Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Google Chrome mit Ads infiziert (https://www.trojaner-board.de/154670-google-chrome-ads-infiziert.html)

Lukas07 02.06.2014 12:48
Google Chrome mit Ads infiziert
 
Liste der Anhänge anzeigen (Anzahl: 5)
Hallo liebe Community,

ich habe seit einiger Zeit einige Probleme mit Google Chrome. Es scheint so als hätte ich mir irgendwelche Viren bezüglich der Ad-Ons eingefangen. Es gibt mehrere Anzeichen, die mir aufgefallen sind und die ich hofftl. anschaulich hier eingeben kann.

# Größtes Problem dabei ist, dass teilweise bei verschiedenen Klicks neue Tabs aufgemacht werden oder ganz neue Fenster. Die Links sehen dann immer wie folgt aus:

• hxxp://gir.driveropti.net/sd/dw32.html?u=http%3A%2F%2Fdlvr.readserver.net%2Fbp%3Fsection%3D2455%26type%3D2&p=Remarkit&a=&c=2040-2084&b=chrome&bv=34&t1=1399745953041&tt=1399745953041&r=www.amazon.de&ua=0&n=apptv&sn=&mpa=0&mp=0


• hxxp://gir.driveropti.net/sd/dw32.html?u=http%3A%2F%2Fugo.tractionize.com%2FWhiteLabelBidRequestHandlerServlet%3Foid%3D1%26width%3D1%26height%3D100%26pubid%3D2040%26tagid%3D2084%2 6noaop%3D1%26revmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttp%3A%2F%2Fwww.trojaner-board.de%2Fsearch.php%3Fsearchid%3D2597750&p=Remarkit&a=&c=2040-2084&b=chrome&bv=35&t1=1401707926618&tt=1401707926618&r=www.trojaner-board.de&ua=22&n=convertmedia&sn=&mpa=0&mp=0


• hxxp://gir.driveropti.net/sd/dw32.html?u=http%3A%2F%2Fugo.tractionize.com%2FWhiteLabelBidRequestHandlerServlet%3Foid%3D1%26width%3D1%26height%3D100%26pubid%3D2040%26tagid%3D2084%2 6noaop%3D1%26revmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttp%3A%2F%2Fconvert2mp3.net%2Findex.php%3Fp%3Dtags%26amp%3Bid%3Dyoutube_YvfO386qwjE%26 amp%3Bkey%3Dzl7S1sIr&p=Remarkit&a=&c=2040-2084&b=chrome&bv=35&t1=1401462882173&tt=1401462882173&r=convert2mp3.net&ua=20&n=convertmedia&sn=&mpa=0&mp=0


• hxxp://srv123.com/ctrd/click/newjump1.do?affiliate=63640&subid=2040_2084_de&terms=k%C3%A3%C2%B6ln%2050667%20online%20schauen%20bei%20rtl%20ii%20now%20rtl2.de%20k%C3%A3%C2%B6ln%205 0667%20video%20videos%20online%20sehen%20internet&ai=rfwfAD-kziKfvIzK9g-K7uF2VIX15_zOb4EVCUFSAKDpweTpNIcm5aBu3lijBHd5UkJszldOmlEI2uQQFKSu7t1eBEbMkg06ewj0bFIRtamXGt9i96Hp8f0ERmN4laQOUgqoIhSVa_FBUDgAKQg2pCXapx42Fb103VWb_I7A7 uu47tFB97b5be5dxNbofVdcpZopmxXlSAHFCy8mHytCFlW7d7zekiY0LIcfbdKQsgTTM9gUBetdJxMUgfumUkuiL2CWWB6UW1q0fL-V-FkpAxI_EKLELBFQyLJRi-BtAPLkV4AuOMvAUgSK-NBDqs_7hqtcytb6wmn-TJYAaVvV5WHM_Jj1UWS4Fc8KPhYIcp54wzedaXT7Smk8f3mOEaTOtUR9Uw_QeAXtoNV2vdt0My1c1LPEDmVGWOu0V-z3HE6SjkAwbKWmGdOfzhQ-xgW9uDJu3iu8jnGJMi7i1d0PNgHIqFksykZcG-qLOoWbZlfSsPUpVwdLTiPlg3kh0JSb&version=1.1

und dann wird man weitergeleitet zu:

-> hxxp://videoplayerupdate.net/tri/update-flash/de/?subid=63640-2040_2084_de&subid3=k%C3%A3%C2%B6ln+50667+online+schauen+bei+rtl+ii+now+rtl2.de+k%C3%A3%C2%B6ln+50667+video+videos+online+sehen+internet&subid2=140147 7974942_1401477966482_108_4408577_52566455_1&transaction_id=e11d7151-ed10-49bd-a6f4-6862f70ca5c5&rand=5388db85658db&a=&aid=tizzle&source=tizzle-flop-de-PRON&entry=y&exit=y


• hxxp://binaryinstructor.com/de/index.html?engsec=15


# Ein anderes Anzeichen, was denke ich auch damit zusammenhängt, ist, dass auf einigen Seiten manche Wörter doppelt grün unterstrichen sind: Bsp. auf dieser Seite hier: Anhang 1.1. und Anhang 1.2.Anhang 67351

Anhang 67352


# Zudem ist auf fast allen Seiten am unteren Bildrand eine Box zu sehen die sich auf irgendwelche Ads by Remarkt bezieht: Bsp. auf dieser Seite hier: Anhang 2, Ads by Remarkt
Anhang 67353


# Nächste Sache ist, dass ich z.B. in Chrome keine Texte mehr markieren und dann bspw. kopieren kann. Folgendes erscheint dann: Bsp. hier auf dieser Seite: Anhang 3, Texte blau markieren. Anhang 67354


# Beispiel für eine der gri.-Seiten die immer geöffnet werden. So etwas erscheint dann: Anhang 4, Windows Reparatur Seite. Anhang 67355



Ich hoffe ich konnte mein Thema möglichst gut an euch Experten weitergeben und hoffe, dass ihr mir bei diesem lästigen Problem helfen könnt.
Hat beim letzten Mal auch sehr gut funktioniert, deswegen bin ich wieder hier :)

Vielen Dank!
Lukas

schrauber 02.06.2014 12:56
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Lukas07 02.06.2014 13:06
FRST.txt.:
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014 01
Ran by Lukas (administrator) on LUKAS-HP on 02-06-2014 14:01:47
Running from C:\Users\Lukas\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Program Files (x86)\Re-markit-soft\Re-markitry161.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe
(Spotify Ltd) C:\Users\Lukas\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(RemoteMouse.net) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Dropbox, Inc.) C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe
(DonationCoder) C:\Program Files (x86)\ScreenshotCaptor\ScreenshotCaptor.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2799912 2013-06-08] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2013-06-08] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2013-06-08] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-06-14] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Magic Desktop for HP notification] => C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-27] (Easybits)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-04-03] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\NCPluginUpdater.exe" Update [21720 2014-05-27] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [HP Deskjet 3070 B611 series (NET)] => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2676584 2011-06-08] (Hewlett-Packard Co.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Spotify] => C:\Users\Lukas\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Spotify Web Helper] => C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Remote Mouse] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [1200640 2014-04-01] (RemoteMouse.net)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20924064 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:14383
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
BHO: Plus-HD-1.7 - {11111111-1111-1111-1111-110311211154} - C:\Program Files (x86)\Plus-HD-1.7\Plus-HD-1.7-bho64.dll No File
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SPFS Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SPFS Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-09-03] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4E587E9A-DAA3-4509-AA8C-6891599FDD78}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{CD29485B-D0A0-4C7E-8EFB-DEDA0C523C00}: [NameServer]193.189.244.206 193.189.244.225

FireFox:
========
FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default
FF NewTab: hxxp://istart.webssearches.com/newtab/?type=nt&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
FF DefaultSearchEngine: webssearches
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\PROGRA~2\MOZILL~1\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lukas\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\amazon-icon@giga.de [2013-11-16]
FF Extension: Quick Start - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\quick_start@gmail.com [2014-05-10]
FF Extension: Snap.Do  - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7} [2013-06-08]
FF Extension: Snap.Do  - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a} [2013-11-16]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2013-07-26]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2012-10-04]
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com
FF Extension: Quick Start - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com [2014-05-10]
FF HKCU\...\Firefox\Extensions: [{B5C96F3A-946D-574F-87D1-EA663E872675}] - C:\Program Files (x86)\Re-markit-soft\161.xpi
FF Extension: Re-markit - C:\Program Files (x86)\Re-markit-soft\161.xpi [2014-05-10]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX

Chrome:
=======
CHR HomePage: hxxp://istart.webssearches.com/?type=hppp&ts=1399916144&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX
CHR StartupUrls: "hxxp://istart.webssearches.com/?type=hppp&ts=1399916144&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX", "https://www.google.de/webhp?source=search_app"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Simple Pass 2011) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe\1.0_0\npwebsitelogon.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Extension: (Brushed) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg [2012-09-27]
CHR Extension: (YouTube) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-27]
CHR Extension: (Adblock Plus) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-02-05]
CHR Extension: (Google-Suche) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-27]
CHR Extension: (iCloud-Lesezeichen) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2013-10-06]
CHR Extension: (Google Wallet) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (Quick start) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-05-10]
CHR Extension: (Google Mail) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-27]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Lukas\AppData\Roaming\DVDVideoSoft\DVDVideoSoftBrowserExtension.crx [2012-11-06]
CHR HKLM-x32\...\Chrome\Extension: [aepeildmfnnehghlknddebgjghlompfe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-02-11]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Lukas\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-11-16]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1494144 2012-09-11] (Microsoft Corporation)
R2 Re-markit; C:\Program Files (x86)\Re-markit-soft\Re-markitry161.exe [143872 2014-05-10] ()
S2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [566272 2014-05-10] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-16] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-17] (Avira Operations GmbH & Co. KG)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-02 14:01 - 2014-06-02 14:01 - 02067456 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-06-02 14:01 - 2014-06-02 14:01 - 00032035 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-06-02 13:07 - 2014-06-02 13:07 - 00016919 _____ () C:\Users\Lukas\Documents\Anmeldung.odt
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\ProgramData\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\Program Files\iTunes
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-02 12:04 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iPod
2014-05-21 17:34 - 2014-05-21 17:35 - 51618755 _____ () C:\Users\Lukas\Downloads\Alle Farben.zip
2014-05-12 19:44 - 2014-05-12 19:44 - 00994160 _____ () C:\Users\Lukas\Downloads\setup.exe
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\SupTab
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\ProgramData\WPM
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-05-10 15:15 - 2014-05-30 15:50 - 00000406 _____ () C:\Windows\Tasks\Re-markit Update.job
2014-05-10 15:15 - 2014-05-30 15:49 - 00000386 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-05-10 15:15 - 2014-05-12 12:39 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-05-10 15:15 - 2014-05-10 15:15 - 00003054 _____ () C:\Windows\System32\Tasks\Re-markit Update
2014-05-10 15:15 - 2014-05-10 15:15 - 00002974 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-05-10 15:15 - 2014-05-10 15:15 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-05-10 15:15 - 2014-05-10 15:15 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\VOPackage
2014-05-10 15:15 - 2014-05-10 15:15 - 00000000 ____D () C:\Program Files (x86)\Freeven pro
2014-05-10 15:13 - 2014-05-10 15:13 - 00494960 _____ () C:\Users\Lukas\Downloads\Java.exe
2014-05-06 10:24 - 2014-05-30 16:45 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\DropboxMaster
2014-05-06 10:24 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\ProgramData\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

