Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Firefox und Opera erreichen Youtube nicht mehr (https://www.trojaner-board.de/160417-firefox-opera-erreichen-youtube-mehr.html)

genso.sekai 05.11.2014 13:17
Firefox und Opera erreichen Youtube nicht mehr
 
Hallo Zusammen.
Ich brauche dringend euren Rat! :balla:

Seit ca. 1 Woche habe ich schwierigkeiten mit Firefox und auch Opera Youtube zu öffnen.
Zu Anfang kam ich zwar auf die Startseite, jedoch wenn ich mich einloggen wollte, hieß es dass die URL nicht Korrekt sei.

Ich habe bei Firefox ein neues Profil angelegt um zu sehen ob es irgendetwas damit zu tun hat. Leider Fehlanzeige.
Jetzt kommt nur noch diese Meldung: "Ein Zugriff auf den Server ist nicht möglich."

Seit einiger Zeit habe ich ohnehin das Gefühl, dass mein PC nicht mehr ganz so reibungslos läuft und mehrmals keine Rückmeldung angezeigt hat.
Ich vermute auf einen oder mehrere Viren. (Vielleicht habt ihr da einen Tipp um das zu bereinigen, ohne dass ich meinen PC neu aufsetzen muss!)

Edit:
Ich habe gerade etwas Erfahren.
Das Problem habe nicht nur ich mit meinem PC
Auch ein anderer Computer (Mac) im selben Haushalt hat das gleiche Problem.

Da liegt die Vermutung aber eigentlich nicht auf einem Virus.

Wäre um eine schnelle Antwort Dankbar.

Liebe Grüße

schrauber 05.11.2014 13:56
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


genso.sekai 11.11.2014 00:24
Hey,
Danke für die schnelle Antwort.
Hoffe mal das die Angaben dich da weiterbringen ^^

Dann komme ich doch gleich mal deiner Bitte nach:



FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-11-2014
Ran by Sunako Kirishiki (administrator) on SUNAKOKIRISHIKI on 11-11-2014 00:21:32
Running from C:\Users\Sunako Kirishiki\Desktop
Loaded Profile: Sunako Kirishiki (Available profiles: Sunako Kirishiki & UpdatusUser)
Platform: Microsoft Windows 8 Pro (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Users\Sunako Kirishiki\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(pdfforge GbR) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\ConversionService.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Windows\System32\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files\Edimax\Common\RaRegistry.exe
(Rosetta Stone Ltd.) C:\Program Files\RosettaStoneLtdServices\RosettaStoneDaemon.exe
(Iminent) C:\Program Files\Common Files\Umbrella\umbrella.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(WDC) C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
(Cisco Systems, Inc.) C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Cisco Systems, Inc.) C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Linksys, LLC) C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe
(WDC) C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
(Microsoft Corporation) D:\Programme D\Microsoft Office\Office12\GrooveMonitor.exe
(Adobe Systems Inc.) D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(PC Utilities Pro) C:\Program Files\Optimizer Pro\OptProReminder.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
() C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe
(Spotify Ltd) C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Edimax Technology Co.) C:\Program Files\Edimax\Common\RaUI.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe
(Just Develop It) C:\Program Files\MyPC Backup\BackupStack.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\agent.exe
(Google Inc.) C:\Windows\Temp\38.0.2125.111_chrome_installer.exe9c6ee57
(Google Inc.) C:\Windows\Temp\CR_2F65B.tmp\setup.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Opera Software) C:\Program Files\Opera\opera.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\seccenter.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM\...\Run: [WinampAgent] => D:\Programme D\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.)
HKLM\...\Run: [IndexSearch] => C:\Program Files\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PDFHook] => C:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF5 Registry Controller] => C:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2013-07-22] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM\...\Run: [nmctxth] => C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe [642856 2008-12-12] (Cisco Systems, Inc.)
HKLM\...\Run: [Linksys Wireless Manager] => C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe [1358384 2009-02-16] (Linksys, LLC)
HKLM\...\Run: [WD Drive Manager] => C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe [450560 2009-06-26] (WDC)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [WD Drive Unlocker] => C:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694080 2013-04-01] (Western Digital Technologies, Inc.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1835288 2014-05-27] (Bitdefender)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM\...\Run: [WD Quick View] => C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-07-22] (Western Digital Technologies, Inc.)
HKLM\...\Run: [GrooveMonitor] => D:\Programme D\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-09-05] (Adobe Systems Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe Acrobat Speed Launcher] => D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\RunOnce: [SPUpdSentinel] => C:\Program Files\Common Files\Umbrella\umbrella_bkp.exe [3329184 2014-08-11] (Iminent)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [335360 2012-07-26] (Microsoft Corporation)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Optimizer Pro] => C:\Program Files\Optimizer Pro\OptProLauncher.exe [79664 2012-06-10] (PC Utilities Pro)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [icq] => C:\Users\Sunako Kirishiki\AppData\Roaming\ICQM\icq.exe [28698984 2013-08-24] (ICQ)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [482904 2014-05-27] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [901608 2014-05-27] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] => C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe [614744 2014-05-27] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Spotify] => C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Spotify.exe [6553144 2014-10-10] (Spotify Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [FLV Player] => C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe [202752 2012-10-26] ()
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Spotify Web Helper] => C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-10] (Spotify Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Google+ Auto Backup] => C:\Users\Sunako Kirishiki\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4825880 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Policies\Explorer: [NoCDBurning] 0
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [482904 2014-05-27] (Bitdefender)
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [901608 2014-05-27] (Bitdefender)
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] => C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe [614744 2014-05-27] (Bitdefender)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
ShortcutTarget: simplicheck.lnk -> C:\Program Files\simplitec\simplicheck\simplicheck.exe (simplitec)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Utility.lnk
ShortcutTarget: Wireless Utility.lnk -> C:\Program Files\Edimax\Common\RaUI.exe (Edimax Technology Co.)
Startup: C:\Users\Sunako Kirishiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6C0B315D73FACD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File
SearchScopes: HKLM - DefaultScope {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
SearchScopes: HKLM - {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
SearchScopes: HKLM - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=2D5E740F-4F1D-4C80-A9B6-90F174A49DBE&ref=toolbox&q={searchTerms}
SearchScopes: HKCU - DefaultScope {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=28bc869c000000000000801f02581ebf
SearchScopes: HKCU - {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms}
SearchScopes: HKCU - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=2D5E740F-4F1D-4C80-A9B6-90F174A49DBE&ref=toolbox&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: TBSB01620 Class -> {58124A0B-DC32-4180-9BFF-E0E21AE34026} -> C:\Program Files\IMinent Toolbar\tbcore3.dll ()
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: DefaultTab Browser Helper -> {7F6AFBF1-E065-4627-A2FD-810366367D01} -> C:\Windows\system32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabBHO.dll (Search Results LLC.)
BHO: No Name -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} ->  No File
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: No Name -> {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} ->  No File
Toolbar: HKLM - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)
Toolbar: HKLM - IMinent Toolbar - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files\IMinent Toolbar\tbcore3.dll ()
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programme D\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.192.1

FireFox:
========
FF ProfilePath: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default
FF NewTab: hxxp://search.iminent.com/?ref=NewTab&appId=2D5E740F-4F1D-4C80-A9B6-90F174A49DBE
FF Homepage: hxxp://www.google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat -> D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WEB.DE MailCheck - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\toolbar@web.de [2014-10-28]
FF Extension: YouTube Unblocker - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\youtubeunblocker@unblocker.yt [2014-09-11]
FF Extension: Block site - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2013-10-14]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-11-05]
FF Extension: Iminent - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\firefoxmini@go.im.xpi [2014-11-05]
FF Extension: Ad-Bye - For Facebook - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\s.alfa@idev.com.xpi [2014-11-05]
FF Extension: UnPlug - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\unplug@compunach.xpi [2014-11-05]
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-01-28]
FF HKLM\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files\Iminent\webbooster@iminent.com
FF HKLM\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\ffpwdman
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\ffpwdman [2013-08-29]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-07-04]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2013-08-29]

Chrome:
=======
CHR Profile: C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgfehiiihoneblkaemlnglbokdgoopk [2013-01-28]
CHR Extension: (Iminent Toolbar) - C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcemhggbahmlmhgnbpbbdaklcojhbecn [2013-03-12]
CHR Extension: (Iminent) - C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl [2013-03-12]
CHR HKLM\...\Chrome\Extension: [blaofbhgbmeikidhlkmjhbkbfohpgekf] - C:\Program Files\Movie2KDownloader.com\Movie2KDownloader10.crx [2012-12-13]
CHR HKLM\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\pmbxcr.crx [2014-02-28]
CHR HKLM\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - "C:\Program Files\Iminent\Iminent.crx" [2014-02-28]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [36936 2014-10-28] (Just Develop It) <==== ATTENTION
S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [69880 2014-04-09] (Bitdefender)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
R2 DefaultTabUpdate; C:\Users\Sunako Kirishiki\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2013-12-06] () [File not signed]
S3 Microsoft Office Groove Audit Service; D:\Programme D\Microsoft Office\Office12\GrooveAuditService.exe [64856 2009-02-26] (Microsoft Corporation)
R2 nmservice; C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe [642856 2008-12-12] (Cisco Systems, Inc.)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-03-05] ()
R2 RalinkRegistryWriter; C:\Program Files\Edimax\Common\RaRegistry.exe [185632 2009-12-17] (Ralink Technology, Corp.)
R2 RosettaStoneDaemon; C:\Program Files\RosettaStoneLtdServices\RosettaStoneDaemon.exe [1646056 2011-03-31] (Rosetta Stone Ltd.)
S3 SandraAgentSrv; D:\Programme D\SiSoftware Sandra Lite 2013.SP2\RpcAgentSrv.exe [71832 2009-03-01] (SiSoftware) [File not signed]
R2 SProtection; C:\Program Files\Common Files\Umbrella\umbrella.exe [3329184 2014-08-11] (Iminent)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [54424 2014-04-09] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1251296 2014-05-27] (Bitdefender)
R2 WDBackup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-07-22] (Western Digital Technologies, Inc.)
R2 WDBtnMgrSvc.exe; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [102400 2009-06-26] (WDC) [File not signed]
R2 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-07-22] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14480 2014-03-28] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [778032 2014-02-03] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [242504 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [516936 2014-02-03] (BitDefender)
R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [24576 2012-07-26] (Microsoft Corporation)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [19872 2012-07-11] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [78656 2014-05-27] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [94088 2013-10-02] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [108008 2013-10-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [66832 2014-01-03] (BitDefender SRL)
R1 bdselfpr; C:\Program Files\Bitdefender\Bitdefender\bdselfpr.sys [135600 2013-09-09] (BitDefender LLC)
S3 DNIMp50; C:\Windows\System32\Drivers\DNIMp50.sys [21504 2006-11-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 DNISp50; C:\Windows\System32\Drivers\DNISp50.sys [20480 2006-11-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [242240 2013-02-28] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [165744 2013-10-02] (BitDefender LLC)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-06-01] (REALiX(tm))
R3 LVUSBSta; C:\Windows\system32\DRIVERS\LVUSBSta.sys [22016 2005-01-31] (Logitech Inc.)
S3 PID_0928; C:\Windows\system32\DRIVERS\LV561AV.SYS [211712 2005-01-31] (Logitech Inc.)
R2 pnarp; C:\Windows\system32\DRIVERS\pnarp.sys [24880 2008-12-12] (Cisco Systems, Inc.)
R2 purendis; C:\Windows\system32\DRIVERS\purendis.sys [26416 2008-12-12] (Cisco Systems, Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [45968 2011-11-03] (Rovi Corporation)
S3 SANDRA; D:\Programme D\SiSoftware Sandra Lite 2013.SP2\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [360376 2013-10-02] (BitDefender S.R.L.)
S3 WPN111; C:\Windows\system32\DRIVERS\WPN111v.sys [904192 2008-08-05] (Atheros Communications, Inc.)
R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [155136 2012-07-26] (Microsoft Corporation)
U3 aswMBR; \??\C:\Users\SUNAKO~1\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\SUNAKO~1\AppData\Local\Temp\aswVmm.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-11 00:21 - 2014-11-11 00:22 - 00031053 _____ () C:\Users\Sunako Kirishiki\Desktop\FRST.txt
2014-11-11 00:20 - 2014-11-11 00:21 - 00000000 ____D () C:\FRST
2014-11-11 00:20 - 2014-11-11 00:20 - 01107968 _____ (Farbar) C:\Users\Sunako Kirishiki\Desktop\FRST.exe
2014-11-05 11:59 - 2014-11-05 11:59 - 00602112 _____ (OldTimer Tools) C:\Users\Sunako Kirishiki\Desktop\OTL.exe
2014-11-05 10:59 - 2014-11-05 16:39 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-05 10:59 - 2014-11-05 12:38 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-05 10:59 - 2014-11-05 11:37 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-05 10:59 - 2014-11-05 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-05 10:58 - 2014-11-05 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-05 02:47 - 2014-11-05 02:48 - 00277204 _____ () C:\Users\Sunako Kirishiki\Documents\cc_20141105_024743.reg
2014-11-04 18:00 - 2014-11-04 18:00 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-04 18:00 - 2014-11-04 18:00 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-04 17:42 - 2014-11-05 15:24 - 00000000 ____D () C:\ProgramData\dtdata
2014-11-03 09:33 - 2014-11-03 09:33 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Abelssoft
2014-11-03 09:33 - 2014-11-03 09:33 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-11-03 09:32 - 2014-11-03 09:33 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Abelssoft
2014-11-03 09:31 - 2014-11-05 11:20 - 00000000 ____D () C:\Program Files\CHIP Updater
2014-10-31 20:40 - 2014-10-31 20:40 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-10-30 20:49 - 2014-11-02 03:00 - 00000000 ____D () C:\Windows\system32\AutoUpdateLicense
2014-10-28 20:36 - 2014-10-22 02:34 - 00010777 _____ () C:\Windows\system32\AutoconfigV2.cab
2014-10-28 20:36 - 2014-10-22 02:33 - 00437424 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2014-10-28 20:36 - 2014-10-22 02:33 - 00409080 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2014-10-28 20:36 - 2014-10-22 02:08 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-10-28 20:36 - 2014-10-22 02:08 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-28 20:36 - 2014-10-22 02:07 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2014-10-23 01:21 - 2014-10-23 01:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-10-23 01:21 - 2014-10-23 01:21 - 00000000 ____D () C:\Program Files\CPUID
2014-10-22 22:47 - 2014-11-03 19:05 - 03827248 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-22 22:30 - 2014-09-29 23:49 - 00705480 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-10-22 22:30 - 2014-09-29 23:49 - 00104904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-10-17 00:40 - 2014-09-28 04:07 - 03407360 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-17 00:40 - 2014-08-01 23:07 - 00388729 _____ () C:\Windows\system32\ApnDatabase.xml
2014-10-17 00:40 - 2014-07-24 12:50 - 00363328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-10-17 00:40 - 2014-07-17 00:28 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-10-17 00:40 - 2014-07-17 00:28 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2014-10-17 00:40 - 2014-07-12 06:13 - 01041920 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2014-10-17 00:40 - 2014-07-12 05:10 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-10-17 00:40 - 2014-07-12 05:09 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-10-17 00:40 - 2014-07-12 05:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-10-17 00:40 - 2014-07-12 05:08 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-10-17 00:40 - 2014-06-28 08:02 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-10-17 00:39 - 2014-09-13 05:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-17 00:39 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2014-10-17 00:39 - 2014-07-12 05:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-17 00:39 - 2014-07-12 05:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-17 00:39 - 2014-07-12 05:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-17 00:39 - 2014-07-12 05:16 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-17 00:39 - 2014-07-12 05:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-17 00:39 - 2014-07-12 01:02 - 00478352 _____ () C:\Windows\system32\locale.nls
2014-10-17 00:39 - 2014-07-08 23:31 - 00175616 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-10-17 00:39 - 2014-07-08 23:30 - 01220608 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-10-17 00:39 - 2014-07-08 23:30 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-10-17 00:39 - 2014-07-07 05:01 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2014-10-17 00:39 - 2014-07-07 05:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-10-17 00:39 - 2014-07-04 08:12 - 00281408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-10-17 00:39 - 2014-07-03 01:30 - 01474520 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-10-17 00:39 - 2014-06-28 08:02 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-10-17 00:39 - 2014-06-28 08:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-10-17 00:39 - 2014-06-25 08:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-10-17 00:39 - 2014-06-25 08:14 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-10-17 00:39 - 2014-06-18 00:27 - 02032640 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-10-17 00:39 - 2014-06-11 05:40 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-10-17 00:39 - 2014-06-10 23:43 - 01166320 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-10-17 00:39 - 2014-05-30 00:31 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-10-17 00:39 - 2014-02-04 11:57 - 01064048 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-17 00:38 - 2014-07-07 05:01 - 02801152 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-17 00:38 - 2014-07-07 05:01 - 01049600 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-17 00:38 - 2014-07-07 05:01 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-17 00:38 - 2014-07-07 05:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-17 00:38 - 2014-07-07 05:00 - 05095424 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-17 00:38 - 2014-07-07 04:59 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-17 00:37 - 2014-10-10 05:47 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-17 00:37 - 2014-10-10 05:47 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-17 00:37 - 2014-10-08 04:53 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-17 00:37 - 2014-09-20 04:58 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-17 00:37 - 2014-09-20 04:57 - 14368768 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 13757952 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 02861568 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 02055168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 01762816 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 01180672 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-17 00:37 - 2014-09-20 04:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-17 00:37 - 2014-09-20 04:56 - 01440768 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-17 00:37 - 2014-09-20 04:56 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-17 00:37 - 2014-09-20 04:56 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-17 00:37 - 2014-09-20 04:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-17 00:37 - 2014-09-18 00:24 - 02416128 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-17 00:37 - 2014-09-03 03:48 - 00510464 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-17 00:37 - 2014-08-30 05:05 - 08858112 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-10-17 00:37 - 2014-08-30 05:03 - 02037760 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-10-17 00:37 - 2014-06-13 00:34 - 00754176 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-11 00:12 - 2013-01-23 16:18 - 01217382 _____ () C:\Windows\WindowsUpdate.log
2014-11-11 00:00 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\system32\sru
2014-11-10 22:27 - 2013-01-23 17:15 - 00000497 _____ () C:\Windows\system32\checkdnsid.xml
2014-11-10 03:00 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-08 00:00 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-11-07 00:58 - 2014-09-24 16:01 - 00000000 ___HD () C:\$Windows.~BT
2014-11-07 00:02 - 2013-03-12 15:23 - 00000000 ____D () C:\Program Files\Common Files\Umbrella
2014-11-05 11:04 - 2014-08-07 13:05 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Adobe
2014-11-05 10:59 - 2013-04-29 21:40 - 00000000 ____D () C:\Program Files\Google
2014-11-05 10:59 - 2013-01-28 18:03 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Google
2014-11-05 02:45 - 2013-02-28 10:41 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\DAEMON Tools Lite
2014-11-05 02:45 - 2013-01-28 16:04 - 00000000 ____D () C:\Program Files\PDFCreator
2014-11-05 02:44 - 2013-01-31 14:59 - 00000000 ____D () C:\Windows\Minidump
2014-11-05 02:44 - 2013-01-23 16:13 - 00000000 ____D () C:\Windows\Panther
2014-11-04 16:17 - 2014-10-01 18:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox.bak
2014-11-04 16:17 - 2013-01-23 16:28 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-03 21:42 - 2014-04-23 18:09 - 00000000 ____D () C:\Users\Public\Util
2014-11-03 19:14 - 2013-01-23 16:22 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-03 19:09 - 2012-07-26 05:17 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-03 19:08 - 2013-08-29 19:30 - 00008192 _____ () C:\Windows\system32\WDPABKP.dat
2014-11-03 19:07 - 2013-12-06 15:12 - 00001156 __RSH () C:\Users\Sunako Kirishiki\ntuser.pol
2014-11-03 19:07 - 2013-01-23 16:18 - 00000000 ____D () C:\Users\Sunako Kirishiki
2014-11-03 19:06 - 2012-07-26 07:04 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-03 19:04 - 2013-12-06 15:11 - 00000000 ____D () C:\Program Files\MyPC Backup
2014-10-31 20:21 - 2014-09-13 10:18 - 00000000 ____D () C:\Windows\rescache
2014-10-30 20:51 - 2012-07-26 07:43 - 00000000 ____D () C:\Windows\CbsTemp
2014-10-30 20:49 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\WinStore
2014-10-28 14:51 - 2013-01-24 22:57 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Skype
2014-10-23 01:23 - 2013-12-30 13:17 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify
2014-10-22 22:56 - 2013-12-30 13:17 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Spotify
2014-10-22 01:36 - 2012-07-26 09:41 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-10-22 01:35 - 2014-07-21 16:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-22 01:35 - 2012-07-26 07:53 - 00000000 ___RD () C:\Windows\ToastData
2014-10-22 01:35 - 2012-07-26 07:53 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-22 01:35 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-21 02:22 - 2013-04-12 17:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-21 02:19 - 2013-04-12 17:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-19 01:05 - 2012-07-26 05:17 - 00000201 _____ () C:\Windows\win.ini
2014-10-19 01:02 - 2013-07-23 17:22 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-19 00:48 - 2013-01-23 16:50 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-17 20:07 - 2013-03-08 12:21 - 00000294 _____ () C:\Windows\Brpfx04a.ini
2014-10-17 18:30 - 2013-01-24 22:57 - 00000000 ___RD () C:\Program Files\Skype
2014-10-17 18:30 - 2013-01-24 22:57 - 00000000 ____D () C:\ProgramData\Skype
2014-10-16 17:50 - 2013-01-23 16:19 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Adobe

