 12:36 - 00002796 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2015-07-20 12:36 - 2015-07-20 12:36 - 00000838 _____ C:\Users\Public\Desktop\CCleaner.lnk

2015-07-20 12:36 - 2015-07-20 12:36 - 00000000 ____D C:\Program Files\CCleaner

2015-07-20 12:35 - 2015-07-20 12:35 - 05329360 _____ (Piriform Ltd) C:\Users\Georgii\Downloads\ccsetup507_slim.exe

2015-07-20 12:33 - 2015-07-20 12:33 - 00359656 _____ (Microsoft Corporation) C:\Users\Georgii\Downloads\msicuu2.exe

2015-07-19 20:15 - 2015-07-13 23:10 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-07-19 20:15 - 2015-07-13 23:10 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-07-18 11:00 - 2015-07-18 11:00 - 00001460 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk

2015-07-18 11:00 - 2015-07-18 11:00 - 00001265 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack

2015-07-18 11:00 - 2015-07-18 11:00 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2015-07-18 10:59 - 2015-07-18 10:59 - 34950064 _____ (DVDVideoSoft Ltd. ) C:\Users\Georgii\Downloads\FreeYouTubeDownload3.2.60.713.exe

2015-07-18 10:59 - 2015-07-18 10:59 - 34950064 _____ (DVDVideoSoft Ltd. ) C:\Users\Georgii\Downloads\FreeYouTubeDownload3.2.60.713 (1).exe

2015-07-16 10:00 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2015-07-16 10:00 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-07-16 10:00 - 2015-06-29 17:07 - 01084928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-07-16 10:00 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-07-16 10:00 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-07-16 10:00 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-07-16 10:00 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-07-16 10:00 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-07-16 10:00 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-07-16 10:00 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2015-07-16 10:00 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-07-16 10:00 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

2015-07-16 10:00 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-07-16 10:00 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-07-16 10:00 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-07-16 10:00 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2015-07-16 10:00 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-07-16 10:00 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2015-07-16 10:00 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-07-16 10:00 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2015-07-16 10:00 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2015-07-16 10:00 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll

2015-07-16 10:00 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-07-16 10:00 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-07-16 10:00 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2015-07-16 10:00 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2015-07-16 10:00 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-07-16 10:00 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2015-07-16 10:00 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2015-07-16 10:00 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys

2015-07-16 10:00 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys

2015-07-16 10:00 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys

2015-07-16 10:00 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys

2015-07-16 10:00 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys

2015-07-16 10:00 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys

2015-07-16 09:59 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-07-16 09:59 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-07-16 09:59 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-07-16 09:59 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-07-16 09:59 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-07-16 09:59 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-07-16 09:59 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-07-16 09:59 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-07-16 09:59 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2015-07-16 09:59 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-07-16 09:59 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-07-16 09:59 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2015-07-16 09:59 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-07-16 09:59 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll

2015-07-16 09:59 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2015-07-16 09:59 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-07-16 09:58 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-07-16 09:58 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-07-16 09:58 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-07-16 09:58 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-07-16 09:58 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-07-16 09:58 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2015-07-16 09:58 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-07-16 09:58 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-07-16 09:58 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-07-16 09:58 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-07-16 09:58 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-07-16 09:58 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-07-16 09:58 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-07-16 09:58 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-07-16 09:58 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-07-16 09:58 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-07-16 09:58 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-07-16 09:58 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-07-16 09:56 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-07-16 09:56 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-07-16 09:55 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-07-16 09:55 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-07-16 09:55 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-07-16 09:55 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-07-16 09:55 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-07-16 09:55 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-07-14 22:09 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2015-07-14 22:09 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-07-14 22:08 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2015-07-14 22:08 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2015-07-14 22:08 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-07-14 22:08 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-07-14 22:08 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-07-14 22:08 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-07-14 22:08 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2015-07-14 22:08 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-07-14 22:08 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-07-14 22:08 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-07-14 22:08 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-07-14 22:08 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2015-07-14 22:08 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-07-14 22:08 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-07-14 22:08 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-07-14 22:08 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-07-14 22:08 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-07-14 22:08 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-07-14 22:08 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-07-14 22:08 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-07-14 22:08 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2015-07-14 22:08 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-07-14 22:08 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-07-14 22:08 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-07-14 22:08 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-07-14 22:08 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2015-07-14 22:08 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-07-14 22:08 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-07-14 22:08 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-07-14 22:08 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-07-14 22:08 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2015-07-14 22:08 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-07-14 22:08 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-07-14 22:08 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-07-14 22:08 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-07-14 22:08 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2015-07-14 22:08 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll

2015-07-14 22:08 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll

2015-07-14 22:08 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2015-07-14 22:08 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2015-07-14 22:08 - 2015-05-02 01:33 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml

2015-07-14 22:08 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls

2015-07-14 22:08 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\system32\locale.nls

2015-07-14 22:08 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2015-07-14 22:08 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2015-07-12 16:24 - 2015-07-12 16:24 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\AVAST Software

2015-07-12 16:22 - 2015-07-22 13:11 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2015-07-12 16:22 - 2015-07-12 16:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software

2015-07-12 16:21 - 2015-07-12 16:22 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswsp.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe

2015-07-12 16:21 - 2015-07-12 16:21 - 00272248 _____ C:\Windows\system32\Drivers\aswVmm.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00065736 _____ C:\Windows\system32\Drivers\aswRvrt.sys

2015-07-12 16:21 - 2015-07-12 16:21 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr

2015-07-12 16:21 - 2015-07-12 16:21 - 00029168 _____ C:\Windows\system32\Drivers\aswHwid.sys