==================== One Month Modified Files and Folders =======

2014-06-02 14:02 - 2014-06-02 14:01 - 00032035 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-06-02 14:02 - 2012-09-27 12:34 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Temp
2014-06-02 14:01 - 2014-06-02 14:01 - 02067456 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-06-02 14:01 - 2013-11-18 01:23 - 00000000 ____D () C:\FRST
2014-06-02 14:01 - 2013-02-22 21:34 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Spotify
2014-06-02 13:46 - 2013-02-14 15:33 - 00000338 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-06-02 13:24 - 2012-10-24 18:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-02 13:24 - 2012-09-27 13:12 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-02 13:07 - 2014-06-02 13:07 - 00016919 _____ () C:\Users\Lukas\Documents\Anmeldung.odt
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\ProgramData\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iTunes
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-02 12:04 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iPod
2014-06-02 11:59 - 2013-09-14 10:50 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForLukas
2014-06-02 11:59 - 2013-09-14 10:50 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForLukas.job
2014-06-02 11:58 - 2012-12-22 15:15 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-06-02 11:58 - 2012-09-29 14:14 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-06-02 11:53 - 2012-09-27 13:12 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-02 11:47 - 2013-02-22 23:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Skype
2014-06-02 11:47 - 2011-11-28 16:09 - 01372516 _____ () C:\Windows\WindowsUpdate.log
2014-06-01 19:27 - 2011-09-03 10:22 - 00654852 _____ () C:\Windows\system32\perfh007.dat
2014-06-01 19:27 - 2011-09-03 10:22 - 00130434 _____ () C:\Windows\system32\perfc007.dat
2014-06-01 19:27 - 2009-07-14 07:13 - 01500294 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-01 19:26 - 2012-09-27 12:41 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{1FBC2764-466E-472C-9615-0F594618C744}
2014-06-01 19:23 - 2012-10-16 12:03 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Dropbox
2014-05-30 16:45 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\DropboxMaster
2014-05-30 16:45 - 2012-12-19 19:24 - 00001649 _____ () C:\Windows\wininit.ini
2014-05-30 16:45 - 2012-10-16 12:05 - 00000979 _____ () C:\Users\Lukas\Desktop\Dropbox.lnk
2014-05-30 16:45 - 2012-10-16 12:05 - 00000000 ___RD () C:\Users\Lukas\Dropbox
2014-05-30 16:45 - 2012-10-16 12:04 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-30 16:45 - 2012-09-27 12:41 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-30 15:50 - 2014-05-10 15:15 - 00000406 _____ () C:\Windows\Tasks\Re-markit Update.job
2014-05-30 15:49 - 2014-05-10 15:15 - 00000386 _____ () C:\Windows\Tasks\Re-markit_wd.job
2014-05-28 10:02 - 2013-02-22 21:35 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Spotify
2014-05-27 19:32 - 2009-07-14 06:51 - 00084707 _____ () C:\Windows\setupact.log
2014-05-22 10:21 - 2013-11-17 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-22 10:21 - 2013-11-17 13:29 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-21 17:35 - 2014-05-21 17:34 - 51618755 _____ () C:\Users\Lukas\Downloads\Alle Farben.zip
2014-05-20 21:26 - 2009-07-14 06:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-20 21:26 - 2009-07-14 06:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-20 21:19 - 2012-09-27 13:56 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Winamp
2014-05-20 21:17 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-15 16:32 - 2012-10-06 15:21 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2014-05-15 16:32 - 2012-10-06 15:21 - 00002019 _____ () C:\ProgramData\Desktop\Adobe Reader X.lnk
2014-05-15 16:32 - 2011-09-03 00:56 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-14 18:24 - 2012-10-24 18:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:24 - 2012-10-24 18:52 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 18:24 - 2012-10-24 18:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-12 19:44 - 2014-05-12 19:44 - 00994160 _____ () C:\Users\Lukas\Downloads\setup.exe
2014-05-12 12:39 - 2014-05-10 15:15 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\SupTab
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\ProgramData\WPM
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-10 15:16 - 2014-05-10 15:16 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-05-10 15:15 - 2014-05-10 15:15 - 00003054 _____ () C:\Windows\System32\Tasks\Re-markit Update
2014-05-10 15:15 - 2014-05-10 15:15 - 00002974 _____ () C:\Windows\System32\Tasks\Re-markit_wd
2014-05-10 15:15 - 2014-05-10 15:15 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-05-10 15:15 - 2014-05-10 15:15 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\VOPackage
2014-05-10 15:15 - 2014-05-10 15:15 - 00000000 ____D () C:\Program Files (x86)\Freeven pro
2014-05-10 15:15 - 2012-12-02 16:06 - 00002069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-05-10 15:15 - 2012-11-28 00:16 - 00001387 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-10 15:15 - 2012-11-28 00:16 - 00001375 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-10 15:15 - 2012-11-28 00:16 - 00001375 _____ () C:\ProgramData\Desktop\Mozilla Firefox.lnk
2014-05-10 15:15 - 2012-09-27 13:16 - 00002483 _____ () C:\Users\Lukas\Desktop\Google Chrome.lnk
2014-05-10 15:15 - 2012-09-27 12:41 - 00001661 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-10 15:14 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-05-10 15:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-05-10 15:13 - 2014-05-10 15:13 - 00494960 _____ () C:\Users\Lukas\Downloads\Java.exe
2014-05-10 01:19 - 2012-09-27 13:12 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 01:19 - 2012-09-27 13:12 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 10:24 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\ProgramData\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-06 10:23 - 2013-02-22 23:40 - 00000000 ____D () C:\ProgramData\Skype
2014-05-06 10:20 - 2012-12-28 17:38 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-05-06 10:20 - 2010-11-21 05:47 - 00392030 _____ () C:\Windows\PFRO.log
2014-05-05 19:12 - 2012-11-26 11:42 - 00003218 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForLUKAS-HP$
2014-05-05 19:12 - 2012-11-26 11:42 - 00000342 _____ () C:\Windows\Tasks\HPCeeScheduleForLUKAS-HP$.job
2014-05-04 12:00 - 2012-12-28 17:38 - 00001949 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-05-04 12:00 - 2012-12-28 17:38 - 00001949 _____ () C:\ProgramData\Desktop\CDBurnerXP.lnk
2014-05-04 12:00 - 2012-12-28 17:38 - 00001899 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk

Some content of TEMP:
====================
C:\Users\Lukas\AppData\Local\Temp\avgnt.exe
C:\Users\Lukas\AppData\Local\Temp\BackupSetup.exe
C:\Users\Lukas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphx7m5n.dll
C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe
C:\Users\Lukas\AppData\Local\Temp\RemoteMouse.exe
C:\Users\Lukas\AppData\Local\Temp\sp64126.exe
C:\Users\Lukas\AppData\Local\Temp\UninstallHPSA.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-30 17:54

==================== End Of Log ============================
--- --- ---

--- --- ---


Addition.txt.:FRST Additions Logfile:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-06-2014 01
Ran by Lukas at 2014-06-02 14:04:27
Running from C:\Users\Lukas\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{9A11B072-9CE7-ABB9-2F65-EC971A7B839D}) (Version: 3.0.816.0 - ATI Technologies, Inc.)
AuthenTec TrueAPI (Version: 1.2.1.33 - AuthenTec, Inc.) Hidden
AVI Splitter (HKLM-x32\...\AVI Splitter_is1) (Version:  - )
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Big Rig Europe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blender (HKLM\...\Blender) (Version: 2.69 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.100.82.140 - Broadcom Corporation)
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center (x32 Version: 2011.0508.224.2391 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0508.224.2391 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0508.224.2391 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0508.224.2391 - ATI) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0508.224.2391 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help English (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help French (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help German (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0508.0223.2391 - ATI) Hidden
ccc-utility64 (Version: 2011.0508.224.2391 - ATI) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Counter-Strike(TM) (HKLM-x32\...\{DF5A03CC-D5AA-43D8-B948-D9903F2AF94A}) (Version: 1.0.0.0 - Valve)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.3922 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.1.3922 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition update for Microsoft Office 2010 (KB982726) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E14AE329-F210-4EDD-B775-290821C66C1F}) (Version:  - Microsoft)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.22 - DivX, LLC)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
DVDVideoSoftTB DE Toolbar (HKLM-x32\...\DVDVideoSoftTB_DE Toolbar) (Version: 6.9.0.16 - DVDVideoSoftTB DE)
DVDVideoSoftTB Toolbar (HKLM-x32\...\DVDVideoSoftTB Toolbar) (Version: 6.9.0.16 - DVDVideoSoftTB)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.3.0 - SCS Software)
Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Fishdom (x32 Version: 2.2.0.95 - WildTangent) Hidden
Flatcast Viewer Plugin 5.3.0.784 (HKLM-x32\...\Flatcast Viewer 5.3_is1) (Version:  - 1 mal 1 Software GmbH)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft)
Free YouTube to MP3 Converter version 3.11.35.1031 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.35.1031 - DVDVideoSoft Ltd.)
Freeven pro (HKLM-x32\...\Freeven pro) (Version: 1.34.5.4 - Freeven) <==== ATTENTION
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto: Episodes From Liberty City (HKLM-x32\...\{61B8B2F9-D8DA-4B24-89A9-DB09F38A4899}) (Version: 1.1.0.0 - Rockstar Games)
gretl version 1.9.14 (x86_64) (HKLM\...\gretl_is1) (Version: 1.9.14 - The gretl team)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM\...\{7B4DEBE1-E3E3-45BD-88E6-6C3CA9EEED36}) (Version: 4.1.16.1 - Hewlett-Packard Company)
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Connection Manager (HKLM-x32\...\{5E63C0AB-19B0-47D4-842E-6B324EB0614B}) (Version: 4.1.23.1 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Deskjet 3070 B611 series - Grundlegende Software für das Gerät (HKLM\...\{B0BF4E84-0EE3-4E47-B90E-27B40348E022}) (Version: 25.0.571.0 - Hewlett-Packard Co.)
HP Deskjet 3070 B611 series Hilfe (HKLM-x32\...\{9F20CE56-3828-432D-A3C5-3EC6A2ED93C6}) (Version: 140.0.2.2 - Hewlett Packard)
HP Deskjet 3520 series - Grundlegende Software für das Gerät (HKLM\...\{15B2F0E3-3FAC-4495-B0FD-398EECFA4100}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3520 series Hilfe (HKLM-x32\...\{6B953497-169C-4929-9AA9-A9F510347468}) (Version: 27.0.0 - Hewlett Packard)
HP Deskjet 3520 series Setup Guide (HKLM-x32\...\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}) (Version: 27.0.0 - Hewlett Packard)
HP Documentation (HKLM-x32\...\{83A375B6-6FC2-4F8A-948E-E506DB9DCDF0}) (Version: 1.1.0.0 - Hewlett-Packard)
HP DVB-T TV Tuner 8.0.64.43 (HKLM-x32\...\HP DVB-T TV Tuner) (Version: 8.0.64.43 - )
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.11182 - HP Photo Creations)
HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP SimplePass 2011 (HKLM-x32\...\{BCFAA37D-A6DB-43BF-A351-43F183E52D07}) (Version: 5.1.0.495 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{483539DB-FA71-4C45-8438-55D3DCFDECC8}) (Version: 4.5.10.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPDiagnosticCoreDll (HKLM-x32\...\{9262B08F-E183-4FED-A2BD-23FF1A84EB67}) (Version: 1.0.3.0 - Hewlett Packard)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6381.0 - IDT)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3074 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 9 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217009FF}) (Version: 7.0.90 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle)
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS)
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
MediaPlayerplus (HKLM-x32\...\MediaPlayerplus) (Version: 1.34.5.4 - Freeven) <==== ATTENTION
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (x32 Version:  - Microsoft) Hidden
Microsoft Office 365 Home Premium Preview - es-es (HKLM\...\Microsoft Office Profesional 15 (Technical Preview) - es-es) (Version: 15.0.4128.1025 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 11.302.09.04.528 - Huawei Technologies Co.,Ltd)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 21.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 21.0 (x86 de)) (Version: 21.0 - Mozilla)
Mozilla Firefox 22.0 (x86 de) (HKCU\...\Mozilla Firefox 22.0 (x86 de)) (Version: 22.0 - Mozilla)
Mozilla Firefox Packages (HKCU\...\Mozilla Firefox Packages) (Version:  - ) <==== ATTENTION
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 21.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4128.1025 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4128.1022 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4128.1022 - Microsoft Corporation) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Opera 12.11 (HKLM-x32\...\Opera 12.11.1661) (Version: 12.11.1661 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.83 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
Re-markit (HKLM-x32\...\DB2C764B-0C62-DBB1-901E-52B862B3EBB2) (Version:  - Re-markit-software) <==== ATTENTION
Remote Mouse version 2.54 (HKLM-x32\...\{01E4BC6D-3ACC-45E1-8928-C2FF626F63F3}_is1) (Version: 2.54 - Remote Mouse)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.19.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.19.0 - Renesas Electronics Corporation) Hidden
Screenshot Captor 4.03.00 (HKLM-x32\...\ScreenshotCaptor_is1) (Version:  - )
Search-Results Toolbar (HKLM-x32\...\imeshtoolbar2) (Version: 1.0.0.12 - APN LLC) <==== ATTENTION
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Snap.Do (HKLM-x32\...\{CC6F61A9-A55E-4D04-A674-7A498CD8B809}) (Version: 11.10.1.13233 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU\...\{2ac0cf9f-3cf8-4ede-aace-b04f29eba13c}) (Version: 1.20.1.10742 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU\...\{90313898-2eb3-4d77-b928-1c13e454d18a}) (Version: 11.10.1.13233 - ReSoft Ltd.) <==== ATTENTION
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Studie zur Verbesserung von HP Deskjet 3070 B611 series Produkten (HKLM\...\{93B49FE1-0C81-479B-986A-D50DDA80E2C6}) (Version: 25.0.571.0 - Hewlett-Packard Co.)
Studie zur Verbesserung von HP Deskjet 3520 series Produkten (HKLM\...\{A5BB6A58-BC1A-48A7-BB19-1768A80CF9C9}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.11.0 - Synaptics Incorporated)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Validity WBF DDK (HKLM\...\{79174AF2-6CB1-42F5-981E-66DCA49391D0}) (Version: 4.3.205.0 - Validity Sensors, Inc.)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VO Package (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
webssearches uninstaller (HKLM-x32\...\webssearches uninstaller) (Version:  - webssearches) <==== ATTENTION
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.10.5 - WildTangent) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Utils (HKLM-x32\...\Windows Utils) (Version:  - )
WPM18.8.0.212 (HKLM-x32\...\WPM) (Version: 18.8.0.212 - Cherished Technololgy LIMITED) <==== ATTENTION
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Restore Points  =========================