Some content of TEMP:
====================
C:\Users\Sunako Kirishiki\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-05 03:08

==================== End Of Log ============================
--- --- ---

--- --- ---


Addition Logfile:
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-11-2014
Ran by Sunako Kirishiki at 2014-11-11 00:23:54
Running from C:\Users\Sunako Kirishiki\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

4Videosoft iPhone Transfer Platinum 7.0.10 (HKLM\...\{E16D939E-1E8B-44ca-A57A-9A8768BFAA0E}_is1) (Version: 7.0.10 - 4Videosoft Studio)
7-PDF Printer 10.0.0.1840 (HKLM\...\7-PDF Printer_is1) (Version: 10.0.0.1840 - 7-PDF, Germany - Th. Hodes)
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.1 - Adobe Systems)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Apple Application Support (HKLM\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed (R) III (HKLM\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.01 - Ubisoft)
Audacity 2.0.3 (HKLM\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
BEWERBUNGSMASTER (HKLM\...\ST6UNST #1) (Version:  - )
Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 17.15.0.682 - Bitdefender)
bl (Version: 1.0.0 - Your Company Name) Hidden
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-J4510DW (HKLM\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
CPUID CPU-Z 1.71 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
Defaulttab (HKLM\...\DefaultTab) (Version: 2.6.1.0 - Search Results, LLC) <==== ATTENTION
DMG Extractor (HKLM\...\DMGExtractor) (Version: 1.1.1.1 - Reincubate Ltd)
Edimax RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.5.0 - Edimax)
EVEREST Home Edition v2.20 (HKLM\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Exact Audio Copy 1.0beta3 (HKLM\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)
ffdshow v1.2.4422 [2012-04-09] (HKLM\...\ffdshow_is1) (Version: 1.2.4422.0 - )
FilesFrog Update Checker (HKLM\...\FilesFrog Update Checker) (Version:  - ) <==== ATTENTION
Free IP Switcher (HKLM\...\Free IP Switcher) (Version: hxxp://www.eusing.com/ipswitch/free_ip_switcher.htm - Eusing Software)
Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden
Google+ Auto Backup (HKLM\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
HDVidCodec (HKLM\...\1ClickDownload) (Version: 2.1 Build 26473 - hdvidcodec.com) <==== ATTENTION
HWiNFO32 Version 4.18 (HKLM\...\HWiNFO32_is1) (Version: 4.18 - Martin Malík - REALiX)
iCloud (HKLM\...\{00A61104-74B5-4056-AD00-4397EF4FB141}) (Version: 3.1.0.40 - Apple Inc.)
Iminent (HKLM\...\IMBoosterARP) (Version: 8.18.1.1 - Iminent) <==== ATTENTION
Iminent (Version: 6.4.56.0 - Iminent) Hidden <==== ATTENTION
Iminent Toolbar For Internet Explorer (HKLM\...\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}) (Version: 3.26.0 - Iminent) <==== ATTENTION
iTunes (HKLM\...\{0718A90E-93AA-49AF-A4FE-0165ACD91DF0}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle)
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Linksys Wireless Manager (HKLM\...\Linksys Wireless Manager) (Version: 4.9.9047.0 - Linksys, LLC)
MAGIX Foto Designer 7 (HKLM\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MidiPiano version 2.1.7 (HKLM\...\{4A9A424A-8F89-4845-B29C-4C2E27A3F3EF}_is1) (Version: 2.1.7 - MidiPiano, Inc.)
mIRC (HKLM\...\mIRC) (Version: 7.29 - mIRC Co. Ltd.)
Mozilla Firefox 33.0.2 (x86 de) (HKLM\...\Mozilla Firefox 33.0.2 (x86 de)) (Version: 33.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - MyPC Backup) <==== ATTENTION
Nuance PaperPort 12 (HKLM\...\{88B5FBDC-967D-4B1F-B291-39284AE12201}) (Version: 12.1.0005 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc)
NVIDIA Grafiktreiber 307.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.74 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
Opera 12.16 (HKLM\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA)
Optimizer Pro v3.0 (HKLM\...\Optimizer Pro_is1) (Version: 3.0 - PC Utilities Pro) <==== ATTENTION
osu! (HKLM\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PaperPort Image Printer (HKLM\...\{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}) (Version: 14.00.0000 - Nuance Communications, Inc.)
PDF Architect (HKLM\...\{80A07844-CA64-4DE4-AB61-D37DDBE8074F}) (Version: 1.0.52.8917 - pdfforge)
PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.2.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
ph (Version: 1.0.0 - Your Company Name) Hidden
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Pure Networks Platform (Version: 11.1.9044.0 - Pure Networks) Hidden
Rosetta Stone Ltd Services (HKLM\...\{7BB2EF8A-5376-4BAE-96D0-38BE49501F40}) (Version: 3.2.17 - Rosetta Stone Ltd.)
Rosetta Stone TOTALe (HKLM\...\com.rosettastone.rosettastonetotale) (Version: 4.1.10.1 - Rosetta Stone, Ltd)
Rosetta Stone TOTALe (Version: 4.1.1 - Rosetta Stone, Ltd) Hidden
Rosetta Stone TOTALe (Version: 4.1.10.1 - Rosetta Stone, Ltd) Hidden
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version:  - Samsung Electronics Co., Ltd.)
Scansoft PDF Professional (Version:  - ) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
simplitec simplicheck (HKLM\...\{DF103EDA-7937-4966-8EFB-5EF5C38301F2}) (Version: 1.3.9.0 - simplitec GmbH)
SiSoftware Sandra Lite 2013.SP2 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 19.35.2013.4 - SiSoftware)
Skype™ 6.21 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
System Requirements Lab for Intel (HKLM\...\{53C63F43-B827-42D9-8886-4698D91EA33B}) (Version: 4.5.15.0 - Husdawg, LLC)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Uplay (HKLM\...\Uplay) (Version: 2.0 - Ubisoft)
VLC media player 2.0.7 (HKLM\...\VLC media player) (Version: 2.0.7 - VideoLAN)
WD Drive Manager (x86) (HKLM\...\{813EE1F0-D251-4F98-AC91-9B98CF22717E}) (Version: 2.115 - Western Digital)
WD Drive Utilities (HKLM\...\{C093AD5D-29E9-4777-AAAC-28C02FCC2A51}) (Version: 1.0.4.11 - Western Digital Technologies, Inc.)
WD Quick View (HKLM\...\{57F80E51-A2F3-44AD-BA17-3275B0433165}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.)
WD Security (HKLM\...\{CA5859CA-D9A7-40BE-8318-3B514D6E4924}) (Version: 1.0.4.11 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{05174620-C10A-405E-917F-F6022CDE0E6E}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM\...\{2d588de7-f4f6-4d6d-8719-32cbb9637e9e}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.)
Winamp (HKLM\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-469790813-253376911-2491847524-1001_Classes\CLSID\{1c492e6a-2803-5ed7-83e1-1b1d4d41eb39}\InprocServer32 -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 05:17 - 2012-07-26 05:17 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {03EA6FEA-6E7D-4BFE-8B1B-CA6151FA8174} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-10-19] (Microsoft Corporation)
Task: {06978D87-E4CE-4E63-8568-229F082DAE66} - System32\Tasks\{FF87474B-541D-42CF-865A-6F3D5750D6EA} => c:\program files\opera\opera.exe [2013-07-23] (Opera Software)
Task: {0E128079-B7D2-4B27-B373-1D462F38D7B3} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files\CHIP Updater\CHIPUpdater.exe
Task: {2831D598-0CD2-46A1-BF8A-ADF039280CC9} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Sunako Kirishiki\AppData\Local\FilesFrog Update Checker\update_checker.exe [2013-10-17] (Somoto) <==== ATTENTION
Task: {2A761816-BFF3-4A0F-A7F6-4485CAF9139C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-11-05] (Google Inc.)
Task: {2E9B83CC-49BB-4CFD-A455-76912E131EF7} - System32\Tasks\Bitdefender Auto-Scan => C:\Program Files\Bitdefender\Bitdefender\mtasklaunch.exe [2014-04-09] (Bitdefender)
Task: {56FEE43E-E5F5-40C2-A32C-923058039A73} - System32\Tasks\DefaultCheck => c:\Users\All Users\dtdata\R002.exe [2014-11-05] ()
Task: {68E4E69B-90CC-43CC-BFBD-699BA9EDB96B} - System32\Tasks\Apple Diagnostics => C:\Program Files\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {6DA3538C-AAC2-46C8-805E-A1BC233E68AA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {BED5C09D-059C-435C-ACD2-636A1392BB56} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-11-05] (Google Inc.)
Task: {C633A69E-0258-4337-989A-9379D4F6DB77} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {CA5FD233-D439-40A9-A907-228C7CA966D9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-05] (Adobe Systems Incorporated)
Task: {D1F75988-C4C7-43A2-AFC8-3895FEA86613} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DE2C496E-111C-4CBC-A161-A72ABD148B0C} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {ED456B1D-3BA4-41EF-BF91-6188F98E6FDE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)
Task: {F31829A8-0240-42CF-8AA3-2319D36FA4E3} - System32\Tasks\DefaultReg => c:\Users\All Users\dtdata\R001.exe [2014-11-05] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?