2015-07-12 16:19 - 2015-07-12 16:19 - 00000000 ____D C:\Program Files\AVAST Software

2015-07-12 16:17 - 2015-07-12 16:17 - 05499960 _____ (Avast Software s.r.o.) C:\Users\Georgii\Downloads\avast_free_antivirus_setup_online.exe

2015-07-10 18:39 - 2015-07-10 18:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Etymonix SoftReel

2015-07-10 18:39 - 2015-07-10 18:39 - 00000000 ____D C:\Program Files (x86)\Etymonix

2015-07-10 18:39 - 1997-11-19 16:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe

2015-07-10 18:35 - 2015-07-10 18:35 - 01004536 _____ C:\Users\Georgii\Downloads\SoftReel_Setup.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-07-30 11:56 - 2015-02-19 13:39 - 00001138 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-07-30 11:55 - 2014-08-16 14:04 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\Skype

2015-07-30 11:38 - 2013-10-20 12:14 - 00765582 _____ C:\Windows\system32\perfh007.dat

2015-07-30 11:38 - 2013-10-20 12:14 - 00159366 _____ C:\Windows\system32\perfc007.dat

2015-07-30 11:38 - 2013-09-05 16:05 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI

2015-07-30 11:37 - 2014-09-14 11:04 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3968757505-1059699835-2356866766-1001

2015-07-30 11:35 - 2014-06-17 19:50 - 00000000 ___RD C:\Users\Georgii\Dropbox

2015-07-30 11:35 - 2014-03-30 15:57 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\Dropbox

2015-07-30 11:33 - 2013-10-20 02:56 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2015-07-30 11:32 - 2015-02-19 13:39 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-07-30 11:32 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-07-30 11:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru

2015-07-30 10:59 - 2015-02-19 13:40 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-07-30 10:25 - 2015-06-16 11:11 - 00001252 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001UA.job

2015-07-30 10:12 - 2015-04-04 22:09 - 00000000 ___SD C:\Windows\system32\GWX

2015-07-30 10:12 - 2014-09-20 08:14 - 00003942 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F20CBB1C-9178-44A6-9CDD-4C6809BB27A5}

2015-07-30 10:09 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness

2015-07-23 13:31 - 2015-01-27 18:35 - 00000000 ____D C:\ProgramData\Origin

2015-07-22 13:09 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI

2015-07-22 13:08 - 2013-12-28 21:20 - 00000000 ____D C:\Users\Georgii

2015-07-22 13:04 - 2014-08-17 13:05 - 00230912 ___SH C:\Users\Georgii\Downloads\Thumbs.db

2015-07-22 12:52 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\L2Schemas

2015-07-22 11:32 - 2013-08-22 16:44 - 00413488 _____ C:\Windows\system32\FNTCACHE.DAT

2015-07-21 12:23 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache

2015-07-20 20:23 - 2015-06-16 11:11 - 00001200 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001Core.job

2015-07-20 19:58 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp

2015-07-20 12:41 - 2013-12-29 22:50 - 00000000 ____D C:\Users\Georgii\AppData\Local\CrashDumps

2015-07-20 12:41 - 2013-09-05 16:55 - 00000000 ____D C:\Windows\Panther

2015-07-19 20:18 - 2015-06-16 11:11 - 00004202 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001UA

2015-07-19 20:18 - 2015-06-16 11:11 - 00003822 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3968757505-1059699835-2356866766-1001Core

2015-07-19 20:09 - 2015-04-04 22:09 - 00000000 ___SD C:\Windows\SysWOW64\GWX

2015-07-19 20:09 - 2014-12-18 12:48 - 00000000 ____D C:\Windows\system32\appraiser

2015-07-19 20:09 - 2014-07-09 22:11 - 00000000 ___SD C:\Windows\system32\CompatTel

2015-07-19 20:09 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData

2015-07-19 20:09 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore

2015-07-18 11:01 - 2014-07-05 13:23 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\DVDVideoSoft

2015-07-18 11:00 - 2015-05-19 11:57 - 00000000 ____D C:\Users\Georgii\AppData\Roaming\RPEng

2015-07-16 15:51 - 2015-02-19 13:39 - 00004110 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-07-16 15:51 - 2015-02-19 13:39 - 00003874 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-07-16 15:27 - 2013-12-29 23:42 - 00000000 ____D C:\Windows\system32\MRT

2015-07-16 15:07 - 2014-08-16 14:04 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-07-16 15:07 - 2014-08-16 14:03 - 00000000 ____D C:\ProgramData\Skype

2015-07-12 19:24 - 2015-01-27 18:35 - 00000000 ____D C:\Program Files (x86)\Origin

2015-07-05 12:08 - 2014-01-31 18:32 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-07-03 08:43 - 2013-12-29 23:42 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2014-04-21 21:44 - 2014-11-11 21:55 - 0000103 _____ () C:\Users\Georgii\AppData\Roaming\WB.CFG

2015-02-18 14:33 - 2015-02-18 14:33 - 0000000 _____ () C:\Users\Georgii\AppData\Local\{1F5BB354-C0CA-413F-832C-BC2054E65F40}

2013-10-20 02:56 - 2013-10-20 02:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

Einige Dateien in TEMP:

====================

C:\Users\Georgii\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpzgqigd.dll

C:\Users\Georgii\AppData\Local\Temp\Quarantine.exe

C:\Users\Georgii\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\System32\winlogon.exe => Datei ist digital signiert

C:\Windows\System32\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\System32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\System32\services.exe => Datei ist digital signiert

C:\Windows\System32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\System32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\System32\rpcss.dll => Datei ist digital signiert

C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-07-30 10:30
 

==================== Ende von log ============================

--- --- ---

Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de