19-05-2014 13:04:08 Geplanter Prüfpunkt
19-05-2014 20:46:12 Windows-Sicherung
25-05-2014 17:00:13 Windows-Sicherung
02-06-2014 10:39:49 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-11-18 10:12 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {036EEC69-47CA-464B-84A5-9C5AE760A95A} - System32\Tasks\HPCustParticipation HP Deskjet 3520 series => C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {0B7C0302-91F1-4E9B-8220-FCD909639468} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {0DDE4AE4-063F-4D09-A729-FB018B75113C} - System32\Tasks\Re-markit_wd => C:\Program Files (x86)\Re-markit-soft\Re-markitd.exe <==== ATTENTION
Task: {0F5D0311-E2DC-4C52-945D-FA5B227B99A0} - \Funmoods No Task File <==== ATTENTION
Task: {1A318E68-D741-43A5-A0BE-6442EECB2685} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-31] ()
Task: {1FCA9FA2-8EEC-4494-9BC8-FC936A6BAE84} - System32\Tasks\hpUrlLauncher.exe_{BC44C51F-9BFD-4C4B-995B-F7B50B103CCD} => C:\Program Files\HP\HP Deskjet 3520 series\Bin\utils\hpUrlLauncher.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {213C9DC1-CFF0-42EB-AFC7-94AB8716D1E4} - \Scheduled Update for Ask Toolbar No Task File <==== ATTENTION
Task: {2E8A8ACE-044A-4ED0-B122-C5CFE5A45B7E} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2013-02-14] ()
Task: {35B1897C-4B67-4D2B-90A4-8B5D8AC14912} - System32\Tasks\HPCeeScheduleForLUKAS-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {4425AC6F-70B7-4839-B890-F99884B1D2E3} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {4878B744-0FD5-407F-817D-24081AD72706} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-05-27] (Microsoft)
Task: {4A4C4448-A749-4BB1-940C-430FDC9D0B8B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-12-12] (Hewlett-Packard Company)
Task: {4C4EED0F-B8E1-44D5-B7B9-647BCFC026AE} - System32\Tasks\Microsoft\Office\Actualizaciones automáticas de Office => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2012-09-11] (Microsoft Corporation)
Task: {4F6D9F96-7DB7-49FA-B085-908510E4B5AA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {53190F59-23C0-4A00-B93E-D6A5D4410B89} - \Plus-HD-1.7-chromeinstaller No Task File <==== ATTENTION
Task: {597B0A69-EBAA-4004-8FBD-01D2B19B1989} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
Task: {6998AD68-FC2E-42CB-A808-9E1D72AEB702} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {6B155D0D-66B7-46F7-AF3F-079AA598B33C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {6FF9F2D3-7327-44FA-A967-DEFFD4534A46} - System32\Tasks\Re-markit Update => C:\Program Files (x86)\Re-markit-soft\Re-markitG66.exe [2014-05-10] () <==== ATTENTION
Task: {7CB3DF8D-7F69-46DE-B938-C86C308FB97A} - System32\Tasks\HPCustParticipation HP Deskjet 3070 B611 series => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPCustPartic.exe [2011-06-08] (Hewlett-Packard Co.)
Task: {8EC73B18-1DC6-496B-8C5F-5963B4A9A2F1} - System32\Tasks\HPCeeScheduleForLukas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {A1A9A629-5E5F-4672-84E3-32B41BC8AA68} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28] (Hewlett-Packard)
Task: {A3CBCBBF-5D98-466E-BEE6-2D70E0DA4FCC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-27] (Google Inc.)
Task: {A6C797E0-38C6-4167-BFD9-6D99DFE2FA5F} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink)
Task: {BB279EFA-8689-449D-97B0-07163AD150B8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
Task: {BDA52C8D-979E-4723-B4FC-D95E7BF41595} - \Plus-HD-1.7-firefoxinstaller No Task File <==== ATTENTION
Task: {C2AFEA30-6F5D-4D42-976D-A6343D62D982} - \EPUpdater No Task File <==== ATTENTION
Task: {D22E47A3-1404-4E4F-8CB8-C2CD876B88C6} - \Plus-HD-1.7-updater No Task File <==== ATTENTION
Task: {D6DC346D-9365-447A-B858-F8F967DE1A33} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {DA3215FE-6807-4861-A4A5-94898645D950} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-27] (Google Inc.)
Task: {DD670596-ACE7-4E4F-9242-E11E117C678C} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {DF2483E4-1FA0-4C20-9F1D-935BA4918AAB} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)
Task: {E0E21231-8E52-4DC6-92C7-9B87C9AE06F1} - \Plus-HD-1.7-enabler No Task File <==== ATTENTION
Task: {E12DD965-81F2-4224-92B4-2B8BA8A3DB18} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {E26BB19D-DB26-4231-ACCF-4AD10CBD97A4} - \Plus-HD-1.7-codedownloader No Task File <==== ATTENTION
Task: {E4FB4286-4248-4052-95E4-B64B861369F6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FCEA6CBE-77B8-40E1-BE26-B90E47F60FE4} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLUKAS-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLukas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Re-markit Update.job => C:\Program Files (x86)\Re-markit-soft\Re-markitG66.exe <==== ATTENTION
Task: C:\Windows\Tasks\Re-markit_wd.job => C:\Program Files (x86)\Re-markit-soft\Re-markitd.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2008-09-09 11:22 - 2008-09-09 11:22 - 00022016 _____ () C:\Windows\System32\sst1cl6.dll
2013-11-16 13:09 - 2012-08-16 23:55 - 00268912 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2rui.dll
2013-11-16 13:09 - 2012-08-16 23:57 - 00469616 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2r64.dll
2013-11-16 13:09 - 2012-09-11 19:13 - 00538224 _____ () C:\Program Files\Microsoft Office 15\ClientX64\StreamServer.dll
2014-05-10 15:14 - 2014-05-10 15:14 - 00143872 _____ () C:\Program Files (x86)\Re-markit-soft\Re-markitry161.exe
2011-11-28 16:06 - 2011-04-15 05:16 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-10-06 21:06 - 2014-05-15 09:14 - 00598072 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2011-05-12 15:13 - 2011-05-12 15:13 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-05-08 03:23 - 2011-05-08 03:23 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-04-27 17:05 - 2011-04-27 17:05 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-10 15:14 - 2014-05-10 15:14 - 00133120 _____ () C:\Program Files (x86)\Re-markit-soft\Re-markitry161.dll
2013-02-22 21:35 - 2014-05-15 09:14 - 36966968 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\libcef.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-01-08 20:08 - 2013-11-19 22:34 - 00152576 _____ () C:\Program Files (x86)\Remote Mouse\FileS.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00417280 _____ () C:\Program Files (x86)\Winamp\nsutil.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00078848 _____ () C:\Program Files (x86)\Winamp\nde.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00064512 _____ () C:\Program Files (x86)\Winamp\zlib.dll
2014-05-20 21:19 - 2014-05-20 21:19 - 00010752 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\auth.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00069120 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\burnlib.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00013824 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\dsp_sps.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00006656 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\enc_fhgaac.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004096 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\enc_flac.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00005632 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\enc_lame.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004096 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\enc_vorbis.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004096 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\enc_wav.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00006144 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\enc_wma.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00023552 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_classicart.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00007168 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_crasher.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00023040 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_ff.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004096 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_find_on_disk.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00011776 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_hotkeys.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00041984 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_jumpex.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00041984 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_jumpex_original.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00021504 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_ml.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00009728 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_nopro.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00007168 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_orgler.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00014848 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_play_remove.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00011776 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_skinmanager.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00010240 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_timerestore.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00008192 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_tray.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00010752 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\gen_undo.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00005120 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_avi.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00014336 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_cdda.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00006656 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_dshow.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00005632 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_flac.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00003584 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_flv.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00003584 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_linein.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00020480 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_midi.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004608 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_mkv.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00018944 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_mod.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00023040 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_mp3.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00005120 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_mp4.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00011776 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_nsv.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00003584 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_swf.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00011264 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_vorbis.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00006656 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_wav.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00005632 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_wave.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00015360 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_wm.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004608 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\in_wv.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00003584 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_addons.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00006656 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_autotag.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00005120 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_bookmarks.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00008704 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_devices.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00047616 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_disc.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00009728 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_downloads.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004608 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_enqplay.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00008704 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_history.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00005120 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_impex.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00056320 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_local.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00003584 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_nowplaying.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00014336 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_online.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004096 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_orb.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00012800 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_playlists.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00034816 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_plg.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00047104 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_pmp.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00005120 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_rg.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00008192 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_transcode.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00014848 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ml_wire.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00036352 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\ombrowser.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00006144 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\out_disk.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00016384 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\out_ds.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00007680 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\out_wave.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00003072 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\playlist.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004608 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\pmp_activesync.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00020480 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\pmp_android.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00036864 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\pmp_ipod.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00003584 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\pmp_njb.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004096 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\pmp_p4s.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00011776 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\pmp_usb.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00039424 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\pmp_wifi.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00006144 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\tagz.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00088064 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\vis_avs.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00156160 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\vis_milk2.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00007680 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\vis_nsfs.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00206336 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\winamp.lng
2014-05-20 21:19 - 2014-05-20 21:19 - 00004096 _____ () C:\Users\Lukas\AppData\Local\Temp\WLZC503.tmp\winampa.lng
2012-06-20 18:14 - 2012-09-27 13:57 - 00023552 _____ () C:\Program Files (x86)\Winamp\System\albumart.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00174080 _____ () C:\Program Files (x86)\Winamp\System\auth.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00019456 _____ () C:\Program Files (x86)\Winamp\System\bmp.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00044544 _____ () C:\Program Files (x86)\Winamp\System\devices.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00016896 _____ () C:\Program Files (x86)\Winamp\System\dlmgr.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00014336 _____ () C:\Program Files (x86)\Winamp\System\filereader.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00019456 _____ () C:\Program Files (x86)\Winamp\System\gif.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00016384 _____ () C:\Program Files (x86)\Winamp\System\gracenote.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00623616 _____ () C:\Program Files (x86)\Winamp\System\jnetlib.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00154624 _____ () C:\Program Files (x86)\Winamp\System\jpeg.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00084480 _____ () C:\Program Files (x86)\Winamp\System\playlist.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00087552 _____ () C:\Program Files (x86)\Winamp\System\png.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00013824 _____ () C:\Program Files (x86)\Winamp\System\primo.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00021504 _____ () C:\Program Files (x86)\Winamp\System\tagz.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00035328 _____ () C:\Program Files (x86)\Winamp\System\timer.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00091136 _____ () C:\Program Files (x86)\Winamp\System\xml.w5s
2012-06-20 18:14 - 2012-09-27 13:57 - 00068608 _____ () C:\Program Files (x86)\Winamp\Plugins\in_avi.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00102400 _____ () C:\Program Files (x86)\Winamp\Plugins\in_cdda.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00072192 _____ () C:\Program Files (x86)\Winamp\Plugins\in_dshow.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00061440 _____ () C:\Program Files (x86)\Winamp\Plugins\in_flac.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00043008 _____ () C:\Program Files (x86)\Winamp\Plugins\in_flv.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00007168 _____ () C:\Program Files (x86)\Winamp\Plugins\in_linein.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00109568 _____ () C:\Program Files (x86)\Winamp\Plugins\in_midi.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00049152 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mkv.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00164864 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mod.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00290816 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp3.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00052736 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp4.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00075264 _____ () C:\Program Files (x86)\Winamp\Plugins\in_nsv.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00023552 _____ () C:\Program Files (x86)\Winamp\Plugins\in_swf.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00253440 _____ () C:\Program Files (x86)\Winamp\Plugins\in_vorbis.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00016896 _____ () C:\Program Files (x86)\Winamp\Plugins\in_wave.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00253440 _____ () C:\Program Files (x86)\Winamp\libsndfile.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00313344 _____ () C:\Program Files (x86)\Winamp\Plugins\in_wm.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00022528 _____ () C:\Program Files (x86)\Winamp\Plugins\out_disk.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00052224 _____ () C:\Program Files (x86)\Winamp\Plugins\out_ds.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00018432 _____ () C:\Program Files (x86)\Winamp\Plugins\out_wave.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 01737728 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_ff.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00083968 _____ () C:\Program Files (x86)\Winamp\tataki.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00340992 _____ () C:\Program Files (x86)\Winamp\Plugins\freeform\wacs\freetype\freetype.wac
2012-06-20 18:14 - 2012-09-27 13:57 - 00028160 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_hotkeys.dll
2011-11-11 00:10 - 2012-09-27 13:57 - 00185344 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_jumpex.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00318976 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_ml.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00294912 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_local.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00084480 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_playlists.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00124928 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_online.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00249856 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_devices.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00201728 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_disc.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00240640 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_pmp.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00060928 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_android.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00170496 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_ipod.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00020480 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_njb.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00118272 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_p4s.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00053760 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_usb.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00113664 _____ () C:\Program Files (x86)\Winamp\Plugins\pmp_wifi.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00028672 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_bookmarks.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00052224 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_history.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00028672 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_autotag.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00057344 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_impex.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00083456 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_plg.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00033792 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_rg.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00032256 _____ () C:\Program Files (x86)\Winamp\Plugins\ml_transcode.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00057344 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_orgler.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00025600 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_tray.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00180224 _____ () C:\Program Files (x86)\Winamp\libmp4v2.dll
2012-06-20 18:14 - 2012-09-27 13:57 - 00922112 _____ () C:\Program Files (x86)\Winamp\System\aacdec.w5s
2013-08-26 20:43 - 2013-08-26 20:43 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1beb84c27c2edeb38839916524b9df4d\IsdiInterop.ni.dll
2011-11-28 16:05 - 2011-05-20 10:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-10-06 21:06 - 2014-05-15 09:14 - 00886840 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\libglesv2.dll
2013-10-06 21:06 - 2014-05-15 09:14 - 00108600 _____ () C:\Users\Lukas\AppData\Roaming\Spotify\Data\libegl.dll
2011-04-27 17:05 - 2011-04-27 17:05 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2014-05-30 16:45 - 2014-05-30 16:45 - 00043008 _____ () c:\users\lukas\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphx7m5n.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Lukas\AppData\Roaming\Dropbox\bin\libcef.dll
2014-05-22 15:43 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-22 15:43 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-22 15:43 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-22 15:43 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-22 15:43 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
2014-05-22 15:43 - 2014-05-14 01:40 - 13695816 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/01/2014 07:30:07 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10202