==================== Loaded Modules (whitelisted) =============

2013-08-29 19:59 - 2014-04-09 13:41 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll
2014-04-09 13:41 - 2014-04-09 13:41 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender\UI\accessl.ui
2013-08-29 19:59 - 2011-11-14 19:17 - 00132176 _____ () C:\Program Files\Bitdefender\Bitdefender\bdfwcore.dll
2013-08-29 19:59 - 2014-04-09 13:41 - 00005120 _____ () C:\Program Files\Bitdefender\Bitdefender\UI\IMSecurityAL.ui
2014-07-24 17:04 - 2014-07-24 17:04 - 00676568 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00040_018\ashttpbr.mdl
2014-07-24 17:04 - 2014-07-24 17:04 - 00490144 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00040_018\ashttpdsp.mdl
2014-07-24 17:04 - 2014-07-24 17:04 - 02138096 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00040_018\ashttpph.mdl
2014-07-24 17:04 - 2014-07-24 17:04 - 01128744 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00040_018\ashttprbl.mdl
2011-06-15 05:58 - 2011-06-15 05:58 - 00024064 _____ () C:\Windows\System32\ssb6mlm.dll
2014-04-23 15:05 - 2014-04-23 15:05 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-04-23 15:04 - 2014-04-23 15:04 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-12-06 15:11 - 2013-12-06 15:11 - 00107520 _____ () C:\Users\Sunako Kirishiki\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
2013-08-24 11:24 - 2013-08-24 11:24 - 00308048 _____ () C:\Users\Sunako Kirishiki\AppData\Roaming\ICQM\ICQ\dll\mramenu.dll
2013-02-28 10:46 - 2013-03-05 01:22 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2013-03-08 12:19 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2008-12-12 17:11 - 2008-12-12 17:11 - 00148480 _____ () C:\Program Files\Common Files\Pure Networks Shared\Platform\CAntiVirusCOM.dll
2008-12-12 17:11 - 2008-12-12 17:11 - 00097280 _____ () C:\Program Files\Common Files\Pure Networks Shared\Platform\CFireWallCOM.dll
2013-10-02 16:49 - 2013-10-02 16:49 - 00095088 _____ () C:\Program Files\Bitdefender\Bitdefender\bdmetrics.dll
2011-09-05 18:05 - 2011-09-05 18:05 - 00019968 _____ () D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu
2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
2012-10-26 07:49 - 2012-10-26 07:49 - 00202752 _____ () C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe
2013-01-24 21:35 - 2009-10-07 01:35 - 00901120 _____ () C:\Program Files\Edimax\Common\RaWLAPI.dll
2013-09-19 23:32 - 2013-09-19 23:32 - 00904704 _____ () C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll
2014-10-23 20:19 - 2014-10-23 20:19 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-05-08 09:28 - 2013-07-23 17:04 - 00835584 _____ () C:\Program Files\Opera\gstreamer\gstreamer.dll
2013-05-08 09:28 - 2013-07-23 17:04 - 00093696 _____ () C:\Program Files\Opera\gstreamer\plugins\gstaudioconvert.dll
2013-05-08 09:28 - 2013-07-23 17:04 - 00094208 _____ () C:\Program Files\Opera\gstreamer\plugins\gstaudioresample.dll
2013-05-08 09:28 - 2013-07-23 17:05 - 00057344 _____ () C:\Program Files\Opera\gstreamer\plugins\gstautodetect.dll
2013-05-08 09:28 - 2013-07-23 17:04 - 00096256 _____ () C:\Program Files\Opera\gstreamer\plugins\gstcoreplugins.dll
2013-05-08 09:28 - 2013-07-23 17:04 - 00062976 _____ () C:\Program Files\Opera\gstreamer\plugins\gstdecodebin2.dll
2013-05-08 09:28 - 2013-07-23 17:04 - 00067072 _____ () C:\Program Files\Opera\gstreamer\plugins\gstdirectsound.dll
2013-05-08 09:28 - 2013-07-23 17:04 - 00158208 _____ () C:\Program Files\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
2013-05-08 09:28 - 2013-07-23 17:04 - 00312832 _____ () C:\Program Files\Opera\gstreamer\plugins\gstoggdec.dll
2013-05-08 09:28 - 2013-07-23 17:05 - 00038912 _____ () C:\Program Files\Opera\gstreamer\plugins\gstwaveform.dll
2013-05-08 09:28 - 2013-07-23 17:05 - 00073728 _____ () C:\Program Files\Opera\gstreamer\plugins\gstwavparse.dll
2013-05-08 09:28 - 2013-07-23 17:05 - 00101888 _____ () C:\Program Files\Opera\gstreamer\plugins\gstwebmdec.dll
2014-11-05 10:58 - 2014-11-05 10:58 - 16832176 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll
2014-04-09 13:41 - 2014-05-27 23:47 - 00430368 _____ () C:\Program Files\Bitdefender\Bitdefender\bdidntconp.dll
2014-02-03 17:01 - 2014-05-27 23:47 - 00203264 _____ () C:\Program Files\Bitdefender\Bitdefender\UI\bdidntconp.ui

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Sunako Kirishiki\Desktop\FRST.exe:BDU
AlternateDataStreams: C:\Users\Sunako Kirishiki\Desktop\OTL.exe:BDU
AlternateDataStreams: C:\Users\Sunako Kirishiki\Downloads\DropboxInstaller.exe:BDU
AlternateDataStreams: C:\Users\Sunako Kirishiki\Downloads\JDownloaderUpdater2b.exe:BDU

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "NETGEAR WPN111 Smart Wizard.lnk"
HKLM\...\StartupApproved\Run: => "WinampAgent"
HKLM\...\StartupApproved\Run: => "PDFHook"
HKCU\...\StartupApproved\StartupFolder: => "MyPC Backup.lnk"
HKCU\...\StartupApproved\Run: => "Skype"
HKCU\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKCU\...\StartupApproved\Run: => "icq"
HKCU\...\StartupApproved\Run: => "Google+ Auto Backup"
HKCU\...\StartupApproved\Run: => "Spotify"

========================= Accounts: ==========================

Administrator (S-1-5-21-469790813-253376911-2491847524-500 - Administrator - Disabled)
Gast (S-1-5-21-469790813-253376911-2491847524-501 - Limited - Disabled)
Sunako Kirishiki (S-1-5-21-469790813-253376911-2491847524-1001 - Administrator - Enabled) => C:\Users\Sunako Kirishiki
UpdatusUser (S-1-5-21-469790813-253376911-2491847524-1002 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/11/2014 00:00:02 AM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 11:00:02 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 10:00:00 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 09:00:02 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 08:00:00 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 07:00:02 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 06:00:01 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 05:00:03 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 04:00:01 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/10/2014 03:00:01 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (1876) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).


System errors:
=============
Error: (11/10/2014 04:15:38 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/07/2014 01:24:29 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (11/07/2014 00:58:25 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0xc190010f fehlgeschlagen: German ESD Bundle Parent

Error: (11/05/2014 04:02:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Erkennung interaktiver Dienste" wurde mit folgendem Fehler beendet:
%%1

Error: (11/05/2014 11:33:38 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Erkennung interaktiver Dienste" wurde mit folgendem Fehler beendet:
%%1

Error: (11/03/2014 07:10:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (11/03/2014 07:10:00 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (11/03/2014 07:06:31 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎03.‎11.‎2014 um 18:38:04 unerwartet heruntergefahren.

Error: (11/03/2014 07:00:31 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (11/03/2014 06:59:25 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-01-30 18:53:47.843
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 15:02:22.991
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 14:22:51.487
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 13:59:01.601
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 13:42:14.047
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 12:28:53.087
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 01:21:49.859
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-29 17:18:55.534
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-29 16:43:13.774
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-29 16:37:55.504
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) D CPU 3.00GHz
Percentage of memory in use: 61%
Total physical RAM: 3582.15 MB
Available physical RAM: 1394.15 MB
Total Pagefile: 8702.15 MB
Available Pagefile: 5178.21 MB
Total Virtual: 2047.88 MB
Available Virtual: 1833.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:102.05 GB) (Free:8.63 GB) NTFS
Drive d: (Data) (Fixed) (Total:195.62 GB) (Free:105.89 GB) NTFS
Drive h: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.13 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 79751EB5)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=102.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=195.6 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 11.11.2014 17:02
Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    Defaulttab

    FilesFrog Update Checker

    HDVidCodec

    Iminent

    Iminent

    Iminent Toolbar For Internet Explorer (HKLM\...\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}) (Version: 3.26.0 - Iminent) <==== ATTENTION

    MyPC Backup

    Optimizer Pro v3.0


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

genso.sekai 21.11.2014 01:30
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 20.11.2014
Suchlauf-Zeit: 17:54:03
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.11.20.06
Rootkit Datenbank: v2014.11.18.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8
CPU: x86
Dateisystem: NTFS
Benutzer: Sunako Kirishiki

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 356164
Verstrichene Zeit: 16 Min, 43 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 88
PUP.Optional.WebPlayer.A, C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer, Löschen bei Neustart, [d33339055a2262d4982779d6c53efb05],
PUP.Optional.WebPlayer.A, C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer\FLV Player, Löschen bei Neustart, [d33339055a2262d4982779d6c53efb05],
PUP.Optional.WebPlayer.A, C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer\FLV Player\icons, In Quarantäne, [d33339055a2262d4982779d6c53efb05],
PUP.Optional.WebPlayer.A, C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer\FLV Player\scripts, In Quarantäne, [d33339055a2262d4982779d6c53efb05],
PUP.Optional.WebPlayer.A, C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer\FLV Player\scripts\kango, In Quarantäne, [d33339055a2262d4982779d6c53efb05],
PUP.Optional.WebPlayer.A, C:\Users\Sunako Kirishiki\AppData\Local\WebPlayer\FLV Player\scripts\web_player, In Quarantäne, [d33339055a2262d4982779d6c53efb05],
PUP.Optional.OpenCandy, C:\Users\Sunako Kirishiki\AppData\Roaming\OpenCandy, In Quarantäne, [7e88330b4735b680b1f37098c24128d8],
PUP.Optional.OpenCandy, C:\Users\Sunako Kirishiki\AppData\Roaming\OpenCandy\6803D41B4EE846FBAD1C53ADE66C195E, In Quarantäne, [7e88330b4735b680b1f37098c24128d8],
PUP.Optional.OpenCandy, C:\Users\Sunako Kirishiki\AppData\Roaming\OpenCandy\D87E6A04E6D845CFB9740ED6C1D3CB2A, In Quarantäne, [7e88330b4735b680b1f37098c24128d8],
PUP.Optional.OpenCandy, C:\Users\Sunako Kirishiki\AppData\Roaming\OpenCandy\OpenCandy_D87E6A04E6D845CFB9740ED6C1D3CB2A, In Quarantäne, [7e88330b4735b680b1f37098c24128d8],
PUP.Optional.DefaultTab.A, C:\Windows\Temp\installdt.tmp\XPI, In Quarantäne, [21e599a595e76fc729a7ff0993706799],
PUP.Optional.DefaultTab.A, C:\Windows\Temp\installdt.tmp\XPI\defaulttab, In Quarantäne, [21e599a595e76fc729a7ff0993706799],
PUP.Optional.DefaultTab.A, C:\Windows\Temp\installdt.tmp\XPI\defaulttab\components, In Quarantäne, [21e599a595e76fc729a7ff0993706799],
PUP.Optional.DefaultTab.A, C:\Windows\Temp\installdt.tmp\XPI\defaulttab\locale, In Quarantäne, [21e599a595e76fc729a7ff0993706799],
PUP.Optional.DefaultTab.A, C:\Windows\Temp\installdt.tmp\XPI\defaulttab\locale\en-US, In Quarantäne, [21e599a595e76fc729a7ff0993706799],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\images, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\lib, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\adapters, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\adapters\de, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\adapters\Webmail, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\advertising, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\content, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\content\fx2, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\content\fx2\off, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\content\fx2\on, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\content\images, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\content\images\emoji, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\games, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\scripts\minibar\menu_page, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\_locales, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\_locales\en, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.10.2.1_0\_locales\fr, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\images, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\lib, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\adapters, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\adapters\de, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\adapters\Webmail, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\advertising, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\content, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\content\fx2, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\content\fx2\off, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\content\fx2\on, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\content\images, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\content\images\emoji, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\games, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\scripts\minibar\menu_page, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\_locales, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\_locales\en, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\6.13.4.1_0\_locales\fr, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\images, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\jquery, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\lib, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\adapters, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\fx2, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\fx2\off, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\fx2\on, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\bhp, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ql, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\games, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\services, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\de, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\en, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\es, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\fr, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\it, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\pt_BR, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\tr, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Yontoo.A, C:\Program Files\Yontoo, In Quarantäne, [ca3c8ab457255bdb0c49d14728db15eb],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\Apps, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],