Error: (06/01/2014 07:30:07 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10202

Error: (06/01/2014 07:30:07 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2014 07:30:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9141

Error: (06/01/2014 07:30:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9141

Error: (06/01/2014 07:30:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2014 07:30:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8080

Error: (06/01/2014 07:30:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8080

Error: (06/01/2014 07:30:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2014 07:30:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7082


System errors:
=============
Error: (05/30/2014 03:49:47 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}

Error: (05/26/2014 11:42:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Wpm Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/20/2014 09:19:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "iPod-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (05/20/2014 09:19:31 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst iPod-Dienst erreicht.

Error: (05/20/2014 09:19:31 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053iPod Service{063D34A4-BF84-4B8D-B699-E8CA06504DDE}

Error: (05/20/2014 09:18:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (05/19/2014 03:03:58 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy6" den Befehl "chkdsk" aus.

Error: (05/19/2014 01:01:05 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy6" den Befehl "chkdsk" aus.

Error: (05/15/2014 04:27:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (05/15/2014 04:27:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update-Dienst (gupdate) erreicht.


Microsoft Office Sessions:
=========================
Error: (06/01/2014 07:30:07 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10202

Error: (06/01/2014 07:30:07 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10202

Error: (06/01/2014 07:30:07 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2014 07:30:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9141

Error: (06/01/2014 07:30:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9141

Error: (06/01/2014 07:30:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2014 07:30:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8080

Error: (06/01/2014 07:30:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8080

Error: (06/01/2014 07:30:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2014 07:30:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7082


CodeIntegrity Errors:
===================================
  Date: 2013-11-18 09:11:30.448
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-18 09:11:30.397
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-18 09:09:03.168
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Lukas\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-18 09:09:03.116
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Lukas\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-18 09:09:03.066
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Lukas\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-18 09:09:03.018
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Lukas\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-18 09:09:02.933
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Lukas\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-18 09:09:02.883
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Lukas\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-12-03 18:36:35.509
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-12-03 18:36:35.489
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 61%
Total physical RAM: 4043.86 MB
Available physical RAM: 1553.28 MB
Total Pagefile: 8085.9 MB
Available Pagefile: 2955.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:680.46 GB) (Free:520.7 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:17.88 GB) (Free:1.92 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 527073E8)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=680 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=18 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================
--- --- ---

schrauber 03.06.2014 10:04
Adware & Co. deinstallieren

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:




Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Lukas07 03.06.2014 12:20
mbam.txt:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 03.06.2014
Suchlauf-Zeit: 12:10:56
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.06.03.03
Rootkit Datenbank: v2014.06.02.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Lukas

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 292211
Verstrichene Zeit: 14 Min, 25 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, 1856, Löschen bei Neustart, [13fc096b85f6e84ec120183f5fa256aa]

Module: 1
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, Löschen bei Neustart, [55ba33415f1ccf6724d0f4b8778b8b75],

Registrierungsschlüssel: 20
PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginService, In Quarantäne, [13fc096b85f6e84ec120183f5fa256aa],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [ee21abc9b6c5f343f33acf668a7825db],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [ee21abc9b6c5f343f33acf668a7825db],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [ee21abc9b6c5f343f33acf668a7825db],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [ee21abc9b6c5f343f33acf668a7825db],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [ee21abc9b6c5f343f33acf668a7825db],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [ee21abc9b6c5f343f33acf668a7825db],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [ee21abc9b6c5f343f33acf668a7825db],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, In Quarantäne, [5db201733a4138fe7d26a102bb47f50b],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [d9361d5748334aece815ac25b64dc53b],
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, In Quarantäne, [bf50f77d007b1e18bbc9c4df867c9e62],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21636, In Quarantäne, [1ff03b3925565bdbfea5099aed1513ed],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [24eb76fecdaeb680f30ac30e9370b54b],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-1.7, Löschen bei Neustart, [57b80b69097212243912198abb47ae52],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3356171927-603591009-3139132438-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, In Quarantäne, [f11e4232324995a15e46d5ce19e9ee12],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3356171927-603591009-3139132438-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Freeven, In Quarantäne, [709ff084d1aa9d9956a9c5e1bd45c739],
PUP.Optional.Qone8, HKU\S-1-5-21-3356171927-603591009-3139132438-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [a6691b59c1ba81b538c4923fff042ad6],
PUP.Optional.DealPly.A, HKU\S-1-5-21-3356171927-603591009-3139132438-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\gaiilaahiahdejapggenmdmafpmbipje, In Quarantäne, [e02ffc78a7d4e650164abdd733cf48b8],
PUP.Optional.CrossRider.M, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311211154}, In Quarantäne, [59b698dc582348ee8a274125ee16a45c],
PUP.Optional.CrossRider.M, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311211154}, In Quarantäne, [59b698dc582348ee8a274125ee16a45c],

Registrierungswerte: 1
PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_start@gmail.com, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com, In Quarantäne, [4cc35a1abebd3501dd648b19aa58926e]

Registrierungsdaten: 14
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX, Gut: (firefox.exe), Schlecht: (C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX),Ersetzt,[32dd3b39691214226326c594966ec33d]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}),Ersetzt,[66a9551f017af541176ac8916a9a33cd]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX),Ersetzt,[917e21532655072ffb8485d457ad5fa1]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX),Ersetzt,[7b9474003645bd798cf74e0b6c98857b]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|CustomizeSearch, hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}),Ersetzt,[b45bde9606756cca196ccc8d47bd8080]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}),Ersetzt,[b25dd2a2f289a09671169dbcd430659b]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[54bb61134437d95de0d2a2c1f41028d8]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX, Gut: (firefox.exe), Schlecht: (C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX),Ersetzt,[c04fd79d5f1c8aaca4e574e5788cd729]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}),Ersetzt,[5fb0beb6a4d71f17bec3b0a9dc28ab55]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX),Ersetzt,[8f80c1b31764b5814b3438210df725db]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX),Ersetzt,[78978ce80675d066582b83d612f23bc5]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[89861b59186344f2a30f590a3bc97888]
PUP.Optional.WebsSearches.A, HKU\S-1-5-21-3356171927-603591009-3139132438-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX),Ersetzt,[8b8489eb0a711521354f1d3c64a0758b]
PUP.Optional.WebsSearches.A, HKU\S-1-5-21-3356171927-603591009-3139132438-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX),Ersetzt,[e22d92e2d6a5de58afd1c594b64ecc34]

Ordner: 58
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, Löschen bei Neustart, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService, Löschen bei Neustart, [d837bfb56714fc3a95467a0506fc31cf],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update, In Quarantäne, [d837bfb56714fc3a95467a0506fc31cf],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\include, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\include\tools, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\en, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\en-US, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\es, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\es-419, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr-BE, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr-CA, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr-CH, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr-LU, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\it, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\it-CH, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\pl, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\pt-BR, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\ru, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\ru-MO, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\tr, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\vi, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\zh-CN, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\zh-TW, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\weather, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\defaults, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\defaults\preferences, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],

Dateien: 148
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, Löschen bei Neustart, [13fc096b85f6e84ec120183f5fa256aa],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, In Quarantäne, [ee21abc9b6c5f343f33acf668a7825db],
PUP.Optional.SupTab.A, C:\Users\Lukas\AppData\Roaming\SupTab\SupTab.dll, In Quarantäne, [9e7112628bf038fe1f2f52e3926e54ac],
PUP.Optional.Feven.A, C:\$RECYCLE.BIN\S-1-5-21-3356171927-603591009-3139132438-1000\$ROTQSNG\utils.exe, In Quarantäne, [f81783f15e1d2115d506c57ab34d10f0],
PUP.Optional.WpManager, C:\$RECYCLE.BIN\S-1-5-21-3356171927-603591009-3139132438-1000\$RD6AP8P\wprotectmanager.exe, In Quarantäne, [bc5330449edd8ea8460168fa29d827d9],
PUP.Optional.crossRider.A, C:\$RECYCLE.BIN\S-1-5-21-3356171927-603591009-3139132438-1000\$RGKNN28\utils.exe, In Quarantäne, [709f9cd892e90f2725c365da966a936d],
PUP.Optional.DomaIQ, C:\Users\Lukas\AppData\Local\Temp\dfs869.tmp, In Quarantäne, [d837e68e0f6c74c2d3e3a18c91719d63],
Backdoor.Bot, C:\Users\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\android.exe, In Quarantäne, [64ab8fe55d1e66d04a06c4aadb267e82],
PUP.Optional.ScramblePacker.A, C:\Users\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\freeven-pro.exe, In Quarantäne, [34dbb7bd4437b383ef54b5c8837e14ec],
PUP.Optional.SkyTech.A, C:\Users\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\lly_webssearches.exe .exe, In Quarantäne, [38d7ee86dd9e47efcbf65304a25ffd03],
PUP.Optional.ScramblePacker.A, C:\Users\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\mediaplayerplus.exe, In Quarantäne, [42cdb8bc9eddec4ab390611c10f1cb35],
PUP.Optional.SkyTech.A, C:\Users\Lukas\AppData\Local\Temp\fullpackage_temp1399727694\alilog.dll, In Quarantäne, [e52a353f285386b06aaefa38cd337f81],
PUP.Optional.IePluginService.A, C:\Users\Lukas\AppData\Local\Temp\fullpackage_temp1399727694\tmp\SupTab.exe, In Quarantäne, [c14e5123a2d9979f6978c691ce3327d9],
PUP.Optional.WpManager, C:\Users\Lukas\AppData\Local\Temp\fullpackage_temp1399727694\tmp\wpm.exe, In Quarantäne, [bb54f084fd7eaa8cc97e9ac846bbd32d],
Backdoor.Bot, C:\Users\Lukas\AppData\Local\Temp\android\android.exe, In Quarantäne, [7c9388ec225945f1f65a5c12e918e917],
PUP.Optional.DomaIQ, C:\Users\Lukas\Downloads\Java.exe, In Quarantäne, [838cf0848deecc6ac0e4f94ad7294db3],
PUP.Optional.OutBrowse, C:\Users\Lukas\Downloads\setup.exe, In Quarantäne, [dc332e4665163bfb4092a1dafd045ca4],
PUP.Optional.BetterDeals.A, C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage, Löschen bei Neustart, [c24d0d677b00a195c2daefa240c208f8],
PUP.Optional.BetterDeals.A, C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal, In Quarantäne, [be5199db4239fb3bd8c4aee342c0ee12],
PUP.Optional.Softonic.A, C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.softonic.com_0.localstorage, In Quarantäne, [000fa4d0403be650a341f2a1847ed22e],
PUP.Optional.Softonic.A, C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.softonic.com_0.localstorage-journal, In Quarantäne, [d936cda74f2cb2844a9a197a80820ff1],
PUP.Optional.LiveLyrics.A, C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage, In Quarantäne, [c748195b89f237ff272b0b8cd03245bb],
PUP.Optional.LiveLyrics.A, C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage-journal, In Quarantäne, [bb54a0d4bebd003653ffb5e28979f50b],
PUP.Optional.Superfish.A, C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Löschen bei Neustart, [e7280b695a2183b3bd9637609a68bb45],
PUP.Optional.Superfish.A, C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Löschen bei Neustart, [9f7085ef4932e353f063b4e3a85ab24e],
PUP.Optional.WebsSearches.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml, In Quarantäne, [ca45f282a5d6989e4046a5fea35f08f8],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, Löschen bei Neustart, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterfacef32.dll, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\RSHP.exe, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv32.dll, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv64.dll, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [55ba33415f1ccf6724d0f4b8778b8b75],
PUP.Optional.FunMoods.A, C:\Users\Lukas\AppData\Local\funmoods_2.3.crx, In Quarantäne, [957a90e4b2c9ef4712bdc91931d2d927],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update\conf, In Quarantäne, [d837bfb56714fc3a95467a0506fc31cf],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome.manifest, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\install.rdf, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\index.html, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\quick_start.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\include\tools\about_blank_hoo k.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\include\tools\popup_image_hel per.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\include\tools\urlrequestor.js , In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\js\common.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\js\doT.min.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\js\ga.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\js\jquery-2.1.0.min.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\js\jquery.autocomplete.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\js\js.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\content\js\xagainit.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\arrow.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\default_add_logo.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\default_add_logo_hover.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\googlelogo2.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\icon.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\loading.gif, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\logo.ico, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\logo.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\logo32.ico, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\style.css, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\chrome\skin\weather\0.png, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\addonmanager.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\aes.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\config.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\dialogs.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\last_tab.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\misc.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\properties.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\remoterequest.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\restoreprefs.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.QuickStart.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\quick_start@gmail.com\modules\settings.js, In Quarantäne, [33dcf87c9be05adc8fefc6bd50b29a66],
PUP.Optional.WebsSearches.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://istart.webssearches.com/?type=hp&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX");), Ersetzt,[bc530b69384350e60e419df3ff059070]
PUP.Optional.WebsSearches.A, C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://istart.webssearches.com/newtab/?type=nt&ts=1399727712&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX");), Ersetzt,[917e2054007b4aec4a06ddb3689cf907]