Dateien: 169
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\default_icon.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\default_icon_states.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\Expand-26x24.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\fb-bg-sprite.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\fbcoverimage.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\fbimagenotheater.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\fbimageview.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\FB_Share.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\FB_Share_Tiny.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\gifts.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\googleimagesbutton.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\googleimagesbuttonNEW.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\help.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\home.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\imbwin1.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\imbwin1_409daae67f73f4fb84c27d6d70463f2b.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\imbwin_hf.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\imbwin_vf.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\iminentbutton.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\iminentbutton_bg.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\InviteFriends.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\LeftExpandBar.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\leftTooltip.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\Line.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\logo48.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\mailfooter.jpg, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\Minibar_buttons.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\new.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\notification.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ql_popup3.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\RightExpandBar.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\rightTooltip.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\s10.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\search.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\separator.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\social_games.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\TellAFriendBackground.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\toolbarbutton_bg.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\toolbar_bg.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\tooltipArrow.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ui-check-box-checked.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ui-check-box.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\bhp\iminent-logo.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90B0.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9299.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\E29ABD.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\E29BB5.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8C99.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8C9F.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8CB9.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8D80.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8DBB.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8E81.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8E89.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8EB1.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8EB6.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F8EB8.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F908D.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90A7.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90AC.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90AE.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90AF.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90B1.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90B4.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90B6.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90B7.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F90B9.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F918C.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F918D.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F918E.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F91BD.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9280.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9284.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F928B.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F928D.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F928F.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9293.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9294.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9297.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F929B.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F929C.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F929D.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F92A4.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F92A9.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F92AA.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F93B1.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F94A5.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9881.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9882.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9884.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9889.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F988A.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F988C.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F988D.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9892.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9893.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9894.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9896.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9898.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F989A.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F989C.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F98A1.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F98AD.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F98B2.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F98B3.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9A97.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\emoji\F09F9ABD.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ql\add-icon.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ql\close-icon-white.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ql\close-icon.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ql\iminent_bookmark.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ql\logo.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\content\images\ql\star_bookmarks.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\games\gameiframe1.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\games\gameiframe2.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\games\gameiframe3.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\games\gameiframe4.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\games\games.css, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\games\games.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\1031.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\1033.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\1036.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\1040.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\1048.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\1055.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\2070.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\3082.html, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\menu_page\ShareMenu.css, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\services\bhp.js, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\minibar\services\favlinks.js, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\toolbar.css, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\toolbar.js, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\chrome_bg_win.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\hide.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\logo48.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_02-03.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_02.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_04-05.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_04.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_06-07.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_06.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_08-09.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_08.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\toolbar-icons_10.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\scripts\toolbar\images\x.png, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\de\messages.json, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\en\messages.json, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\es\messages.json, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\fr\messages.json, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\it\messages.json, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\pt_BR\messages.json, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Conduit, C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\8.13.3.2_0\_locales\tr\messages.json, In Quarantäne, [5caace70c1bbaf8714439e6c2ad9966a],
PUP.Optional.Yontoo.A, C:\Program Files\Yontoo\Y2Desktop.Updater.exe, In Quarantäne, [ca3c8ab457255bdb0c49d14728db15eb],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\addon.ico, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabBHO.cfg, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabSetup.exe~, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabUninstaller.exe, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabWrap.dll, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabWrap64.dll, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DT.ico, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\searchhere.ico, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\Setup.z, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.DefaultTab.A, C:\Windows\System32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\uninstalldt.exe, In Quarantäne, [54b2c07e7705f442eb5180a6e91a9c64],
PUP.Optional.Babylon.A, C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\ea1stcez.SunakoKirishiki\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.newTab", true);), Ersetzt,[a85e350990ec9d9948da5d29bf4628d8]
PUP.Optional.Babylon.A, C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\ea1stcez.SunakoKirishiki\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten wh), Ersetzt,[3fc7132be5975dd90a18d8ae10f512ee]
PUP.Optional.Iminent.A, C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\ea1stcez.SunakoKirishiki\user.js, Gut: (), Schlecht: (user_pref("extensions.iminent.tlbrSrchUrl", "hxxp://search.iminent.com/?ref=toolbarm#q=");), Ersetzt,[e2245ae4d2aaa98dae6a572f93720bf5]
PUP.Optional.Babylon.A, C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.newTab", true);), Ersetzt,[4cba320c80fc4fe7bc663d49db2a0bf5]
PUP.Optional.Babylon.A, C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\prefs.js, Gut: (), Schlecht: (rences

/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten wh), Ersetzt,[a75fae90106c70c62af8374fa1641ae6]
PUP.Optional.Iminent.A, C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\user.js, Gut: (), Schlecht: (user_pref("extensions.iminent.tlbrSrchUrl", "hxxp://search.iminent.com/?ref=toolbarm#q=");), Ersetzt,[2ed887b79ddf270f1107ed997491fb05]

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)

Code:
# AdwCleaner v4.101 - Bericht erstellt am 20/11/2014 um 19:54:53
# Aktualisiert 09/11/2014 von Xplode
# Database : 2014-11-16.1 [Live]
# Betriebssystem : Windows 8 Pro  (32 bits)
# Benutzername : Sunako Kirishiki - SUNAKOKIRISHIKI
# Gestartet von : C:\Users\Sunako Kirishiki\Desktop\AdwCleaner_4.101.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BrowserProtect
Ordner Gelöscht : C:\ProgramData\ClickIT
Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
Ordner Gelöscht : C:\Program Files\Movie2KDownloader.com
Ordner Gelöscht : C:\Program Files\simplitec
Ordner Gelöscht : C:\Users\Public\Util
Ordner Gelöscht : C:\Users\Sunako Kirishiki\AppData\LocalLow\IminentToolbar
Ordner Gelöscht : C:\Users\Sunako Kirishiki\AppData\LocalLow\Toolbar4
Ordner Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com
Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
Datei Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\ea1stcez.SunakoKirishiki\defaulttab.config
Datei Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\defaulttab.config
Datei Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\ea1stcez.SunakoKirishiki\searchplugins\11-suche.xml
Datei Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\11-suche.xml
Datei Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\ea1stcez.SunakoKirishiki\user.js
Datei Gelöscht : C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\user.js

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Sunako Kirishiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player\Uninstall.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKCU\Software\59e8c8abc3ae512
Schlüssel Gelöscht : HKLM\SOFTWARE\59e8c8abc3ae512
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{8E9F2D02-6B06-4EBA-92C2-68438EADED28}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{71588120-FC17-4463-B07D-2C71FE6E057B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{71588120-FC17-4463-B07D-2C71FE6E057B}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\PrivitizeVPNInstallDates
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Webplayer
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\simplitec
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF103EDA-7937-4966-8EFB-5EF5C38301F2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\237AA359BFA99C94484AF769ACA080AD
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\237AA359BFA99C94484AF769ACA080AD
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\237AA359BFA99C94484AF769ACA080AD
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\delta-search.com

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.17148


-\\ Mozilla Firefox v33.0.2 (x86 de)

[aphofki1.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.enableToolbar", "true");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.iminent.com/?ref=NewTab&appId=2D5E740F-4F1D-4C80-A9B6-90F174A49DBE");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.5106b535c7aee.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.match(/[...]
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.delta-search.com/?affID=119776&babsrc=NT_ss&mntrId=28bc869c000000000000801f02581ebf");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.admin", false);
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.bbDpng", "28");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.cntry", "CH");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.dfltLng", "en");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.hdrMd5", "E44010057EC4AFF35523B74C016AAF05");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.id", "28bc869c000000000000801f02581ebf");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.instlDay", "15770");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.lastVrsnTs", "1.8.10.01:41:24");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.newTab", false);
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.sg", "azb");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.10.0");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.10.01:41:24");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.10.0");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.admin", false);
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.aflt", "orgnl");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.appId", "{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.autoRvrt", "false");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.cntry", "CH");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.dfltLng", "");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.excTlbr", false);
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.ffxUnstlRst", false);
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.hdrMd5", "28420DB0EDF492853808B6DD400A6936");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.id", "28bc869c00000000000098fc11ea1240");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.instlDay", "16205");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.instlRef", "");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.lastVrsnTs", "1.8.28.316:23:31");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.newTab", false);
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.prdct", "iminent");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.prtnrId", "iminent");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.rvrt", "false");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.sg", "none");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.smplGrp", "none");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.tlbrId", "LDCHN");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.tlbrSrchUrl", "hxxp://search.iminent.com/?ref=toolbarm#q=");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.vrsn", "1.8.28.3");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.vrsnTs", "1.8.28.316:23:31");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extensions.iminent.vrsni", "1.8.28.3");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("extentions.y2layers.installId", "df5c3e13-3bed-447b-9bd3-6d5b20e72ce7");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.LayoutId", "1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.ShowThankyouPixel", "0");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent._oaZGabJJ8Q_", "{\"cpt\":0,\"cpr\":0.20549356807204153,\"s\":0,\"es\":3}");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.adapters", "{\"rabattjoker\":{\"CountryCode\":\"CH\",\"NoAds\":false,\"Status\":2,\"expireTime\":\"1386334404363259200\"},\"google\":{\"CountryCode\":\"CH\",\"NoAds\":false,\"Status[...]
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.displayFavLinks", "1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.enableToolbar", "false");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"10bb6277-6b2b-413e-8d82-ad9398543254\",\"name\":\"Dealply\",\"addonId\":1,\"url\":\"//i.iminentjs.info/imitin/javascript.js\",\"queryS[...]
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.newtabredirect", "true");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.nomsi", "true");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.registerToolbarEvent101", "1389447947971");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.registerToolbarEvent102", "1415180824374");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.registerToolbarEvent109", "1410380148462");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.registerToolbarEvent110", "1410381806294");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.registerToolbarEvent111", "1410380147994");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.registerToolbarEvent112", "1410380154461");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.registerToolbarEvent122", "1410380148597");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.registerToolbarEvent140", "1415180846338");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.searchindex", "2");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.trackingInfo", "{\"state\":0,\"samplingRate\":0}");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.version", "8.40.5.1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.versioning", "{\"CurrentVersion\":\"8.40.5.1\",\"InstallEventCTime\":1415183619147,\"InstallEvent\":\"True\"}");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.FavLinkSplitTestingClass", "v1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.SOFTONICREFRESHRATE", "140000");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.ShowThankyouPixel", "0");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent101", "1370041624867");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent102", "1376489674244");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1374532261513");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.FavLinkSplitTestingClass", "v1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.LayoutId", "1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.SOFTONICREFRESHRATE", "140000");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.displayFavLinks", "1");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent102", "1376490051473");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent105", "1373093293915");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1373927795745");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent110", "1373985184114");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1373927795771");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1373927798908");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1373927795793");
[ea1stcez.SunakoKirishiki\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent134", "1374532309151");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.5106b535c7aee.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.match(/[...]
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.delta-search.com/?affID=119776&babsrc=NT_ss&mntrId=28bc869c000000000000801f02581ebf");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.admin", false);
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.bbDpng", "28");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.cntry", "CH");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.dfltLng", "en");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.hdrMd5", "E44010057EC4AFF35523B74C016AAF05");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.id", "28bc869c000000000000801f02581ebf");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.instlDay", "15770");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.lastVrsnTs", "1.8.10.01:41:24");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.newTab", false);
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.sg", "azb");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.10.0");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.10.01:41:24");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.10.0");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("extentions.y2layers.installId", "df5c3e13-3bed-447b-9bd3-6d5b20e72ce7");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.adapters", "{\"rabattjoker\":{\"CountryCode\":\"CH\",\"NoAds\":false,\"Status\":2,\"expireTime\":\"1386334404363259200\"},\"google\":{\"CountryCode\":\"CH\",\"NoAds\":false,\"Status[...]
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.displayFavLinks", "1");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.enableToolbar", "true");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"10bb6277-6b2b-413e-8d82-ad9398543254\",\"name\":\"Dealply\",\"addonId\":1,\"url\":\"//i.iminentjs.info/imitin/javascript.js\",\"queryS[...]
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.FavLinkSplitTestingClass", "v1");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.SOFTONICREFRESHRATE", "140000");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.ShowThankyouPixel", "0");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent101", "1370041624867");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent102", "1376489674244");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1374532261513");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.FavLinkSplitTestingClass", "v1");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.LayoutId", "1");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.SOFTONICREFRESHRATE", "140000");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.displayFavLinks", "1");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent102", "1376490051473");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent105", "1373093293915");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1373927795745");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent110", "1373985184114");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1373927795771");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1373927798908");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1373927795793");
[my25ifaa.default\prefs.js] - Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent134", "1374532309151");

-\\ Google Chrome v38.0.2125.111


*************************

AdwCleaner[R0].txt - [331 octets] - [20/11/2014 18:33:00]
AdwCleaner[R1].txt - [27638 octets] - [20/11/2014 18:34:01]
AdwCleaner[S0].txt - [29240 octets] - [20/11/2014 19:54:53]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [29301 octets] ##########

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.9 (11.15.2014:2)
OS: Windows 8 Pro x86
Ran by Sunako Kirishiki on 20.11.2014 at 20:10:33,89
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-469790813-253376911-2491847524-1001



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Users\Sunako Kirishiki\AppData\Roaming\mozilla\firefox\profiles\my25ifaa.default\extensions\toolbar@web.de
Successfully deleted the following from C:\Users\Sunako Kirishiki\AppData\Roaming\mozilla\firefox\profiles\my25ifaa.default\prefs.js

user_pref("browser.search.defaultengine", "Privitize VPN");
user_pref("extensions.unitedinternet.original.browser.startup.homepage", "hxxp://www.mysearchresults.com/?c=2408&t=14");
Emptied folder: C:\Users\Sunako Kirishiki\AppData\Roaming\mozilla\firefox\profiles\my25ifaa.default\minidumps [7 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.11.2014 at 20:24:06,86
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

genso.sekai 21.11.2014 01:31

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-11-2014
Ran by Sunako Kirishiki (administrator) on SUNAKOKIRISHIKI on 21-11-2014 01:25:45
Running from C:\Users\Sunako Kirishiki\Desktop
Loaded Profile: Sunako Kirishiki (Available profiles: Sunako Kirishiki & UpdatusUser)
Platform: Microsoft Windows 8 Pro (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(pdfforge GbR) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\ConversionService.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Windows\System32\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files\Edimax\Common\RaRegistry.exe
(Rosetta Stone Ltd.) C:\Program Files\RosettaStoneLtdServices\RosettaStoneDaemon.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(WDC) C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
(Cisco Systems, Inc.) C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Cisco Systems, Inc.) C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Linksys, LLC) C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe
(WDC) C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
(Microsoft Corporation) D:\Programme D\Microsoft Office\Office12\GrooveMonitor.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Adobe Systems Inc.) D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe
(Spotify Ltd) C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Edimax Technology Co.) C:\Program Files\Edimax\Common\RaUI.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Opera Software) C:\Program Files\Opera\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM\...\Run: [WinampAgent] => D:\Programme D\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.)
HKLM\...\Run: [IndexSearch] => C:\Program Files\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PDFHook] => C:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF5 Registry Controller] => C:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2013-07-22] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM\...\Run: [nmctxth] => C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe [642856 2008-12-12] (Cisco Systems, Inc.)
HKLM\...\Run: [Linksys Wireless Manager] => C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe [1358384 2009-02-16] (Linksys, LLC)
HKLM\...\Run: [WD Drive Manager] => C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe [450560 2009-06-26] (WDC)
HKLM\...\Run: [WD Drive Unlocker] => C:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694080 2013-04-01] (Western Digital Technologies, Inc.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1915616 2014-11-13] (Bitdefender)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM\...\Run: [WD Quick View] => C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-07-22] (Western Digital Technologies, Inc.)
HKLM\...\Run: [GrooveMonitor] => D:\Programme D\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-09-05] (Adobe Systems Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe Acrobat Speed Launcher] => D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [335360 2012-07-26] (Microsoft Corporation)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [icq] => C:\Users\Sunako Kirishiki\AppData\Roaming\ICQM\icq.exe [28698984 2013-08-24] (ICQ)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [482392 2014-11-13] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [901608 2014-11-13] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] => C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe [615256 2014-11-13] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Spotify] => C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Spotify.exe [6553144 2014-10-10] (Spotify Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Spotify Web Helper] => C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-10] (Spotify Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Google+ Auto Backup] => C:\Users\Sunako Kirishiki\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4825880 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Policies\Explorer: [NoCDBurning] 0
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [482392 2014-11-13] (Bitdefender)
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [901608 2014-11-13] (Bitdefender)
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] => C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe [615256 2014-11-13] (Bitdefender)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Utility.lnk
ShortcutTarget: Wireless Utility.lnk -> C:\Program Files\Edimax\Common\RaUI.exe (Edimax Technology Co.)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-469790813-253376911-2491847524-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-469790813-253376911-2491847524-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKU\S-1-5-21-469790813-253376911-2491847524-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6C0B315D73FACD01
HKU\S-1-5-21-469790813-253376911-2491847524-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {71588120-FC17-4463-B07D-2C71FE6E057B} URL =
SearchScopes: HKU\S-1-5-21-469790813-253376911-2491847524-1001 -> DefaultScope {71588120-FC17-4463-B07D-2C71FE6E057B} URL =
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-469790813-253376911-2491847524-1001 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programme D\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.192.1