Physische Sektoren: 0
(No malicious items detected)


(end)



AdwCleaner[S1]:AdwCleaner Logfile:
Code:
# AdwCleaner v3.211 - Bericht erstellt am 03/06/2014 um 12:53:02
# Aktualisiert 26/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Lukas - LUKAS-HP
# Gestartet von : C:\Users\Lukas\Downloads\adwcleaner_3.211.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Uniblue
Ordner Gelöscht : C:\Users\Lukas\AppData\Roaming\SupTab
Ordner Gelöscht : C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions\staged\EFGLQA@78ETGYN-0W7FN789T87.COM
Ordner Gelöscht : C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg
Ordner Gelöscht : C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Datei Gelöscht : C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\0\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\YourFile DownloaderUpdate

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyDeltaTB_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyDeltaTB_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASMANCS
Schlüssel Gelöscht : HKCU\Software\GoforFiles
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software
Schlüssel Gelöscht : HKLM\Software\GoforFiles
Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions
Schlüssel Gelöscht : HKLM\Software\SupTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\installedbrowserextensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Speedchecker Limited

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16736

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v21.0 (de)

[ Datei : C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js ]


[ Datei : C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "webssearches");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "webssearches");
Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);

-\\ Google Chrome v35.0.1916.114

[ Datei : C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=49&cc=&mi=36714090000000000000ac8112dade55
Gelöscht [Search Provider] : hxxp://www.delta-search.com/?q={searchTerms}&affID=119995&tt=120613_ndt&babsrc=SP_ss&mntrId=3671AC8112DADE55
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=120007&babsrc=SP_ss_gin2g&mntrId=3671AC8112DADE55
Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=3804b800-0a4d-4689-b2b3-99bc2bfa1ca7&searchtype=ds&q={searchTerms}&installDate=01/01/1970
Gelöscht [Search Provider] : hxxp://search.snapdo.com/?q={searchTerms}&category=Web&dpid=us&lan=de&start=1&st=ds&publisher=snapdoopencandy&country=us&feedid=infospace
Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?publisher=Vittalia&dpid=Vittalia&co=DE&userid=3b4af811-c3c0-32fc-2227-8acd9865817a&searchtype=ds&q={searchTerms}&installDate={installDate}
Gelöscht [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=dspp&ts=1399916399&from=tugs&uid=HitachiXHTS547575A9E384_J2190054D02SNCD02SNCX&q={searchTerms}
Gelöscht [Extension] : mkcedibhemacmilmkpndpkoidlnmgngg
Gelöscht [Extension] : nikpibnbobmbdbheedjfogjlikpgpnhp

*************************

AdwCleaner[R0].txt - [23843 octets] - [18/11/2013 10:37:31]
AdwCleaner[R1].txt - [5815 octets] - [03/06/2014 12:43:36]
AdwCleaner[R2].txt - [5875 octets] - [03/06/2014 12:46:23]
AdwCleaner[S0].txt - [19747 octets] - [18/11/2013 10:38:41]
AdwCleaner[S1].txt - [5408 octets] - [03/06/2014 12:53:02]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [5468 octets] ##########
--- --- ---




JRT.txt:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Lukas on 03.06.2014 at 13:02:25,96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho4A2A.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho7564.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho79ED.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE84C.tmp



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Lukas\AppData\Roaming\mozilla\firefox\profiles\4a7g1a51.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.06.2014 at 13:09:13,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




FRST.txt:
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Lukas (administrator) on LUKAS-HP on 03-06-2014 13:13:13
Running from C:\Users\Lukas\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe
(Spotify Ltd) C:\Users\Lukas\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(RemoteMouse.net) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2799912 2013-06-08] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2013-06-08] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2013-06-08] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-06-14] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Magic Desktop for HP notification] => C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-27] (Easybits)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-04-03] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-05-27] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [HP Deskjet 3070 B611 series (NET)] => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2676584 2011-06-08] (Hewlett-Packard Co.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Spotify] => C:\Users\Lukas\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Spotify Web Helper] => C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Remote Mouse] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [1200640 2014-04-01] (RemoteMouse.net)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20924064 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SPFS Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SPFS Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-09-03] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4E587E9A-DAA3-4509-AA8C-6891599FDD78}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{CD29485B-D0A0-4C7E-8EFB-DEDA0C523C00}: [NameServer]193.189.244.206 193.189.244.225

FireFox:
========
FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default
FF SearchEngineOrder.3: Bing
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\PROGRA~2\MOZILL~1\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lukas\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\amazon-icon@giga.de [2013-11-16]
FF Extension: Snap.Do  - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7} [2013-06-08]
FF Extension: Snap.Do  - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a} [2013-11-16]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2013-07-26]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2012-10-04]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR HomePage:
CHR Extension: (Website Logon) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe [2014-06-03]
CHR Extension: (Google Docs) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-03]
CHR Extension: (Google Drive) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-03]
CHR Extension: (YouTube) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-27]
CHR Extension: (Google-Suche) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-27]
CHR Extension: (Google Wallet) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (Google Mail) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-27]
CHR HKLM-x32\...\Chrome\Extension: [aepeildmfnnehghlknddebgjghlompfe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-02-11]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1494144 2012-09-11] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-16] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-17] (Avira Operations GmbH & Co. KG)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-03] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-03 13:10 - 2014-06-03 13:10 - 00000000 ____D () C:\Users\Lukas\Downloads\FRST-OlderVersion
2014-06-03 13:09 - 2014-06-03 13:09 - 00001006 _____ () C:\Users\Lukas\Desktop\JRT.txt
2014-06-03 13:02 - 2014-06-03 13:02 - 01016261 _____ (Thisisu) C:\Users\Lukas\Downloads\JRT.exe
2014-06-03 12:44 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-03 12:43 - 2014-06-03 12:43 - 01327971 _____ () C:\Users\Lukas\Downloads\adwcleaner_3.211.exe
2014-06-03 12:42 - 2014-06-03 12:42 - 00046557 _____ () C:\mbam.txt
2014-06-03 12:09 - 2014-06-03 12:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-03 12:09 - 2014-06-03 12:09 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-03 12:09 - 2014-06-03 12:09 - 00001102 _____ () C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-03 12:09 - 2014-06-03 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-03 12:09 - 2014-06-03 12:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-03 12:09 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-03 12:09 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-03 12:09 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-03 12:06 - 2014-06-03 12:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-03 11:38 - 2014-06-03 11:38 - 00001264 _____ () C:\Users\Lukas\Desktop\Revo Uninstaller.lnk
2014-06-03 11:38 - 2014-06-03 11:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-06-03 11:37 - 2014-06-03 11:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Lukas\Downloads\revosetup95.exe
2014-06-02 14:04 - 2014-06-02 14:05 - 00066293 _____ () C:\Users\Lukas\Downloads\Addition.txt
2014-06-02 14:01 - 2014-06-03 13:13 - 00025004 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-06-02 14:01 - 2014-06-03 13:10 - 02068992 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-06-02 13:07 - 2014-06-02 13:07 - 00016919 _____ () C:\Users\Lukas\Documents\Anmeldung.odt
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\ProgramData\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\Program Files\iTunes
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-02 12:04 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iPod
2014-05-21 17:34 - 2014-05-21 17:35 - 51618755 _____ () C:\Users\Lukas\Downloads\Alle Farben.zip
2014-05-10 15:15 - 2014-06-03 11:51 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-05-06 10:24 - 2014-06-03 12:57 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\DropboxMaster
2014-05-06 10:24 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\ProgramData\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

==================== One Month Modified Files and Folders =======

2014-06-03 13:13 - 2014-06-02 14:01 - 00025004 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-06-03 13:13 - 2013-11-18 01:23 - 00000000 ____D () C:\FRST
2014-06-03 13:13 - 2012-09-27 12:34 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Temp
2014-06-03 13:10 - 2014-06-03 13:10 - 00000000 ____D () C:\Users\Lukas\Downloads\FRST-OlderVersion
2014-06-03 13:10 - 2014-06-02 14:01 - 02068992 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-06-03 13:09 - 2014-06-03 13:09 - 00001006 _____ () C:\Users\Lukas\Desktop\JRT.txt
2014-06-03 13:04 - 2009-07-14 06:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-03 13:04 - 2009-07-14 06:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-03 13:02 - 2014-06-03 13:02 - 01016261 _____ (Thisisu) C:\Users\Lukas\Downloads\JRT.exe
2014-06-03 13:00 - 2011-11-28 16:09 - 01383352 _____ () C:\Windows\WindowsUpdate.log
2014-06-03 13:00 - 2011-09-03 10:22 - 00654852 _____ () C:\Windows\system32\perfh007.dat
2014-06-03 13:00 - 2011-09-03 10:22 - 00130434 _____ () C:\Windows\system32\perfc007.dat
2014-06-03 13:00 - 2009-07-14 07:13 - 01500294 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-03 12:58 - 2013-02-22 21:34 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Spotify
2014-06-03 12:58 - 2012-10-16 12:03 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Dropbox
2014-06-03 12:57 - 2014-06-03 12:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-03 12:57 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\DropboxMaster
2014-06-03 12:57 - 2012-10-16 12:05 - 00000000 ___RD () C:\Users\Lukas\Dropbox
2014-06-03 12:54 - 2012-09-27 13:12 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-03 12:54 - 2010-11-21 05:47 - 00458792 _____ () C:\Windows\PFRO.log
2014-06-03 12:54 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-03 12:54 - 2009-07-14 06:51 - 00084819 _____ () C:\Windows\setupact.log
2014-06-03 12:53 - 2013-11-18 10:37 - 00000000 ____D () C:\AdwCleaner
2014-06-03 12:46 - 2013-02-14 15:33 - 00000338 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-06-03 12:43 - 2014-06-03 12:43 - 01327971 _____ () C:\Users\Lukas\Downloads\adwcleaner_3.211.exe
2014-06-03 12:42 - 2014-06-03 12:42 - 00046557 _____ () C:\mbam.txt
2014-06-03 12:34 - 2013-09-14 10:50 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForLukas.job
2014-06-03 12:24 - 2012-10-24 18:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-03 12:24 - 2012-09-27 13:12 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-03 12:09 - 2014-06-03 12:09 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-03 12:09 - 2014-06-03 12:09 - 00001102 _____ () C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-03 12:09 - 2014-06-03 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-03 12:09 - 2014-06-03 12:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-03 12:09 - 2013-11-18 12:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-03 12:06 - 2014-06-03 12:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-03 12:00 - 2012-12-02 16:06 - 00001841 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-06-03 12:00 - 2012-11-28 00:16 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-03 12:00 - 2012-11-28 00:16 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-03 12:00 - 2012-11-28 00:16 - 00001147 _____ () C:\ProgramData\Desktop\Mozilla Firefox.lnk
2014-06-03 12:00 - 2012-09-27 13:16 - 00002255 _____ () C:\Users\Lukas\Desktop\Google Chrome.lnk
2014-06-03 12:00 - 2012-09-27 12:41 - 00001421 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-03 11:51 - 2014-05-10 15:15 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-06-03 11:49 - 2012-11-28 00:14 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\MozillaFirefoxPackages
2014-06-03 11:38 - 2014-06-03 11:38 - 00001264 _____ () C:\Users\Lukas\Desktop\Revo Uninstaller.lnk
2014-06-03 11:38 - 2014-06-03 11:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-06-03 11:37 - 2014-06-03 11:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Lukas\Downloads\revosetup95.exe
2014-06-03 10:28 - 2013-02-22 23:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Skype
2014-06-02 20:07 - 2012-09-27 12:41 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{1FBC2764-466E-472C-9615-0F594618C744}
2014-06-02 15:17 - 2013-02-22 21:35 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Spotify
2014-06-02 14:05 - 2014-06-02 14:04 - 00066293 _____ () C:\Users\Lukas\Downloads\Addition.txt
2014-06-02 13:07 - 2014-06-02 13:07 - 00016919 _____ () C:\Users\Lukas\Documents\Anmeldung.odt
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\ProgramData\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iTunes
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-02 12:04 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iPod
2014-06-02 11:59 - 2013-09-14 10:50 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForLukas
2014-06-02 11:58 - 2012-12-22 15:15 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-06-02 11:58 - 2012-09-29 14:14 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-05-30 16:45 - 2012-12-19 19:24 - 00001649 _____ () C:\Windows\wininit.ini
2014-05-30 16:45 - 2012-10-16 12:05 - 00000979 _____ () C:\Users\Lukas\Desktop\Dropbox.lnk
2014-05-30 16:45 - 2012-10-16 12:04 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-30 16:45 - 2012-09-27 12:41 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-22 10:21 - 2013-11-17 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-22 10:21 - 2013-11-17 13:29 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-21 17:35 - 2014-05-21 17:34 - 51618755 _____ () C:\Users\Lukas\Downloads\Alle Farben.zip
2014-05-20 21:19 - 2012-09-27 13:56 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Winamp
2014-05-15 16:32 - 2012-10-06 15:21 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2014-05-15 16:32 - 2012-10-06 15:21 - 00002019 _____ () C:\ProgramData\Desktop\Adobe Reader X.lnk
2014-05-15 16:32 - 2011-09-03 00:56 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-14 18:24 - 2012-10-24 18:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:24 - 2012-10-24 18:52 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 18:24 - 2012-10-24 18:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-12 07:26 - 2014-06-03 12:09 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-03 12:09 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-03 12:09 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-10 15:14 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-05-10 15:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-05-10 01:19 - 2012-09-27 13:12 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 01:19 - 2012-09-27 13:12 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 10:24 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\ProgramData\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-06 10:23 - 2013-02-22 23:40 - 00000000 ____D () C:\ProgramData\Skype
2014-05-06 10:20 - 2012-12-28 17:38 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-05-05 19:12 - 2012-11-26 11:42 - 00003218 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForLUKAS-HP$
2014-05-05 19:12 - 2012-11-26 11:42 - 00000342 _____ () C:\Windows\Tasks\HPCeeScheduleForLUKAS-HP$.job
2014-05-04 12:00 - 2012-12-28 17:38 - 00001949 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-05-04 12:00 - 2012-12-28 17:38 - 00001949 _____ () C:\ProgramData\Desktop\CDBurnerXP.lnk
2014-05-04 12:00 - 2012-12-28 17:38 - 00001899 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk

Some content of TEMP:
====================
C:\Users\Lukas\AppData\Local\Temp\avgnt.exe
C:\Users\Lukas\AppData\Local\Temp\BackupSetup.exe
C:\Users\Lukas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprsdw1b.dll
C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe
C:\Users\Lukas\AppData\Local\Temp\RemoteMouse.exe
C:\Users\Lukas\AppData\Local\Temp\sp64126.exe
C:\Users\Lukas\AppData\Local\Temp\UninstallHPSA.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-30 17:54

==================== End Of Log ============================
--- --- ---

--- --- ---



da ich nicht wusste ob die Addition.txt Datei auch wieder benötigt wird habe ich sie angehängt. Der Text wäre sonst zu lang gewesen.Anhang 67392





MERCI!

schrauber 04.06.2014 08:22

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Lukas07 04.06.2014 16:11
Eset:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=c47886a312544d4d90e0d086aef0cbfa
# engine=18549
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-04 01:24:49
# local_time=2014-06-04 03:24:49 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 17111 18647971 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 28007932 153518139 0 0
# scanned=372684
# found=153
# cleaned=0
# scan_time=12491
sh=945274AD21D798D5057E5AD4C6AA083517EF941D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-3356171927-603591009-3139132438-1000\$RGKNN28\54246.crx"
sh=9BAF1CB99F83AAEE59BC60E421E1F737FB8FEC22 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-3356171927-603591009-3139132438-1000\$RGKNN28\54246.xpi"
sh=545DFF1AC741C30D3AB1EBE9F4C30DC00EFE1348 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-3356171927-603591009-3139132438-1000\$ROTQSNG\54248.crx"
sh=9F46A6A0D837DA131480978FCF96BAA46AD39563 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-3356171927-603591009-3139132438-1000\$ROTQSNG\54248.xpi"
sh=F54529D4575CBC2C9FC8017766F79EEE4EC128C1 ft=1 fh=e34d4d021738f841 vn="Variante von Win32/Toolbar.CrossRider.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-1.7\Plus-HD-1.7-bg.exe.vir"
sh=82A558F273A273E25FDDC45662D08AFF4838FDF3 ft=1 fh=d292b157c6c592d0 vn="Variante von Win32/Toolbar.CrossRider.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-1.7\Plus-HD-1.7-buttonutil.exe.vir"
sh=CEAAB586E2C08116263BA3761BD02E038CDCAFDB ft=1 fh=8a94d5ccbe8c7223 vn="Variante von Win64/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-1.7\Plus-HD-1.7-buttonutil64.dll.vir"
sh=F4E34081892F08A87194CDB1DACDCEECB62EB13C ft=1 fh=c4545df90a13c497 vn="Variante von Win64/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-1.7\Plus-HD-1.7-buttonutil64.exe.vir"
sh=25A712DAA4070841DCC31A62AD65C4215B0E8E36 ft=1 fh=3fa978ec809d6074 vn="Win32/Packed.VMDetector.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-1.7\utils.exe.vir"
sh=ACB7D589E75DD96B031086736319F6A0E76BC30B ft=1 fh=6fbea4ce7018d659 vn="MSIL/Vittalia.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\AppsUpdater.exe.vir"
sh=6D337B7209C2E4837F4075D44D5928D0F4BC54E6 ft=1 fh=c71c0011cc6930ff vn="Win32/Vittalia.K evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\KeyGen.dll.vir"
sh=66B8CBF3470DAA3C7DC0C43A0C364089D7D25268 ft=1 fh=b9c4365f5e7e7047 vn="Win32/Vittalia.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\uninstall.exe.vir"
sh=4EF52117B121D0A7D418C0F163C8EB26D432326D ft=1 fh=7f6ebefadd78d6b5 vn="MSIL/Vittalia.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\UpdaterService.exe.vir"
sh=75A377CBC3D3354BF0DD7B5F1D26BFFF73744B92 ft=1 fh=8248de016d1d2bbb vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Wajam\Updater\update.exe.vir"
sh=E21B3507208808596F7FD41C5D637DFE2E8F2FB9 ft=1 fh=5d027b3a7f09e7d3 vn="Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe.vir"
sh=1493DA207C28A525CCD5AB665733C177C88DDCB0 ft=1 fh=f97699e24228a886 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\BrowserHelper.exe.vir"
sh=D97DBC64A2AC8D8958D5D1536E03F61F7C11C7A4 ft=1 fh=f3ee781a13a21e40 vn="Win32/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll.vir"
sh=E363CC39D9C4F97C8F7A010BFB8ECC494B0933E1 ft=1 fh=59fdb13bda948453 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll.vir"
sh=E363CC39D9C4F97C8F7A010BFB8ECC494B0933E1 ft=1 fh=59fdb13bda948453 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO2.dll.vir"
sh=7BC6A50BF2D46AA0627273558A15252D2AA1621D ft=1 fh=85fb64eeaf865640 vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll.vir"
sh=7BC6A50BF2D46AA0627273558A15252D2AA1621D ft=1 fh=85fb64eeaf865640 vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll.vir"
sh=404C9F0A2840BE848050FB479D0024A1B5143831 ft=1 fh=f9f266f9de3c3fec vn="MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.vir"
sh=B7452639282CBE3783B8C394B9ACABD6963A04AE ft=1 fh=3231e75333bf1f00 vn="Variante von Win32/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\SnapDo.exe.vir"
sh=2B0F5C5AAAF88112651408D3AAAAF384374DA758 ft=1 fh=ef095b8d23755afe vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\srbs.dll.vir"
sh=1F7563A9BC05DF0768AB6AD115F8F6831C01F713 ft=1 fh=a9891d78d3612582 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll.vir"
sh=BB35E04100569CDF4BCF5ED2920AE5E80C8A0780 ft=1 fh=ae07b77a9bbdc6b9 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=8ABAA3ACDD4243A376FA4D31BB4FACDF941230C2 ft=1 fh=0c6a57c05d1a4e7d vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=12B1E69262D080A7C726486FAC7FD676A3190ED1 ft=1 fh=e0dcc8dba481b45d vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=53FD58630C36B8E45D79A6927B38B32948D312CF ft=1 fh=a6ad80b72649bca8 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=6E8EFA917B71968435692A48297DB4BD1AC12B65 ft=1 fh=fb3e7f23223bac38 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_20.dll.vi r"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_21.dll.vi r"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_22.dll.vi r"
sh=95544372D9D68E8AFAE5E9DA8B07C14CE5406ABB ft=1 fh=dd489ec711c15129 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_23.dll.vi r"
sh=BA8871127FB23B24A8963B6A5992DED58259E590 ft=1 fh=65df87dcc97c6ea8 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll.vi r"
sh=C88DAF3FB5D3FEC090233FF251F7F0CFC73EF4CD ft=1 fh=b74c7f4df627386b vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_25.dll.vi r"
sh=546EF9DA4D2D5CB8EFD789E9E67F79ACA5005F1A ft=1 fh=8a1799ac1aee65ea vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=0E6843DBA36744738D0F30FDDAB740D28A372FB4 ft=1 fh=6974270e4ea29266 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=22F182F0F8022A99641A3017C5FAC2BA9D5B802D ft=1 fh=b0bf3a6d4887c5a8 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=B5F1188D1AFE2F24771EA8874160CD48D6394F03 ft=1 fh=f5e4a9d3cf5bb2db vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=2379DF0D09B36522E4E4F6F05E572760AF1EB9F2 ft=1 fh=9ebbe0fc1e4478c3 vn="MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lukas\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll.vir"
sh=FD1D7C0C6188D44ABC75C52AA634C63D23320C3F ft=1 fh=75c93c0558080b9f vn="Variante von Win32/DomaIQ.BG evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Local\Google\Chrome\User Data\Default\File System\004\t\00\00000000"
sh=A42869762C1D228506B8C75AD64E569CAA077C39 ft=1 fh=6bc882c50a11bee7 vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q7D32QL2\SpeedUpMyPC-standalone-setup[1].exe"
sh=C348FB57093E21C8A1FA20445F0E15CB6569937A ft=1 fh=7a5be1cd399f8138 vn="Variante von Win32/AdWare.AddLyrics.AM Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\2040-2082_Re-markit.exe"
sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\Cloud_Backup_Setup.exe"
sh=FEB8E6715C316D6499231FD88D0FC48107DDC4AE ft=1 fh=1a6d58f30545a7e9 vn="Win32/SpeedUpMyPC.A evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\speedupmypc.exe"
sh=CCDFEE87B0A44C2DC94247FD64A46633479966E2 ft=1 fh=8ea0c674691f6066 vn="Win32/VOPackage.F evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\VOPackage.exe"
sh=A42869762C1D228506B8C75AD64E569CAA077C39 ft=1 fh=6bc882c50a11bee7 vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Local\Temp\is-HGF10.tmp\SpeedUpMyPC-standalone-setup.exe"
sh=A1280B1F085B8284DC157EC359BD1ADA091CFE7E ft=1 fh=d8aa3384d1249a40 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\LocalLow\DVDVideoSoftTB_DE\ldrtbDVDV.dll"
sh=92E84D2216A7763D580E42FA2493CCF67D0D0560 ft=1 fh=e8efc42494afd9f6 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\LocalLow\DVDVideoSoftTB_DE\tbDVDV.dll"
sh=ABF759CA3BFB16DE62197DD7C417AC5039A43AE0 ft=1 fh=1801af74030ebca1 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\LocalLow\DVDVideoSoftTB_DE\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll"
sh=48C826EF00938F035C91C9F6B3E167CB21D96633 ft=1 fh=59fac0a23423ab50 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_16.dll"
sh=45F4ABE93E1FB333545719948B418FB1207A5085 ft=1 fh=3a58b09db4698b9d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_17.dll"
sh=FED76CBD8D5660DEC60B3F16547372DEE7F87FA6 ft=1 fh=9705b06916654cd4 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_18.dll"
sh=C8F23EFE19C6A36D8921AE5C96F95808EBEFBE05 ft=1 fh=8064b8d931435e04 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_19.dll"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_20.dll"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_21.dll"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_22.dll"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_20.dll"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_21.dll"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_22.dll"
sh=95544372D9D68E8AFAE5E9DA8B07C14CE5406ABB ft=1 fh=dd489ec711c15129 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=BA8871127FB23B24A8963B6A5992DED58259E590 ft=1 fh=65df87dcc97c6ea8 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=C88DAF3FB5D3FEC090233FF251F7F0CFC73EF4CD ft=1 fh=b74c7f4df627386b vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_25.dll"
sh=AA190194CD322F27B81B57B66F0E48B16DDF09FC ft=1 fh=7a1e2a1eaadddca3 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\Downloads\Anwendung\FreeYouTubeToMP3Converter (1).exe"
sh=AA190194CD322F27B81B57B66F0E48B16DDF09FC ft=1 fh=7a1e2a1eaadddca3 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\Downloads\Anwendung\FreeYouTubeToMP3Converter (2).exe"
sh=596D78A7F03D1DAEE86BCCE8DD7713AA60E8F9E4 ft=1 fh=8eaf1d336ac02ccc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\Downloads\Anwendung\FreeYouTubeToMP3Converter.exe"
sh=846D95D63EDE9508EFC7CEEE1D145D7CE62988C3 ft=1 fh=ec23a4ae3310ce50 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\Downloads\Anwendung\FreeYouTubeToMP3Converter_3.11.32.918.exe"