FireFox:
========
FF ProfilePath: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default
FF Homepage: hxxp://www.google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat -> D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-469790813-253376911-2491847524-1001: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\webde-suche.xml
FF Extension: YouTube Unblocker - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\youtubeunblocker@unblocker.yt [2014-09-11]
FF Extension: Block site - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2013-10-14]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-11-05]
FF Extension: Ad-Bye - For Facebook - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\s.alfa@idev.com.xpi [2014-11-05]
FF Extension: UnPlug - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\unplug@compunach.xpi [2014-11-05]
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-01-28]
FF HKLM\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\ffpwdman
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\ffpwdman [2013-08-29]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-07-04]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2013-08-29]
FF Extension: No Name - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\extensions\firefoxmini@go.im.xpi [Not Found]
FF Extension: No Name - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\extensions\toolbar@web.de [Not Found]
FF Extension: No Name - firefoxmini@go.im [Not Found]
FF Extension: No Name - toolbar@web.de [Not Found]

Chrome:
=======
CHR Profile: C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgfehiiihoneblkaemlnglbokdgoopk [2013-01-28]
CHR Extension: (Iminent Toolbar) - C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcemhggbahmlmhgnbpbbdaklcojhbecn [2013-03-12]
CHR HKLM\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\pmbxcr.crx [2014-02-28]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [69880 2014-11-13] (Bitdefender)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 Microsoft Office Groove Audit Service; D:\Programme D\Microsoft Office\Office12\GrooveAuditService.exe [64856 2009-02-26] (Microsoft Corporation)
R2 nmservice; C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe [642856 2008-12-12] (Cisco Systems, Inc.)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-03-05] ()
R2 RalinkRegistryWriter; C:\Program Files\Edimax\Common\RaRegistry.exe [185632 2009-12-17] (Ralink Technology, Corp.)
R2 RosettaStoneDaemon; C:\Program Files\RosettaStoneLtdServices\RosettaStoneDaemon.exe [1646056 2011-03-31] (Rosetta Stone Ltd.)
S3 SandraAgentSrv; D:\Programme D\SiSoftware Sandra Lite 2013.SP2\RpcAgentSrv.exe [71832 2009-03-01] (SiSoftware) [File not signed]
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [54424 2014-11-13] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1300224 2014-11-13] (Bitdefender)
R2 WDBackup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-07-22] (Western Digital Technologies, Inc.)
R2 WDBtnMgrSvc.exe; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [102400 2009-06-26] (WDC) [File not signed]
R2 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-07-22] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14456 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1060312 2014-11-13] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [242944 2014-11-13] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [528248 2014-11-13] (BitDefender)
R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [24576 2012-07-26] (Microsoft Corporation)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [19872 2012-07-11] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [78656 2014-05-27] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [94088 2013-10-02] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [108008 2013-10-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [66832 2014-01-03] (BitDefender SRL)
R1 bdselfpr; C:\Program Files\Bitdefender\Bitdefender\bdselfpr.sys [135600 2013-09-09] (BitDefender LLC)
S3 DNIMp50; C:\Windows\System32\Drivers\DNIMp50.sys [21504 2006-11-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 DNISp50; C:\Windows\System32\Drivers\DNISp50.sys [20480 2006-11-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [242240 2013-02-28] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [165744 2013-10-02] (BitDefender LLC)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-06-01] (REALiX(tm))
S3 LVUSBSta; C:\Windows\system32\DRIVERS\LVUSBSta.sys [22016 2005-01-31] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-20] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
S3 PID_0928; C:\Windows\system32\DRIVERS\LV561AV.SYS [211712 2005-01-31] (Logitech Inc.)
R2 pnarp; C:\Windows\system32\DRIVERS\pnarp.sys [24880 2008-12-12] (Cisco Systems, Inc.)
R2 purendis; C:\Windows\system32\DRIVERS\purendis.sys [26416 2008-12-12] (Cisco Systems, Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [45968 2011-11-03] (Rovi Corporation)
S3 SANDRA; D:\Programme D\SiSoftware Sandra Lite 2013.SP2\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [385096 2014-11-13] (BitDefender S.R.L.)
S3 WPN111; C:\Windows\system32\DRIVERS\WPN111v.sys [904192 2008-08-05] (Atheros Communications, Inc.)
S3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [155136 2012-07-26] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-21 01:25 - 2014-11-21 01:25 - 00000000 ____D () C:\Users\Sunako Kirishiki\Desktop\FRST-OlderVersion
2014-11-20 20:24 - 2014-11-20 20:24 - 00001365 _____ () C:\Users\Sunako Kirishiki\Desktop\JRT.txt
2014-11-20 20:10 - 2014-11-20 20:10 - 00000000 ____D () C:\Windows\ERUNT
2014-11-20 20:09 - 2014-11-20 20:09 - 01707532 _____ (Thisisu) C:\Users\Sunako Kirishiki\Desktop\JRT.exe
2014-11-20 20:08 - 2014-11-20 20:08 - 00029382 _____ () C:\Users\Sunako Kirishiki\Desktop\AdwCleaner[S0].txt
2014-11-20 18:31 - 2014-11-20 18:31 - 00060683 _____ () C:\Users\Sunako Kirishiki\Desktop\mbam.txt
2014-11-20 18:05 - 2014-11-20 19:55 - 00000000 ____D () C:\AdwCleaner
2014-11-20 17:57 - 2014-11-20 17:57 - 02140160 _____ () C:\Users\Sunako Kirishiki\Desktop\AdwCleaner_4.101.exe
2014-11-20 17:52 - 2014-11-20 23:30 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-20 17:51 - 2014-11-20 17:51 - 00005837 _____ () C:\Windows\system32\jupdate-1.7.0_71-b14.log
2014-11-20 17:51 - 2014-11-20 17:51 - 00001060 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-11-20 17:51 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-20 17:51 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-20 17:51 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-20 17:51 - 2014-09-26 18:42 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-11-20 17:51 - 2014-09-26 18:36 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-11-20 17:51 - 2014-09-26 18:36 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-11-20 17:51 - 2014-09-26 18:35 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-11-20 17:42 - 2014-11-20 17:42 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Sunako Kirishiki\Desktop\mbam-setup-2.0.3.1025.exe
2014-11-20 17:37 - 2014-11-20 17:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sunako Kirishiki\Desktop\revosetup95.exe
2014-11-20 17:37 - 2014-11-20 17:37 - 00001222 _____ () C:\Users\Sunako Kirishiki\Desktop\Revo Uninstaller.lnk
2014-11-20 17:37 - 2014-11-20 17:37 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-11-20 17:36 - 2014-11-08 07:57 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-20 17:36 - 2014-11-08 07:56 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-20 17:32 - 2014-11-20 17:32 - 00000145 _____ () C:\Windows\system32\΀
2014-11-18 12:54 - 2014-10-30 01:53 - 00713672 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-18 12:54 - 2014-10-30 01:53 - 00106432 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-18 12:48 - 2014-11-20 19:57 - 00458822 _____ () C:\Windows\PFRO.log
2014-11-14 23:27 - 2014-11-21 00:32 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0005a2eb0b9f5.job
2014-11-14 23:27 - 2014-11-20 23:32 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0005a2bd0297a.job
2014-11-13 17:12 - 2014-11-13 17:12 - 01060312 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2014-11-12 00:18 - 2014-10-23 12:04 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 00:18 - 2014-09-24 00:30 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 00:18 - 2014-09-24 00:30 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-11-12 00:18 - 2014-09-13 05:40 - 01799488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-11-12 00:18 - 2014-09-06 01:45 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-11-12 00:18 - 2014-09-03 03:48 - 00457728 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-11-12 00:18 - 2014-09-03 03:48 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-11-12 00:18 - 2014-09-03 03:48 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-11-12 00:18 - 2014-08-29 05:17 - 02043392 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-11-12 00:18 - 2014-08-29 05:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-11-12 00:18 - 2014-08-28 07:04 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-11-12 00:18 - 2014-08-28 07:04 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-11-12 00:18 - 2014-08-22 00:56 - 01418752 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 00:18 - 2014-07-24 12:42 - 00297792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-11-12 00:17 - 2014-11-05 05:52 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 00:17 - 2014-11-05 05:51 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 00:17 - 2014-11-05 03:51 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 00:17 - 2014-10-26 01:36 - 01762816 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 00:17 - 2014-10-26 01:36 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 00:17 - 2014-10-26 01:35 - 14368768 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 13758464 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 02861568 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 02055168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 00:17 - 2014-10-26 01:34 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 00:17 - 2014-10-26 01:13 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 00:17 - 2014-10-18 08:05 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 00:17 - 2014-10-02 23:30 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 00:17 - 2014-10-02 23:30 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-11-12 00:17 - 2014-10-02 23:30 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 00:17 - 2014-10-01 23:51 - 03407360 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 00:17 - 2014-09-22 05:22 - 00029688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-11-12 00:17 - 2014-08-26 23:07 - 00231080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-11-12 00:16 - 2014-10-11 07:18 - 00156480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 00:16 - 2014-10-11 06:58 - 08858624 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 02801664 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 02416640 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-11-12 00:16 - 2014-10-11 06:56 - 02037760 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-11-12 00:16 - 2014-10-11 06:05 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 00:16 - 2014-10-11 06:04 - 00713728 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-11 00:23 - 2014-11-11 00:25 - 00032031 _____ () C:\Users\Sunako Kirishiki\Desktop\Addition.txt
2014-11-11 00:21 - 2014-11-21 01:25 - 00026975 _____ () C:\Users\Sunako Kirishiki\Desktop\FRST.txt
2014-11-11 00:20 - 2014-11-21 01:25 - 01108992 _____ (Farbar) C:\Users\Sunako Kirishiki\Desktop\FRST.exe
2014-11-11 00:20 - 2014-11-21 01:25 - 00000000 ____D () C:\FRST
2014-11-05 11:59 - 2014-11-05 11:59 - 00602112 _____ (OldTimer Tools) C:\Users\Sunako Kirishiki\Desktop\OTL.exe
2014-11-05 10:59 - 2014-11-21 00:38 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-05 10:59 - 2014-11-20 20:05 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-05 10:59 - 2014-11-05 16:39 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-05 10:59 - 2014-11-05 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-05 10:58 - 2014-11-21 00:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-05 02:47 - 2014-11-05 02:48 - 00277204 _____ () C:\Users\Sunako Kirishiki\Documents\cc_20141105_024743.reg
2014-11-04 18:00 - 2014-11-04 18:00 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-04 18:00 - 2014-11-04 18:00 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-04 17:42 - 2014-11-20 17:40 - 00000000 ____D () C:\ProgramData\dtdata
2014-11-03 09:33 - 2014-11-03 09:33 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Abelssoft
2014-11-03 09:33 - 2014-11-03 09:33 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-11-03 09:32 - 2014-11-03 09:33 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Abelssoft
2014-11-03 09:31 - 2014-11-05 11:20 - 00000000 ____D () C:\Program Files\CHIP Updater
2014-10-31 20:40 - 2014-10-31 20:40 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-10-30 20:49 - 2014-11-02 03:00 - 00000000 ____D () C:\Windows\system32\AutoUpdateLicense
2014-10-28 20:36 - 2014-10-22 02:34 - 00010777 _____ () C:\Windows\system32\AutoconfigV2.cab
2014-10-28 20:36 - 2014-10-22 02:33 - 00437424 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2014-10-28 20:36 - 2014-10-22 02:33 - 00409080 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2014-10-28 20:36 - 2014-10-22 02:08 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-10-28 20:36 - 2014-10-22 02:08 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-28 20:36 - 2014-10-22 02:07 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2014-10-23 01:21 - 2014-10-23 01:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-10-23 01:21 - 2014-10-23 01:21 - 00000000 ____D () C:\Program Files\CPUID
2014-10-22 22:47 - 2014-11-18 12:50 - 03827248 _____ () C:\Windows\system32\FNTCACHE.DAT

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-21 01:00 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\system32\sru
2014-11-20 21:28 - 2013-01-23 16:18 - 01069825 _____ () C:\Windows\WindowsUpdate.log
2014-11-20 20:07 - 2013-01-23 16:22 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-20 20:05 - 2013-08-29 19:30 - 00008192 _____ () C:\Windows\system32\WDPABKP.dat
2014-11-20 19:59 - 2012-07-26 07:04 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-20 19:54 - 2013-12-31 11:35 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player
2014-11-20 19:54 - 2012-07-26 05:43 - 00000000 ___RD () C:\Users\Public
2014-11-20 19:23 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-20 19:20 - 2012-07-26 07:43 - 00000000 ____D () C:\Windows\CbsTemp
2014-11-20 18:22 - 2012-07-26 05:17 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-20 18:19 - 2012-07-26 05:17 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-20 17:51 - 2013-01-28 20:45 - 00000000 ____D () C:\Program Files\Java
2014-11-20 17:31 - 2013-12-06 15:12 - 00001156 __RSH () C:\Users\Sunako Kirishiki\ntuser.pol
2014-11-20 17:31 - 2013-01-23 16:18 - 00000000 ____D () C:\Users\Sunako Kirishiki
2014-11-18 13:49 - 2014-09-13 10:18 - 00000000 ____D () C:\Windows\rescache
2014-11-18 12:48 - 2013-01-23 16:28 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-18 12:44 - 2014-07-21 16:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ___RD () C:\Windows\ToastData
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-18 07:24 - 2013-01-23 17:15 - 00000497 _____ () C:\Windows\system32\checkdnsid.xml
2014-11-16 18:12 - 2013-04-12 17:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-16 18:12 - 2013-04-12 17:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-14 03:00 - 2013-07-23 17:22 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-14 00:38 - 2013-01-23 16:50 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-14 00:32 - 2012-07-26 05:17 - 00000201 _____ () C:\Windows\win.ini
2014-11-13 17:12 - 2014-01-03 01:54 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2014-11-13 17:12 - 2013-08-29 19:58 - 00528248 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2014-11-13 17:12 - 2013-08-29 19:33 - 00385096 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2014-11-13 17:11 - 2014-01-03 01:54 - 00027168 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2014-11-13 17:10 - 2013-01-23 16:46 - 00242944 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2014-11-12 05:57 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-11-11 14:59 - 2013-05-08 09:28 - 00000000 ____D () C:\Program Files\Opera
2014-11-07 00:58 - 2014-09-24 16:01 - 00000000 ___HD () C:\$Windows.~BT
2014-11-05 11:04 - 2014-08-07 13:05 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Adobe
2014-11-05 10:59 - 2013-04-29 21:40 - 00000000 ____D () C:\Program Files\Google
2014-11-05 10:59 - 2013-01-28 18:03 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Google
2014-11-05 02:45 - 2013-02-28 10:41 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\DAEMON Tools Lite
2014-11-05 02:45 - 2013-01-28 16:04 - 00000000 ____D () C:\Program Files\PDFCreator
2014-11-05 02:44 - 2013-01-31 14:59 - 00000000 ____D () C:\Windows\Minidump
2014-11-05 02:44 - 2013-01-23 16:13 - 00000000 ____D () C:\Windows\Panther
2014-10-30 20:49 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\WinStore
2014-10-28 14:51 - 2013-01-24 22:57 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Skype
2014-10-23 01:23 - 2013-12-30 13:17 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify
2014-10-22 22:56 - 2013-12-30 13:17 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Spotify
2014-10-22 01:36 - 2012-07-26 09:41 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-10-22 01:35 - 2012-07-26 07:53 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