sh=F2F9BC14A6E1E369DF7E7831527E1815BFA8A153 ft=1 fh=46237991348dd238 vn="Win32/WinloadSDA.C evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\Downloads\Anwendung\OpenOffice-Setup.exe"
sh=8BE4C277A62F2400C3B0A20F39297D310774E2AC ft=1 fh=d69c639933d87dfe vn="Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="C:\Documents and Settings\Lukas\Downloads\Anwendung\Setup21_FreeConverter.exe"
sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\102_dealply_m.js.vir"
sh=FC28D62EDB6C0C353E97185BB4B6DC87F5EDED14 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\103_intext_5_m.js.vir"
sh=1AA56806D2545B3773D7C5CCEAE82353BDBB575F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\104_jollywallet_m.js.vir"
sh=0B21E41A47E579081215969619861996F43524B1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\105_corticas_m.js.vir"
sh=7F7359D9F0900191297BFDF5B85D5CDF588CD9EA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\117_coupons_intext_ads_5_m.js.vir"
sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\119_similar_web_m.js.vir"
sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\120_luck_m.js.vir"
sh=AB97A715437A6FC107817A76C99ED8FBCC81BBAD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\123_intext_adv_m.js.vir"
sh=B0DF9F21E3E69C188775A6F9C466B19932C9238A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=D295E3F253D0942BD3114F61DEF5D78DD0FC5BFB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\125_arcadi2_m.js.vir"
sh=3CFE90E3825BB08EB9B4222552FAC05360188207 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\126_revizer_ws_m.js.vir"
sh=031F6CD140ED363E0F137E627AE1FE4DED5714E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\127_revizer_p_m.js.vir"
sh=28ECD06AF56EB424F74BB63563BC79E57C15C2D9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\128_superfish_pricora_m.js.vir"
sh=BB2946641B9FEB2F76D281220A52220336E454E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\135_arcadi3_m.js.vir"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\141_corticas_ru_m.js.js.vir"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\142_intext_fa_m.js.vir"
sh=943F60E8E3F306CF4EE6E844D06FAC7552EE1856 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=0CEB1A073B87956FD1F21F8425B8F76015B1BCD8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js.vir"
sh=441E98540BDEC21B7E534C2B317AE91925F6CEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\159_cortica_rollover_m.js.vir"
sh=C8B01A1511A63AEC3D40B1D045034D76B1E85EFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\171_arcadi2_sourceID_m.js.vir"
sh=078C314715CCC0DE7547172AD4B810FD754115C6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js.vir"
sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir"
sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\179_revizer_p_dynamic_m.js.vir"
sh=73374EAD120BC84FC9C0C827196BCAEB3C20EEB6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\180_bpo_serp_m.js.vir"
sh=24E6E5A06D24A5CC24C0B705FDB089FD4FEC70AC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\184_noproblemppc_m.js.vir"
sh=C450AA599E6408FB93F66538C89B8D8B7799642D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\189_active_sanity.js.vir"
sh=6B3C17F9D4BD40BFCF87831196C40DBA3C4DB14C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\190_pops_5_m.js.vir"
sh=9F07ACC96BC246F25975479E9382CDF88E7D8711 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\191_ciuvo_m.js.vir"
sh=FD93B99EA823374C39DDBC779DEA9C89E9228FC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn\1.25.106_0\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=8E404BAFA9CEAC0628F089B4F1AA879EB5A3404E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\101_cortica_m.js.vir"
sh=957E505E027C2F899F844C27AC8B82EF94AEBB68 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\102_dealply_m.js.vir"
sh=EB047CB7862459E0F74832AEF6A7954A3663373F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\104_jollywallet_m.js.vir"
sh=F2126D68553053F0A5A411866DEC205E27283EDA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\105_corticas_m.js.vir"
sh=A69DBD3502EA9C4EDD7DEAFB23A8FC1C97BAB232 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\107_coupish_m.js.vir"
sh=6FD52BE8732402A681159484442B6AA0351C4243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\108_icm_m.js.vir"
sh=9495814AE107F6739D62A09B1829E5A2DCDA1354 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\119_similar_web_m.js.vir"
sh=D10EA105AB5DB329186B0B6F10541DD58058AEB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\120_luck_m.js.vir"
sh=B985E49C6E0E423954A36327BE2EA87F0F287145 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\123_intext_adv_m.js.vir"
sh=EAAF312959AC9CCF5138825927B5E2D38F57E2E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=62B063E0D121966E9A83C9AB518DADAE47423555 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\125_arcadi2_m.js.vir"
sh=4A86247BDE5D2225473389037FA942819FD677CF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\128_superfish_pricora_m.js.vir"
sh=D9E89F57D3A13498640961F3B9954D67D7EA1039 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\129_widdit_m.js.vir"
sh=B9CFC11B067C54952D592C618BD391AA26B3393B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\135_arcadi3_m.js.vir"
sh=17483832BF1FA23335B7C1E04A0530AB60CBEDC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\138_getdeal_m.js.vir"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\141_corticas_ru_m.js.js.vir"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\142_intext_fa_m.js.vir"
sh=18C46AE5CB67274764D17F8A40975EEB5C67F795 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\159_cortica_rollover_m.js.vir"
sh=81C3B657563171D65FE42C52872ECF8EB7924C86 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\171_arcadi2_sourceID_m.js.vir"
sh=FAD5F9E3F4DA8ED3ACC760906893EC897A53D622 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js.vir"
sh=5C78BB6DB7106C0E038C74382A940FB5D1322C06 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\175_coolmirage_m.js.vir"
sh=92DD07C2421C2C5A4996E399DB6707B4707488F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=93022F69189E8D2F1B4B8717522CA1AFFA59F708 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\92_superfish_m.js.vir"
sh=543DE9DC0BE89820EDA9EE328FECAE10831BFBC0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=FD1D7C0C6188D44ABC75C52AA634C63D23320C3F ft=1 fh=75c93c0558080b9f vn="Variante von Win32/DomaIQ.BG evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\File System\004\t\00\00000000"
sh=A42869762C1D228506B8C75AD64E569CAA077C39 ft=1 fh=6bc882c50a11bee7 vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q7D32QL2\SpeedUpMyPC-standalone-setup[1].exe"
sh=C348FB57093E21C8A1FA20445F0E15CB6569937A ft=1 fh=7a5be1cd399f8138 vn="Variante von Win32/AdWare.AddLyrics.AM Anwendung" ac=I fn="C:\Users\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\2040-2082_Re-markit.exe"
sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\Cloud_Backup_Setup.exe"
sh=FEB8E6715C316D6499231FD88D0FC48107DDC4AE ft=1 fh=1a6d58f30545a7e9 vn="Win32/SpeedUpMyPC.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\speedupmypc.exe"
sh=CCDFEE87B0A44C2DC94247FD64A46633479966E2 ft=1 fh=8ea0c674691f6066 vn="Win32/VOPackage.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Local\Temp\fecf5cc8-7617-4e20-8d05-37d40de8bf43\software\VOPackage.exe"
sh=A42869762C1D228506B8C75AD64E569CAA077C39 ft=1 fh=6bc882c50a11bee7 vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Local\Temp\is-HGF10.tmp\SpeedUpMyPC-standalone-setup.exe"
sh=A1280B1F085B8284DC157EC359BD1ADA091CFE7E ft=1 fh=d8aa3384d1249a40 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\LocalLow\DVDVideoSoftTB_DE\ldrtbDVDV.dll"
sh=92E84D2216A7763D580E42FA2493CCF67D0D0560 ft=1 fh=e8efc42494afd9f6 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\LocalLow\DVDVideoSoftTB_DE\tbDVDV.dll"
sh=ABF759CA3BFB16DE62197DD7C417AC5039A43AE0 ft=1 fh=1801af74030ebca1 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\LocalLow\DVDVideoSoftTB_DE\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll"
sh=48C826EF00938F035C91C9F6B3E167CB21D96633 ft=1 fh=59fac0a23423ab50 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_16.dll"
sh=45F4ABE93E1FB333545719948B418FB1207A5085 ft=1 fh=3a58b09db4698b9d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_17.dll"
sh=FED76CBD8D5660DEC60B3F16547372DEE7F87FA6 ft=1 fh=9705b06916654cd4 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_18.dll"
sh=C8F23EFE19C6A36D8921AE5C96F95808EBEFBE05 ft=1 fh=8064b8d931435e04 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_19.dll"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_20.dll"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_21.dll"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7}\components\SmartbarFireFoxRemotePlugin_22.dll"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_20.dll"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_21.dll"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_22.dll"
sh=95544372D9D68E8AFAE5E9DA8B07C14CE5406ABB ft=1 fh=dd489ec711c15129 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=BA8871127FB23B24A8963B6A5992DED58259E590 ft=1 fh=65df87dcc97c6ea8 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=C88DAF3FB5D3FEC090233FF251F7F0CFC73EF4CD ft=1 fh=b74c7f4df627386b vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a}\components\SmartbarFireFoxRemotePlugin_25.dll"
sh=AA190194CD322F27B81B57B66F0E48B16DDF09FC ft=1 fh=7a1e2a1eaadddca3 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\Downloads\Anwendung\FreeYouTubeToMP3Converter (1).exe"
sh=AA190194CD322F27B81B57B66F0E48B16DDF09FC ft=1 fh=7a1e2a1eaadddca3 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\Downloads\Anwendung\FreeYouTubeToMP3Converter (2).exe"
sh=596D78A7F03D1DAEE86BCCE8DD7713AA60E8F9E4 ft=1 fh=8eaf1d336ac02ccc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\Downloads\Anwendung\FreeYouTubeToMP3Converter.exe"
sh=846D95D63EDE9508EFC7CEEE1D145D7CE62988C3 ft=1 fh=ec23a4ae3310ce50 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\Downloads\Anwendung\FreeYouTubeToMP3Converter_3.11.32.918.exe"
sh=F2F9BC14A6E1E369DF7E7831527E1815BFA8A153 ft=1 fh=46237991348dd238 vn="Win32/WinloadSDA.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\Downloads\Anwendung\OpenOffice-Setup.exe"
sh=8BE4C277A62F2400C3B0A20F39297D310774E2AC ft=1 fh=d69c639933d87dfe vn="Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lukas\Downloads\Anwendung\Setup21_FreeConverter.exe"




SecurityCheck funktioniert nicht, beim Öffnen bzw. nach der Eingabe einer beliebigen Taste in der DOS-Box kommt diese Meldung:
UNSUPPORTED OPERATING SYSTEM! ABORTED!



FRST.txt:
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Lukas (administrator) on LUKAS-HP on 04-06-2014 17:05:51
Running from C:\Users\Lukas\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe
(Spotify Ltd) C:\Users\Lukas\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(RemoteMouse.net) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(DonationCoder) C:\Program Files (x86)\ScreenshotCaptor\ScreenshotCaptor.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\ipmgui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2799912 2013-06-08] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2013-06-08] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2013-06-08] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-06-14] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Magic Desktop for HP notification] => C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-27] (Easybits)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-04-03] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-05-27] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [HP Deskjet 3070 B611 series (NET)] => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2676584 2011-06-08] (Hewlett-Packard Co.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Spotify] => C:\Users\Lukas\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Spotify Web Helper] => C:\Users\Lukas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-15] (Spotify Ltd)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Remote Mouse] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [1200640 2014-04-01] (RemoteMouse.net)
HKU\S-1-5-21-3356171927-603591009-3139132438-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20924064 2014-02-10] (Skype Technologies S.A.)
Startup: C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lukas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
URLSearchHook: HKLM-x32 - (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SPFS Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -  No File
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SPFS Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-09-03] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4E587E9A-DAA3-4509-AA8C-6891599FDD78}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{CD29485B-D0A0-4C7E-8EFB-DEDA0C523C00}: [NameServer]193.189.244.206 193.189.244.225

FireFox:
========
FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default
FF SearchEngineOrder.3: Bing
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\PROGRA~2\MOZILL~1\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lukas\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\amazon-icon@giga.de [2013-11-16]
FF Extension: Snap.Do  - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\{3804b800-0a4d-4689-b2b3-99bc2bfa1ca7} [2013-06-08]
FF Extension: Snap.Do  - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\4a7g1a51.default\Extensions\{3b4af811-c3c0-32fc-2227-8acd9865817a} [2013-11-16]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2013-07-26]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2012-10-04]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR HomePage:
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Docs) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-03]
CHR Extension: (Google Drive) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-03]
CHR Extension: (YouTube) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-27]
CHR Extension: (Adblock Plus) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-03]
CHR Extension: (Google-Suche) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-27]
CHR Extension: (Google Wallet) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (Google Mail) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-27]
CHR HKLM-x32\...\Chrome\Extension: [aepeildmfnnehghlknddebgjghlompfe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-02-11]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1494144 2012-09-11] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-16] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-31] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-17] (Avira Operations GmbH & Co. KG)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-04] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-04 17:04 - 2014-06-04 17:03 - 00854367 _____ () C:\Users\Lukas\Desktop\SecurityCheck.exe
2014-06-04 17:03 - 2014-06-04 17:03 - 00854367 _____ () C:\Users\Lukas\Downloads\SecurityCheck.exe
2014-06-04 11:53 - 2014-06-04 11:53 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-04 11:52 - 2014-06-04 11:52 - 02347384 _____ (ESET) C:\Users\Lukas\Downloads\esetsmartinstaller_deu.exe
2014-06-03 13:10 - 2014-06-03 13:10 - 00000000 ____D () C:\Users\Lukas\Downloads\FRST-OlderVersion
2014-06-03 13:09 - 2014-06-03 13:09 - 00001006 _____ () C:\Users\Lukas\Desktop\JRT.txt
2014-06-03 13:02 - 2014-06-03 13:02 - 01016261 _____ (Thisisu) C:\Users\Lukas\Downloads\JRT.exe
2014-06-03 12:44 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-03 12:43 - 2014-06-03 12:43 - 01327971 _____ () C:\Users\Lukas\Downloads\adwcleaner_3.211.exe
2014-06-03 12:42 - 2014-06-03 12:42 - 00046557 _____ () C:\mbam.txt
2014-06-03 12:09 - 2014-06-04 14:32 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-03 12:09 - 2014-06-03 12:09 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-03 12:09 - 2014-06-03 12:09 - 00001102 _____ () C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-03 12:09 - 2014-06-03 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-03 12:09 - 2014-06-03 12:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-03 12:09 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-03 12:09 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-03 12:09 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-03 12:06 - 2014-06-03 12:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-03 11:38 - 2014-06-03 11:38 - 00001264 _____ () C:\Users\Lukas\Desktop\Revo Uninstaller.lnk
2014-06-03 11:38 - 2014-06-03 11:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-06-03 11:37 - 2014-06-03 11:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Lukas\Downloads\revosetup95.exe
2014-06-02 14:04 - 2014-06-04 11:51 - 00064385 _____ () C:\Users\Lukas\Downloads\Addition.txt
2014-06-02 14:01 - 2014-06-04 17:06 - 00026090 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-06-02 14:01 - 2014-06-03 13:10 - 02068992 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-06-02 13:07 - 2014-06-02 13:07 - 00016919 _____ () C:\Users\Lukas\Documents\Anmeldung.odt
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\ProgramData\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\Program Files\iTunes
2014-06-02 12:04 - 2014-06-02 12:05 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-02 12:04 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iPod
2014-05-21 17:34 - 2014-05-21 17:35 - 51618755 _____ () C:\Users\Lukas\Downloads\Alle Farben.zip
2014-05-10 15:15 - 2014-06-03 11:51 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-05-06 10:24 - 2014-06-03 12:57 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\DropboxMaster
2014-05-06 10:24 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\ProgramData\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

==================== One Month Modified Files and Folders =======

2014-06-04 17:06 - 2014-06-02 14:01 - 00026090 _____ () C:\Users\Lukas\Downloads\FRST.txt
2014-06-04 17:06 - 2012-09-27 12:34 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Temp
2014-06-04 17:05 - 2013-11-18 01:23 - 00000000 ____D () C:\FRST
2014-06-04 17:03 - 2014-06-04 17:04 - 00854367 _____ () C:\Users\Lukas\Desktop\SecurityCheck.exe
2014-06-04 17:03 - 2014-06-04 17:03 - 00854367 _____ () C:\Users\Lukas\Downloads\SecurityCheck.exe
2014-06-04 16:46 - 2013-02-14 15:33 - 00000338 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-06-04 16:24 - 2012-10-24 18:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-04 16:24 - 2012-09-27 13:12 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-04 16:03 - 2013-02-22 21:34 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Spotify
2014-06-04 14:32 - 2014-06-03 12:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-04 12:46 - 2011-11-28 16:09 - 01385061 _____ () C:\Windows\WindowsUpdate.log
2014-06-04 11:55 - 2011-09-03 10:22 - 00654852 _____ () C:\Windows\system32\perfh007.dat
2014-06-04 11:55 - 2011-09-03 10:22 - 00130434 _____ () C:\Windows\system32\perfc007.dat
2014-06-04 11:55 - 2009-07-14 07:13 - 01500294 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-04 11:53 - 2014-06-04 11:53 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-04 11:52 - 2014-06-04 11:52 - 02347384 _____ (ESET) C:\Users\Lukas\Downloads\esetsmartinstaller_deu.exe
2014-06-04 11:51 - 2014-06-02 14:04 - 00064385 _____ () C:\Users\Lukas\Downloads\Addition.txt
2014-06-04 10:44 - 2012-09-27 13:12 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-04 10:38 - 2013-02-22 23:40 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Skype
2014-06-04 10:38 - 2012-10-16 12:03 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Dropbox
2014-06-03 20:48 - 2012-09-27 12:41 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{1FBC2764-466E-472C-9615-0F594618C744}
2014-06-03 15:15 - 2012-09-27 13:56 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Winamp
2014-06-03 13:10 - 2014-06-03 13:10 - 00000000 ____D () C:\Users\Lukas\Downloads\FRST-OlderVersion
2014-06-03 13:10 - 2014-06-02 14:01 - 02068992 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe
2014-06-03 13:09 - 2014-06-03 13:09 - 00001006 _____ () C:\Users\Lukas\Desktop\JRT.txt
2014-06-03 13:04 - 2009-07-14 06:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-03 13:04 - 2009-07-14 06:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-03 13:02 - 2014-06-03 13:02 - 01016261 _____ (Thisisu) C:\Users\Lukas\Downloads\JRT.exe
2014-06-03 12:57 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\DropboxMaster
2014-06-03 12:57 - 2012-10-16 12:05 - 00000000 ___RD () C:\Users\Lukas\Dropbox
2014-06-03 12:54 - 2010-11-21 05:47 - 00458792 _____ () C:\Windows\PFRO.log
2014-06-03 12:54 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-03 12:54 - 2009-07-14 06:51 - 00084819 _____ () C:\Windows\setupact.log
2014-06-03 12:53 - 2013-11-18 10:37 - 00000000 ____D () C:\AdwCleaner
2014-06-03 12:43 - 2014-06-03 12:43 - 01327971 _____ () C:\Users\Lukas\Downloads\adwcleaner_3.211.exe
2014-06-03 12:42 - 2014-06-03 12:42 - 00046557 _____ () C:\mbam.txt
2014-06-03 12:34 - 2013-09-14 10:50 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForLukas.job
2014-06-03 12:09 - 2014-06-03 12:09 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-03 12:09 - 2014-06-03 12:09 - 00001102 _____ () C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk
2014-06-03 12:09 - 2014-06-03 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-06-03 12:09 - 2014-06-03 12:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-06-03 12:09 - 2013-11-18 12:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-03 12:06 - 2014-06-03 12:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-03 12:00 - 2012-12-02 16:06 - 00001841 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-06-03 12:00 - 2012-11-28 00:16 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-03 12:00 - 2012-11-28 00:16 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-03 12:00 - 2012-11-28 00:16 - 00001147 _____ () C:\ProgramData\Desktop\Mozilla Firefox.lnk
2014-06-03 12:00 - 2012-09-27 13:16 - 00002255 _____ () C:\Users\Lukas\Desktop\Google Chrome.lnk
2014-06-03 12:00 - 2012-09-27 12:41 - 00001421 _____ () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-03 11:51 - 2014-05-10 15:15 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-06-03 11:49 - 2012-11-28 00:14 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\MozillaFirefoxPackages
2014-06-03 11:38 - 2014-06-03 11:38 - 00001264 _____ () C:\Users\Lukas\Desktop\Revo Uninstaller.lnk
2014-06-03 11:38 - 2014-06-03 11:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-06-03 11:37 - 2014-06-03 11:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Lukas\Downloads\revosetup95.exe
2014-06-02 15:17 - 2013-02-22 21:35 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Spotify
2014-06-02 13:07 - 2014-06-02 13:07 - 00016919 _____ () C:\Users\Lukas\Documents\Anmeldung.odt
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00001783 _____ () C:\ProgramData\Desktop\iTunes.lnk
2014-06-02 12:05 - 2014-06-02 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iTunes
2014-06-02 12:05 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-02 12:04 - 2014-06-02 12:04 - 00000000 ____D () C:\Program Files\iPod
2014-06-02 11:59 - 2013-09-14 10:50 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForLukas
2014-06-02 11:58 - 2012-12-22 15:15 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-06-02 11:58 - 2012-09-29 14:14 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-05-30 16:45 - 2012-12-19 19:24 - 00001649 _____ () C:\Windows\wininit.ini
2014-05-30 16:45 - 2012-10-16 12:05 - 00000979 _____ () C:\Users\Lukas\Desktop\Dropbox.lnk
2014-05-30 16:45 - 2012-10-16 12:04 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-30 16:45 - 2012-09-27 12:41 - 00000000 ___RD () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-22 10:21 - 2013-11-17 13:29 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-22 10:21 - 2013-11-17 13:29 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-21 17:35 - 2014-05-21 17:34 - 51618755 _____ () C:\Users\Lukas\Downloads\Alle Farben.zip
2014-05-15 16:32 - 2012-10-06 15:21 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2014-05-15 16:32 - 2012-10-06 15:21 - 00002019 _____ () C:\ProgramData\Desktop\Adobe Reader X.lnk
2014-05-15 16:32 - 2011-09-03 00:56 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-14 18:24 - 2012-10-24 18:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:24 - 2012-10-24 18:52 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 18:24 - 2012-10-24 18:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-12 07:26 - 2014-06-03 12:09 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-03 12:09 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-03 12:09 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-10 15:14 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-05-10 15:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-05-10 01:19 - 2012-09-27 13:12 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 01:19 - 2012-09-27 13:12 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 10:24 - 2014-05-06 10:24 - 00000000 ____D () C:\Users\Lukas\AppData\Local\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00002699 _____ () C:\ProgramData\Desktop\Skype.lnk
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-06 10:23 - 2014-05-06 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-06 10:23 - 2013-02-22 23:40 - 00000000 ____D () C:\ProgramData\Skype
2014-05-06 10:20 - 2012-12-28 17:38 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-05-05 19:12 - 2012-11-26 11:42 - 00003218 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForLUKAS-HP$
2014-05-05 19:12 - 2012-11-26 11:42 - 00000342 _____ () C:\Windows\Tasks\HPCeeScheduleForLUKAS-HP$.job

Some content of TEMP:
====================
C:\Users\Lukas\AppData\Local\Temp\avgnt.exe
C:\Users\Lukas\AppData\Local\Temp\BackupSetup.exe
C:\Users\Lukas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprsdw1b.dll
C:\Users\Lukas\AppData\Local\Temp\Quarantine.exe
C:\Users\Lukas\AppData\Local\Temp\RemoteMouse.exe
C:\Users\Lukas\AppData\Local\Temp\sp64126.exe
C:\Users\Lukas\AppData\Local\Temp\UninstallHPSA.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-30 17:54

==================== End Of Log ============================
--- --- ---



Addition.txt:
Anhang 67430



Sieht gut aus! :) Alle Probleme weg.

Kann einmal wieder nur Danke sagen! Super Support! Hoffe mal, dass ich mich nicht nocheinmal melden muss.

LG Lukas

schrauber 05.06.2014 12:42
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen




Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Lukas07 08.06.2014 14:31
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-06-2014
Ran by Lukas at 2014-06-07 21:33:49 Run:1
Running from C:\Users\Lukas\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.


The system needed a reboot.

==== End of Fixlog ====




Alles wieder in Ordnung :) Nochmal Danke! Thread kannst du denke ich schließen.

LG Lukas

schrauber 09.06.2014 06:52
Gern Geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 14:25 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55