Some content of TEMP:
====================
C:\Users\Sunako Kirishiki\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\Sunako Kirishiki\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Sunako Kirishiki\AppData\Local\Temp\Quarantine.exe
C:\Users\Sunako Kirishiki\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-05 03:08

==================== End Of Log ============================
--- --- ---




Danke dir erst mal für die große Hilfe!
Mit dem Programmen hast du mir wirklich sehr geholfen und viel Mist von meinem Rechner entfernt. Programme bzw. Toolbars die mich selbst schon sehr lange gestört haben! :daumenhoc

Youtube erreiche ich damit leider immer noch nicht.
Ich habe es vorhin versucht und es hat die Seite kurz geöffnet, jedoch unvollständig.
Mittlerweile ist sie leider wieder gar nicht mehr zu erreichen und das Problem besteht immer noch. :stirn:


Ich weiß nicht ob ich für diese Frage ein neues Thema eröffnen muss, aber ich dachte ich frage trotzdem. Da es zumal auch die Browser betrifft. Es kommt des öfteren vor dass die Browser plötzlich "keine Rückmeldung" mehr anzeigen, welche auch mal länger andauern oder sogar den jeweiligen Browser, teilweise aber auch Programme betreffen.
Hat das auch damit zu tun, oder muss ich da anders vorgehen?
Welche Ursachen kann das haben? :confused:


Schon mal herzlichen Dank für die Antwort! :rolleyes:

schrauber 21.11.2014 17:41
Wir sind ja auch noch nicht fertig :)



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.



Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool

Setze einen Haken bei folgenden Einträgen
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset IE Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size
  • List Minidump Files
Klicke Go und poste den Inhalt der Result.txt.


und ein frisches FRST log bitte. Noch Probleme? :)

genso.sekai 26.11.2014 02:14
Ja, das dachte ich mir schon ^^
Dachte nur die Information könnte hilfreich sein :Boogie:

Das Problem besteht leider weiterhin :lmaa::confused:
Aber dafür wird er jetzt mal richtig "gesäubert"... :blabla:

Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=1aa40c310f4efe41bb1115d7546f42cf
# engine=21260
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-25 08:50:16
# local_time=2014-11-25 09:50:16 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Bitdefender Antivirus'
# compatibility_mode=2063 16777213 66 100 12899 95657596 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 637543 41206918 0 0
# scanned=371905
# found=7
# cleaned=7
# scan_time=12375
sh=3AEF532A0211CE7869F0EB51E940D9E0C7CAE321 ft=1 fh=c7560653d3ee2314 vn="Variante von Win32/Adware.Yontoo.B Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir"
sh=3174E9C4FA188DE105A932AC3585EE0F5CF3E774 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgfehiiihoneblkaemlnglbokdgoopk\1\5106b535c799c6.60384767.js"
sh=E8627A94D0E61D52AC1B699CB7CD5386BC188AC0 ft=1 fh=1baca7d68471de9e vn="Variante von Win32/InstallCore.AZ evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Sunako Kirishiki\AppData\Roaming\JDownloader Packages\uninstaller.exe"
sh=E0C5E31B4A4DAA88C64BB4CA1E304C4D70481F1F ft=1 fh=626d7421e12db363 vn="Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="D:\alt.downloads\cbsidlm-cbsi145-MidiPiano__MIDI_File_PlayerRecorder-ORG_DE-10515473.exe"
sh=B30559AA97AE446F2BDD6EBFF7A92FF1907A76ED ft=1 fh=3f7f9ad8b6153593 vn="Variante von Win32/Packed.VMProtect.AAD Trojaner (gelöscht - in Quarantäne kopiert)" ac=C fn="D:\Games\Ubisoft\Assassin's Creed III\ubiorbitapi_r2_loader.dll"
sh=B30559AA97AE446F2BDD6EBFF7A92FF1907A76ED ft=1 fh=3f7f9ad8b6153593 vn="Variante von Win32/Packed.VMProtect.AAD Trojaner (gelöscht - in Quarantäne kopiert)" ac=C fn="I:\Von Desktop Pc Sortieren (zu wenig speicher)\Rest von Desk\Sortieren alles von Desk 3.8.13\Desktop 21.3.13\ubiorbitapi_r2_loader.dll"
sh=B30559AA97AE446F2BDD6EBFF7A92FF1907A76ED ft=1 fh=3f7f9ad8b6153593 vn="Variante von Win32/Packed.VMProtect.AAD Trojaner (gelöscht - in Quarantäne kopiert)" ac=C fn="I:\Von Desktop Pc Sortieren (zu wenig speicher)\Rest von Desk\Sortieren alles von Desk 3.8.13\Desktop 21.3.13\Crack\ubiorbitapi_r2_loader.dll"
(Dazu gab es keinen wirklichen "Scan"
Code:
UNSUPPORTED OPERATING SYSTEM! ABORTED!
Code:
MiniToolBox by Farbar  Version: 21-07-2014
Ran by Sunako Kirishiki (administrator) on 26-11-2014 at 01:08:00
Running from "C:\Users\Sunako Kirishiki\Desktop"
Microsoft Windows 8 Pro  (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows-IP-Konfiguration

Der DNS-Aufl�sungscache wurde geleert.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

========================= Hosts content: =================================



========================= IP Configuration: ================================

Linksys WMP600N Wireless-N PCI Adapter with Dual-Band = WiFi 2 (Connected)
Intel(R) PRO/1000 PL-Netzwerkverbindung = Ethernet (Media disconnected)


# ----------------------------------
# IPv4-Konfiguration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
set interface interface="LAN-Verbindung* 9" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="WiFi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="WiFi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="LAN-Verbindung* 11" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="LAN-Verbindung* 12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="other_0" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="LAN-Verbindung* 13" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="WiFi 2" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="LAN-Verbindung* 14" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="LAN-Verbindung* 15" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled


popd
# Ende der IPv4-Konfiguration



Windows-IP-Konfiguration

  Hostname  . . . . . . . . . . . . : SunakoKirishiki
  Prim�res DNS-Suffix . . . . . . . :
  Knotentyp . . . . . . . . . . . . : Hybrid
  IP-Routing aktiviert  . . . . . . : Nein
  WINS-Proxy aktiviert  . . . . . . : Nein
  DNS-Suffixsuchliste . . . . . . . : net

Drahtlos-LAN-Adapter LAN-Verbindung* 15:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Von Microsoft gehosteter, virtueller Netzwerkadapter #2
  Physische Adresse . . . . . . . . : 98-FC-11-EA-12-40
  DHCP aktiviert. . . . . . . . . . : Ja
  Autokonfiguration aktiviert . . . : Ja

Drahtlos-LAN-Adapter LAN-Verbindung* 14:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Virtueller Microsoft-Adapter f�r direktes WiFi #3
  Physische Adresse . . . . . . . . : 98-FC-11-EA-12-41
  DHCP aktiviert. . . . . . . . . . : Ja
  Autokonfiguration aktiviert . . . : Ja

Drahtlos-LAN-Adapter WiFi 2:

  Verbindungsspezifisches DNS-Suffix: net
  Beschreibung. . . . . . . . . . . : Linksys WMP600N Wireless-N PCI Adapter with Dual-Band
  Physische Adresse . . . . . . . . : 98-FC-11-EA-12-47
  DHCP aktiviert. . . . . . . . . . : Ja
  Autokonfiguration aktiviert . . . : Ja
  Verbindungslokale IPv6-Adresse  . : fe80::6d59:8ce3:858d:5646%22(Bevorzugt)
  IPv4-Adresse  . . . . . . . . . . : 192.168.192.9(Bevorzugt)
  Subnetzmaske  . . . . . . . . . . : 255.255.255.0
  Lease erhalten. . . . . . . . . . : Montag, 24. November 2014 02:59:37
  Lease l�uft ab. . . . . . . . . . : Mittwoch, 26. November 2014 21:43:24
  Standardgateway . . . . . . . . . : 192.168.192.1
  DHCP-Server . . . . . . . . . . . : 192.168.192.1
  DHCPv6-IAID . . . . . . . . . . . : 546896913
  DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-18-91-B7-02-00-13-72-27-7B-51
  DNS-Server  . . . . . . . . . . . : 192.168.192.1
  NetBIOS �ber TCP/IP . . . . . . . : Aktiviert

Ethernet-Adapter Ethernet:

  Medienstatus. . . . . . . . . . . : Medium getrennt
  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Intel(R) PRO/1000 PL-Netzwerkverbindung
  Physische Adresse . . . . . . . . : 00-13-72-27-7B-51
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja

Tunneladapter Teredo Tunneling Pseudo-Interface:

  Verbindungsspezifisches DNS-Suffix:
  Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
  Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja
  IPv6-Adresse. . . . . . . . . . . : 2001:0:5ef5:79fd:3015:a1e:3f57:3ff6(Bevorzugt)
  Verbindungslokale IPv6-Adresse  . : fe80::3015:a1e:3f57:3ff6%15(Bevorzugt)
  Standardgateway . . . . . . . . . : ::
  NetBIOS �ber TCP/IP . . . . . . . : Deaktiviert

Tunneladapter isatap.net:

  Verbindungsspezifisches DNS-Suffix: net
  Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #2
  Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiviert. . . . . . . . . . : Nein
  Autokonfiguration aktiviert . . . : Ja
  Verbindungslokale IPv6-Adresse  . : fe80::5efe:192.168.192.9%21(Bevorzugt)
  Standardgateway . . . . . . . . . :
  DNS-Server  . . . . . . . . . . . : 192.168.192.1
  NetBIOS �ber TCP/IP . . . . . . . : Deaktiviert
Server:  gwlogin.net
Address:  192.168.192.1

Name:    google.com.net
Addresses:  199.167.196.149
          74.221.212.214
          106.186.123.143


Ping wird ausgef�hrt f�r google.com [173.194.116.38] mit 32 Bytes Daten:
Antwort von 173.194.116.38: Bytes=32 Zeit=12ms TTL=57
Antwort von 173.194.116.38: Bytes=32 Zeit=19ms TTL=57

Ping-Statistik f�r 173.194.116.38:
    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0
    (0% Verlust),
Ca. Zeitangaben in Millisek.:
    Minimum = 12ms, Maximum = 19ms, Mittelwert = 15ms
Server:  gwlogin.net
Address:  192.168.192.1

Name:    yahoo.com.net
Addresses:  106.186.123.143
          199.167.196.149
          74.221.212.214


Ping wird ausgef�hrt f�r yahoo.com [206.190.36.45] mit 32 Bytes Daten:
Antwort von 206.190.36.45: Bytes=32 Zeit=188ms TTL=50
Antwort von 206.190.36.45: Bytes=32 Zeit=185ms TTL=50

Ping-Statistik f�r 206.190.36.45:
    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0
    (0% Verlust),
Ca. Zeitangaben in Millisek.:
    Minimum = 185ms, Maximum = 188ms, Mittelwert = 186ms

Ping wird ausgef�hrt f�r 127.0.0.1 mit 32 Bytes Daten:
Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128
Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128

Ping-Statistik f�r 127.0.0.1:
    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0
    (0% Verlust),
Ca. Zeitangaben in Millisek.:
    Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms
===========================================================================
Schnittstellenliste
 24...98 fc 11 ea 12 40 ......Von Microsoft gehosteter, virtueller Netzwerkadapter #2
 23...98 fc 11 ea 12 41 ......Virtueller Microsoft-Adapter f�r direktes WiFi #3
 22...98 fc 11 ea 12 47 ......Linksys WMP600N Wireless-N PCI Adapter with Dual-Band
 12...00 13 72 27 7b 51 ......Intel(R) PRO/1000 PL-Netzwerkverbindung
  1...........................Software Loopback Interface 1
 15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 21...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
    Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
          0.0.0.0          0.0.0.0    192.168.192.1    192.168.192.9    40
        127.0.0.0        255.0.0.0  Auf Verbindung        127.0.0.1    306
        127.0.0.1  255.255.255.255  Auf Verbindung        127.0.0.1    306
  127.255.255.255  255.255.255.255  Auf Verbindung        127.0.0.1    306
    192.168.192.0    255.255.255.0  Auf Verbindung    192.168.192.9    296
    192.168.192.9  255.255.255.255  Auf Verbindung    192.168.192.9    296
  192.168.192.255  255.255.255.255  Auf Verbindung    192.168.192.9    296
        224.0.0.0        240.0.0.0  Auf Verbindung        127.0.0.1    306
        224.0.0.0        240.0.0.0  Auf Verbindung    192.168.192.9    296
  255.255.255.255  255.255.255.255  Auf Verbindung        127.0.0.1    306
  255.255.255.255  255.255.255.255  Auf Verbindung    192.168.192.9    296
===========================================================================
St�ndige Routen:
  Keine

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel            Gateway
 15    306 ::/0                    Auf Verbindung
  1    306 ::1/128                  Auf Verbindung
 15    306 2001::/32                Auf Verbindung
 15    306 2001:0:5ef5:79fd:3015:a1e:3f57:3ff6/128
                                    Auf Verbindung
 22    296 fe80::/64                Auf Verbindung
 15    306 fe80::/64                Auf Verbindung
 21    286 fe80::5efe:192.168.192.9/128
                                    Auf Verbindung
 15    306 fe80::3015:a1e:3f57:3ff6/128
                                    Auf Verbindung
 22    296 fe80::6d59:8ce3:858d:5646/128
                                    Auf Verbindung
  1    306 ff00::/8                Auf Verbindung
 15    306 ff00::/8                Auf Verbindung
 22    296 ff00::/8                Auf Verbindung
===========================================================================
St�ndige Routen:
  Keine
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\system32\pnrpnsp.dll [67584] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [67584] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\NLAapi.dll [55296] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\winrnr.dll [21504] (Microsoft Corporation)
Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 24 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 25 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 26 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 27 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 28 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 29 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 30 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 31 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 32 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 33 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 34 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 35 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 36 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 37 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 38 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 39 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 40 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 41 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 42 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 43 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 44 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 45 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 46 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 47 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 48 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 49 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 50 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 51 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 52 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 53 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 54 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 55 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 56 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 57 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 58 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 59 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 60 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 61 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 62 C:\Windows\system32\mswsock.dll [289280] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (11/26/2014 01:00:01 AM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/26/2014 00:00:02 AM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/25/2014 11:00:02 PM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/25/2014 10:00:04 PM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/25/2014 09:00:09 PM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/25/2014 08:00:10 PM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/25/2014 07:00:03 PM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/25/2014 06:15:30 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073418231

Error: (11/25/2014 06:15:08 PM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).

Error: (11/25/2014 03:00:00 AM) (Source: ESENT) (User: )
Description: svchost (1952) SRUJet: Datenbank C:\Windows\system32\SRU\SRUDB.dat: Index AppIdTimeStamp von Tabelle {D10CA2FE-6FCF-4F6D-848E-B2E99266FA89} ist beschädigt (0).


System errors:
=============
Error: (11/26/2014 01:02:51 AM) (Source: DCOM) (User: SunakoKirishiki)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (11/26/2014 01:02:20 AM) (Source: DCOM) (User: SunakoKirishiki)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (11/26/2014 01:01:50 AM) (Source: DCOM) (User: SunakoKirishiki)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (11/26/2014 01:01:20 AM) (Source: DCOM) (User: SunakoKirishiki)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (11/26/2014 01:00:50 AM) (Source: DCOM) (User: SunakoKirishiki)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (11/26/2014 01:00:19 AM) (Source: DCOM) (User: SunakoKirishiki)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (11/26/2014 00:59:49 AM) (Source: DCOM) (User: SunakoKirishiki)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (11/26/2014 00:59:19 AM) (Source: DCOM) (User: SunakoKirishiki)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (11/25/2014 06:33:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Erkennung interaktiver Dienste" wurde mit folgendem Fehler beendet:
%%1

Error: (11/25/2014 06:20:51 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-01-30 18:53:47.843
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 15:02:22.991
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 14:22:51.487
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 13:59:01.601
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 13:42:14.047
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00176_004\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 12:28:53.087
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-30 01:21:49.859
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-29 17:18:55.534
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-29 16:43:13.774
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-01-29 16:37:55.504
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00175_003\avcuf32.dll because the set of per-page image hashes could not be found on the system.



=========================== Installed Programs ============================
4Videosoft iPhone Transfer Platinum 7.0.10 (HKLM\...\{E16D939E-1E8B-44ca-A57A-9A8768BFAA0E}_is1) (Version: 7.0.10 - 4Videosoft Studio)
7-PDF Printer 10.0.0.1840 (HKLM\...\7-PDF Printer_is1) (Version: 10.0.0.1840 - 7-PDF, Germany - Th. Hodes)
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.1 - Adobe Systems)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe Widget Browser (HKLM\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Adobe Widget Browser (Version: 2.0.348 - Adobe Systems Incorporated.) Hidden
Apple Application Support (HKLM\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed (R) III (HKLM\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.01 - Ubisoft)
Audacity 2.0.3 (HKLM\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
BEWERBUNGSMASTER (HKLM\...\ST6UNST #1) (Version:  - )
Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 17.15.0.682 - Bitdefender)
bl (Version: 1.0.0 - Your Company Name) Hidden
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-J4510DW (HKLM\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
CPUID CPU-Z 1.71 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
Definition Update for Microsoft Office 2013 (KB2899506) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{D67D0212-92F7-4C34-BCBB-BCFB8A4E40BF}) (Version:  - Microsoft)
DMG Extractor (HKLM\...\DMGExtractor) (Version: 1.1.1.1 - Reincubate Ltd)
Edimax RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.5.0 - Edimax)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
EVEREST Home Edition v2.20 (HKLM\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Exact Audio Copy 1.0beta3 (HKLM\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)
ffdshow v1.2.4422 [2012-04-09] (HKLM\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Free IP Switcher (HKLM\...\Free IP Switcher) (Version: hxxp://www.eusing.com/ipswitch/free_ip_switcher.htm - Eusing Software)
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.65 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google+ Auto Backup (HKLM\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
HWiNFO32 Version 4.18 (HKLM\...\HWiNFO32_is1) (Version: 4.18 - Martin Malík - REALiX)
iCloud (HKLM\...\{00A61104-74B5-4056-AD00-4397EF4FB141}) (Version: 3.1.0.40 - Apple Inc.)
ICQ 8.1 (build 6337) (HKCU\...\ICQ) (Version: 8.1.6337.0 - Mail.Ru)
iTunes (HKLM\...\{0718A90E-93AA-49AF-A4FE-0165ACD91DF0}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.710 - Oracle)
Java Auto Updater (Version: 2.1.71.14 - Oracle, Inc.) Hidden
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader Packages (HKCU\...\JDownloader Packages) (Version:  - )
Linksys Wireless Manager (HKLM\...\Linksys Wireless Manager) (Version: 4.9.9047.0 - Linksys, LLC)
MAGIX Foto Designer 7 (HKLM\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x86__8wekyb3d8bbwe (x86) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFCLOC_x86 (Version: 1.00.0000 - Adobe) Hidden
MidiPiano version 2.1.7 (HKLM\...\{4A9A424A-8F89-4845-B29C-4C2E27A3F3EF}_is1) (Version: 2.1.7 - MidiPiano, Inc.)
mIRC (HKLM\...\mIRC) (Version: 7.29 - mIRC Co. Ltd.)
Mozilla Firefox 33.0.2 (x86 de) (HKLM\...\Mozilla Firefox 33.0.2 (x86 de)) (Version: 33.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nuance PaperPort 12 (HKLM\...\{88B5FBDC-967D-4B1F-B291-39284AE12201}) (Version: 12.1.0005 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc)
NVIDIA Grafiktreiber 307.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.74 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 307.74 (Version: 307.74 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
Opera 12.17 (HKLM\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
osu! (HKLM\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PaperPort Image Printer (HKLM\...\{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}) (Version: 14.00.0000 - Nuance Communications, Inc.)
PDF Architect (HKLM\...\{80A07844-CA64-4DE4-AB61-D37DDBE8074F}) (Version: 1.0.52.8917 - pdfforge)
PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.2.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
ph (Version: 1.0.0 - Your Company Name) Hidden
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Pure Networks Platform (Version: 11.1.9044.0 - Pure Networks) Hidden
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rosetta Stone Ltd Services (HKLM\...\{7BB2EF8A-5376-4BAE-96D0-38BE49501F40}) (Version: 3.2.17 - Rosetta Stone Ltd.)
Rosetta Stone TOTALe (HKLM\...\com.rosettastone.rosettastonetotale) (Version: 4.1.10.1 - Rosetta Stone, Ltd)
Rosetta Stone TOTALe (Version: 4.1.1 - Rosetta Stone, Ltd) Hidden
Rosetta Stone TOTALe (Version: 4.1.10.1 - Rosetta Stone, Ltd) Hidden
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version:  - Samsung Electronics Co., Ltd.)
Scansoft PDF Professional (Version:  - ) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden
SiSoftware Sandra Lite 2013.SP2 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 19.35.2013.4 - SiSoftware)
Skype™ 6.21 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)
System Requirements Lab for Intel (HKLM\...\{53C63F43-B827-42D9-8886-4698D91EA33B}) (Version: 4.5.15.0 - Husdawg, LLC)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Access 2013 (KB2863859) 32-Bit Edition (HKLM\...\{90150000-0015-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{E46B7A4D-49AC-4339-9D65-22618C8121DA}) (Version:  - Microsoft)
Update for Microsoft Access 2013 (KB2863859) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{E46B7A4D-49AC-4339-9D65-22618C8121DA}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2899509) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CC7000AC-6172-47C8-8A3F-A7715E85162E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2899509) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CC7000AC-6172-47C8-8A3F-A7715E85162E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2899509) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CC7000AC-6172-47C8-8A3F-A7715E85162E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2899509) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CC7000AC-6172-47C8-8A3F-A7715E85162E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2899509) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{CC7000AC-6172-47C8-8A3F-A7715E85162E}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881083) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{4FC38705-B045-4DAC-A0B0-C573D31B8CD5}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2899507) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{D448DFE1-B83E-4394-9484-25563EFBF58D}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2899507) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{D448DFE1-B83E-4394-9484-25563EFBF58D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760249) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{8C07AD38-38EB-4332-BCB3-F55A77C927DF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760371) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{FFF87DE6-6602-4F65-BD75-D481E0539DCD}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837654) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6D771289-E5A7-442F-82B5-5EC4217AEF03}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881001) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{31849233-AD8B-42D7-9AE1-74C79C8E8C03}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881004) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{E30FBD0C-8EDB-4233-9B65-58FEA0C9A5BA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881004) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{E30FBD0C-8EDB-4233-9B65-58FEA0C9A5BA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881008) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{F5947EDE-072C-4150-9EE3-3AFDD8618458}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881008) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{F5947EDE-072C-4150-9EE3-3AFDD8618458}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7A3EF4FF-A9C8-4F7E-8020-A45F7D319387}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881012) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{F97A43AC-162A-4874-B1AD-0C98A411D12C}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{90150000-0090-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881039) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{1B208923-2810-414F-82CC-AFFC1B19563F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{B8E73381-09B1-4895-ACD0-34385B0F526D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{1C6260FD-A280-49FE-89D0-CCEC647FBD8E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883095) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7A9AB1AE-98B5-4B45-86B8-33A7B946D7CA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889857) 32-Bit Edition (HKLM\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{18455339-E61E-4BEE-B5D1-91D5E93055DC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889857) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{EDDFDA4F-E2D4-49ED-B4D6-01DCB1DC438F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889857) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{87055281-C6B7-40C9-816D-E62A4B580F31}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889857) 32-Bit Edition (HKLM\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.PROPLUSR_{BD7D79AB-F5E2-46FD-8EF5-BEC159EE8ECA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889940) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{8954CA3D-B2C9-41B3-B97C-38146FE13D0C}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2899493) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{27D7A8D0-8E28-4A2A-A1D4-473E31DF6438}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2899493) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{27D7A8D0-8E28-4A2A-A1D4-473E31DF6438}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2899510) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{975321F6-A5CF-442D-BA42-7B06AA69546A}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2899525) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B6160A7F-1EDB-4ED7-96DD-CF6F83DB347A}) (Version:  - Microsoft)
Update for Microsoft Office PowerPoint 2007 (KB2597972) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{7B9D2746-D03B-442B-A691-90B748E316B4}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2899513) 32-Bit Edition (HKLM\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{460F1926-0356-4400-BA4C-C621B1D55F05}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2899513) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{460F1926-0356-4400-BA4C-C621B1D55F05}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2883059) 32-Bit Edition (HKLM\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{BB860F2F-62A2-496D-8780-5A18B48F206A}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2883059) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{BB860F2F-62A2-496D-8780-5A18B48F206A}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2899504) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CEE35FF1-A822-452F-97F1-B43BD380A83C}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2899504) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{CEE35FF1-A822-452F-97F1-B43BD380A83C}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2889936) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{7DE4CBD8-E39D-4B3A-9A42-53CB1FFCF65F}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2889936) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7DE4CBD8-E39D-4B3A-9A42-53CB1FFCF65F}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 32-Bit Edition (HKLM\...\{90150000-0019-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{7500AD77-83C6-400B-8B2F-F8E401A7B697}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7500AD77-83C6-400B-8B2F-F8E401A7B697}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7CD05CC-CA85-428C-91FD-74A908D126E1}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2899500) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{29AE58B6-682B-478E-974A-323D74130177}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2899500) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{29AE58B6-682B-478E-974A-323D74130177}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2899500) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{29AE58B6-682B-478E-974A-323D74130177}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2899500) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{29AE58B6-682B-478E-974A-323D74130177}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Uplay (HKLM\...\Uplay) (Version: 2.0 - Ubisoft)
VLC media player 2.0.7 (HKLM\...\VLC media player) (Version: 2.0.7 - VideoLAN)
WD Drive Manager (x86) (HKLM\...\{813EE1F0-D251-4F98-AC91-9B98CF22717E}) (Version: 2.115 - Western Digital)
WD Drive Utilities (HKLM\...\{C093AD5D-29E9-4777-AAAC-28C02FCC2A51}) (Version: 1.0.4.11 - Western Digital Technologies, Inc.)
WD Quick View (HKLM\...\{57F80E51-A2F3-44AD-BA17-3275B0433165}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.)
WD Security (HKLM\...\{CA5859CA-D9A7-40BE-8318-3B514D6E4924}) (Version: 1.0.4.11 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{05174620-C10A-405E-917F-F6022CDE0E6E}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM\...\{2d588de7-f4f6-4d6d-8719-32cbb9637e9e}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.)
Winamp (HKLM\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

========================= Memory info: ===================================

Percentage of memory in use: 51%
Total physical RAM: 3582.15 MB
Available physical RAM: 1730.48 MB
Total Pagefile: 5374.15 MB
Available Pagefile: 2513.56 MB
Total Virtual: 2047.88 MB
Available Virtual: 1931.97 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:102.05 GB) (Free:10.09 GB) NTFS
2 Drive d: (Data) (Fixed) (Total:195.62 GB) (Free:105.89 GB) NTFS
6 Drive h: (WD Unlocker) (CDROM) (Total:0.01 GB) (Free:0 GB) UDF
7 Drive i: (My Passport) (Fixed) (Total:931.48 GB) (Free:727.56 GB) NTFS

========================= Users: ========================================

Benutzerkonten fr \\SUNAKOKIRISHIKI

Administrator            Gast                    Sunako Kirishiki       
UpdatusUser             
Der Befehl wurde erfolgreich ausgefhrt.

========================= Minidump Files ==================================

No minidump file found


**** End of log ****

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-11-2014
Ran by Sunako Kirishiki (administrator) on SUNAKOKIRISHIKI on 26-11-2014 01:13:56
Running from C:\Users\Sunako Kirishiki\Desktop
Loaded Profile: Sunako Kirishiki (Available profiles: Sunako Kirishiki & UpdatusUser)
Platform: Microsoft Windows 8 Pro (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(pdfforge GbR) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\ConversionService.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Windows\System32\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files\Edimax\Common\RaRegistry.exe
(Rosetta Stone Ltd.) C:\Program Files\RosettaStoneLtdServices\RosettaStoneDaemon.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(WDC) C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
(Cisco Systems, Inc.) C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Cisco Systems, Inc.) C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Linksys, LLC) C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe
(WDC) C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
(Microsoft Corporation) D:\Programme D\Microsoft Office\Office12\GrooveMonitor.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Adobe Systems Inc.) D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe
(Spotify Ltd) C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Edimax Technology Co.) C:\Program Files\Edimax\Common\RaUI.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Opera Software) C:\Program Files\Opera\opera.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\agent.exe
(Apple Inc.) C:\Program Files\Apple Software Update\SoftwareUpdate.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\seccenter.exe
() C:\Windows\Temp\39.0.2171.65_38.0.2125.111_chrome_updater.exe1a84fd8b
(Google Inc.) C:\Program Files\Google\Chrome\Application\38.0.2125.111\Installer\setup.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM\...\Run: [WinampAgent] => D:\Programme D\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.)
HKLM\...\Run: [IndexSearch] => C:\Program Files\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PDFHook] => C:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF5 Registry Controller] => C:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2013-07-22] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM\...\Run: [nmctxth] => C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe [642856 2008-12-12] (Cisco Systems, Inc.)
HKLM\...\Run: [Linksys Wireless Manager] => C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe [1358384 2009-02-16] (Linksys, LLC)
HKLM\...\Run: [WD Drive Manager] => C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe [450560 2009-06-26] (WDC)
HKLM\...\Run: [WD Drive Unlocker] => C:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694080 2013-04-01] (Western Digital Technologies, Inc.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1915616 2014-11-13] (Bitdefender)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM\...\Run: [WD Quick View] => C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-07-22] (Western Digital Technologies, Inc.)
HKLM\...\Run: [GrooveMonitor] => D:\Programme D\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-09-05] (Adobe Systems Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe Acrobat Speed Launcher] => D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [335360 2012-07-26] (Microsoft Corporation)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [icq] => C:\Users\Sunako Kirishiki\AppData\Roaming\ICQM\icq.exe [28698984 2013-08-24] (ICQ)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [482392 2014-11-13] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [901608 2014-11-13] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] => C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe [615256 2014-11-13] (Bitdefender)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Spotify] => C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Spotify.exe [6553144 2014-10-10] (Spotify Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Spotify Web Helper] => C:\Users\Sunako Kirishiki\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-10] (Spotify Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [Google+ Auto Backup] => C:\Users\Sunako Kirishiki\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4825880 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-469790813-253376911-2491847524-1001\...\Policies\Explorer: [NoCDBurning] 0
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [482392 2014-11-13] (Bitdefender)
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse] => C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [901608 2014-11-13] (Bitdefender)
HKU\S-1-5-18\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] => C:\Program Files\Bitdefender\Bitdefender\bdapppassmgr.exe [615256 2014-11-13] (Bitdefender)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Utility.lnk
ShortcutTarget: Wireless Utility.lnk -> C:\Program Files\Edimax\Common\RaUI.exe (Edimax Technology Co.)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-469790813-253376911-2491847524-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-469790813-253376911-2491847524-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKU\S-1-5-21-469790813-253376911-2491847524-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6C0B315D73FACD01
HKU\S-1-5-21-469790813-253376911-2491847524-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {71588120-FC17-4463-B07D-2C71FE6E057B} URL =
SearchScopes: HKU\S-1-5-21-469790813-253376911-2491847524-1001 -> DefaultScope {71588120-FC17-4463-B07D-2C71FE6E057B} URL =
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Programme D\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-469790813-253376911-2491847524-1001 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programme D\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.192.1

FireFox:
========
FF ProfilePath: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat -> D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-469790813-253376911-2491847524-1001: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\searchplugins\webde-suche.xml
FF Extension: YouTube Unblocker - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\youtubeunblocker@unblocker.yt [2014-09-11]
FF Extension: Block site - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2013-10-14]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-11-05]
FF Extension: Ad-Bye - For Facebook - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\s.alfa@idev.com.xpi [2014-11-05]
FF Extension: UnPlug - C:\Users\Sunako Kirishiki\AppData\Roaming\Mozilla\Firefox\Profiles\my25ifaa.default\Extensions\unplug@compunach.xpi [2014-11-05]
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-01-28]
FF HKLM\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\ffpwdman
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\ffpwdman [2013-08-29]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - D:\Programme D\Adobe Master Collection CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-07-04]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2013-08-29]

Chrome:
=======
CHR Profile: C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\djgfehiiihoneblkaemlnglbokdgoopk [2013-01-28]
CHR Extension: (Iminent Toolbar) - C:\Users\Sunako Kirishiki\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcemhggbahmlmhgnbpbbdaklcojhbecn [2013-03-12]
CHR HKLM\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\pmbxcr.crx [2014-02-28]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [69880 2014-11-13] (Bitdefender)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 Microsoft Office Groove Audit Service; D:\Programme D\Microsoft Office\Office12\GrooveAuditService.exe [64856 2009-02-26] (Microsoft Corporation)
R2 nmservice; C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe [642856 2008-12-12] (Cisco Systems, Inc.)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-03-05] ()
R2 RalinkRegistryWriter; C:\Program Files\Edimax\Common\RaRegistry.exe [185632 2009-12-17] (Ralink Technology, Corp.)
R2 RosettaStoneDaemon; C:\Program Files\RosettaStoneLtdServices\RosettaStoneDaemon.exe [1646056 2011-03-31] (Rosetta Stone Ltd.)
S3 SandraAgentSrv; D:\Programme D\SiSoftware Sandra Lite 2013.SP2\RpcAgentSrv.exe [71832 2009-03-01] (SiSoftware) [File not signed]
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [54424 2014-11-13] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1300224 2014-11-13] (Bitdefender)
R2 WDBackup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-07-22] (Western Digital Technologies, Inc.)
R2 WDBtnMgrSvc.exe; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [102400 2009-06-26] (WDC) [File not signed]
R2 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-07-22] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14456 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1060312 2014-11-13] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [242944 2014-11-13] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [528248 2014-11-13] (BitDefender)
R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [24576 2012-07-26] (Microsoft Corporation)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [19872 2012-07-11] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [78656 2014-05-27] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [94088 2013-10-02] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [108008 2013-10-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [66832 2014-01-03] (BitDefender SRL)
R1 bdselfpr; C:\Program Files\Bitdefender\Bitdefender\bdselfpr.sys [135600 2013-09-09] (BitDefender LLC)
S3 DNIMp50; C:\Windows\System32\Drivers\DNIMp50.sys [21504 2006-11-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 DNISp50; C:\Windows\System32\Drivers\DNISp50.sys [20480 2006-11-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [242240 2013-02-28] (DT Soft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [165744 2013-10-02] (BitDefender LLC)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-06-01] (REALiX(tm))
S3 LVUSBSta; C:\Windows\system32\DRIVERS\LVUSBSta.sys [22016 2005-01-31] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
S3 PID_0928; C:\Windows\system32\DRIVERS\LV561AV.SYS [211712 2005-01-31] (Logitech Inc.)
R2 pnarp; C:\Windows\system32\DRIVERS\pnarp.sys [24880 2008-12-12] (Cisco Systems, Inc.)
R2 purendis; C:\Windows\system32\DRIVERS\purendis.sys [26416 2008-12-12] (Cisco Systems, Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [45968 2011-11-03] (Rovi Corporation)
S3 SANDRA; D:\Programme D\SiSoftware Sandra Lite 2013.SP2\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [385096 2014-11-13] (BitDefender S.R.L.)
S3 WPN111; C:\Windows\system32\DRIVERS\WPN111v.sys [904192 2008-08-05] (Atheros Communications, Inc.)
R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [155136 2012-07-26] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-26 01:08 - 2014-11-26 01:08 - 00051335 _____ () C:\Users\Sunako Kirishiki\Desktop\Result.txt
2014-11-26 01:06 - 2014-11-26 01:06 - 00401920 _____ (Farbar) C:\Users\Sunako Kirishiki\Desktop\MiniToolBox.exe
2014-11-26 01:04 - 2014-11-26 01:04 - 00854414 _____ () C:\Users\Sunako Kirishiki\Desktop\SecurityCheck.exe
2014-11-25 18:19 - 2014-11-25 18:19 - 00000000 ____D () C:\Program Files\ESET
2014-11-21 01:25 - 2014-11-26 01:13 - 00000000 ____D () C:\Users\Sunako Kirishiki\Desktop\FRST-OlderVersion
2014-11-20 20:24 - 2014-11-20 20:24 - 00001365 _____ () C:\Users\Sunako Kirishiki\Desktop\JRT.txt
2014-11-20 20:10 - 2014-11-20 20:10 - 00000000 ____D () C:\Windows\ERUNT
2014-11-20 20:09 - 2014-11-20 20:09 - 01707532 _____ (Thisisu) C:\Users\Sunako Kirishiki\Desktop\JRT.exe
2014-11-20 20:08 - 2014-11-20 20:08 - 00029382 _____ () C:\Users\Sunako Kirishiki\Desktop\AdwCleaner[S0].txt
2014-11-20 18:31 - 2014-11-20 18:31 - 00060683 _____ () C:\Users\Sunako Kirishiki\Desktop\mbam.txt
2014-11-20 18:05 - 2014-11-20 19:55 - 00000000 ____D () C:\AdwCleaner
2014-11-20 17:57 - 2014-11-20 17:57 - 02140160 _____ () C:\Users\Sunako Kirishiki\Desktop\AdwCleaner_4.101.exe
2014-11-20 17:52 - 2014-11-26 00:36 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-20 17:51 - 2014-11-20 17:51 - 00005837 _____ () C:\Windows\system32\jupdate-1.7.0_71-b14.log
2014-11-20 17:51 - 2014-11-20 17:51 - 00001060 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-11-20 17:51 - 2014-11-20 17:51 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-11-20 17:51 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-20 17:51 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-20 17:51 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-20 17:51 - 2014-09-26 18:42 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-11-20 17:51 - 2014-09-26 18:36 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-11-20 17:51 - 2014-09-26 18:36 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-11-20 17:51 - 2014-09-26 18:35 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-11-20 17:42 - 2014-11-20 17:42 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Sunako Kirishiki\Desktop\mbam-setup-2.0.3.1025.exe
2014-11-20 17:37 - 2014-11-20 17:37 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sunako Kirishiki\Desktop\revosetup95.exe
2014-11-20 17:37 - 2014-11-20 17:37 - 00001222 _____ () C:\Users\Sunako Kirishiki\Desktop\Revo Uninstaller.lnk
2014-11-20 17:37 - 2014-11-20 17:37 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-11-20 17:36 - 2014-11-08 07:57 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-20 17:36 - 2014-11-08 07:56 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-20 17:32 - 2014-11-20 17:32 - 00000145 _____ () C:\Windows\system32\΀
2014-11-18 12:54 - 2014-10-30 01:53 - 00713672 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-18 12:54 - 2014-10-30 01:53 - 00106432 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-18 12:48 - 2014-11-20 19:57 - 00458822 _____ () C:\Windows\PFRO.log
2014-11-14 23:27 - 2014-11-26 00:32 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0005a2eb0b9f5.job
2014-11-14 23:27 - 2014-11-25 23:32 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0005a2bd0297a.job
2014-11-13 17:12 - 2014-11-13 17:12 - 01060312 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2014-11-12 00:18 - 2014-10-23 12:04 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 00:18 - 2014-09-24 00:30 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 00:18 - 2014-09-24 00:30 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-11-12 00:18 - 2014-09-13 05:40 - 01799488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-11-12 00:18 - 2014-09-06 01:45 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-11-12 00:18 - 2014-09-03 03:48 - 00457728 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-11-12 00:18 - 2014-09-03 03:48 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-11-12 00:18 - 2014-09-03 03:48 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-11-12 00:18 - 2014-08-29 05:17 - 02043392 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-11-12 00:18 - 2014-08-29 05:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-11-12 00:18 - 2014-08-28 07:04 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-11-12 00:18 - 2014-08-28 07:04 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-11-12 00:18 - 2014-08-22 00:56 - 01418752 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 00:18 - 2014-07-24 12:42 - 00297792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-11-12 00:17 - 2014-11-05 05:52 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 00:17 - 2014-11-05 05:51 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 00:17 - 2014-11-05 03:51 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 00:17 - 2014-10-26 01:36 - 01762816 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 00:17 - 2014-10-26 01:36 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 00:17 - 2014-10-26 01:35 - 14368768 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 00:17 - 2014-10-26 01:35 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 13758464 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 02861568 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 02055168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 00:17 - 2014-10-26 01:34 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 00:17 - 2014-10-26 01:34 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 00:17 - 2014-10-26 01:13 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 00:17 - 2014-10-18 08:05 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 00:17 - 2014-10-02 23:30 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 00:17 - 2014-10-02 23:30 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-11-12 00:17 - 2014-10-02 23:30 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 00:17 - 2014-10-01 23:51 - 03407360 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 00:17 - 2014-09-22 05:22 - 00029688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-11-12 00:17 - 2014-08-26 23:07 - 00231080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-11-12 00:16 - 2014-10-11 07:18 - 00156480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 00:16 - 2014-10-11 06:58 - 08858624 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 02801664 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 02416640 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-11-12 00:16 - 2014-10-11 06:57 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-11-12 00:16 - 2014-10-11 06:56 - 02037760 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-11-12 00:16 - 2014-10-11 06:05 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 00:16 - 2014-10-11 06:04 - 00713728 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-11 00:23 - 2014-11-11 00:25 - 00032031 _____ () C:\Users\Sunako Kirishiki\Desktop\Addition.txt
2014-11-11 00:21 - 2014-11-26 01:13 - 00026955 _____ () C:\Users\Sunako Kirishiki\Desktop\FRST.txt
2014-11-11 00:20 - 2014-11-26 01:14 - 00000000 ____D () C:\FRST
2014-11-11 00:20 - 2014-11-26 01:13 - 01110016 _____ (Farbar) C:\Users\Sunako Kirishiki\Desktop\FRST.exe
2014-11-05 11:59 - 2014-11-05 11:59 - 00602112 _____ (OldTimer Tools) C:\Users\Sunako Kirishiki\Desktop\OTL.exe
2014-11-05 10:59 - 2014-11-26 00:38 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-05 10:59 - 2014-11-25 23:38 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-05 10:59 - 2014-11-24 11:37 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-05 10:59 - 2014-11-05 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-05 10:58 - 2014-11-26 00:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-05 02:47 - 2014-11-05 02:48 - 00277204 _____ () C:\Users\Sunako Kirishiki\Documents\cc_20141105_024743.reg
2014-11-04 18:00 - 2014-11-04 18:00 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-04 18:00 - 2014-11-04 18:00 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-04 17:42 - 2014-11-20 17:40 - 00000000 ____D () C:\ProgramData\dtdata
2014-11-03 09:33 - 2014-11-03 09:33 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Abelssoft
2014-11-03 09:33 - 2014-11-03 09:33 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-11-03 09:32 - 2014-11-03 09:33 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Abelssoft
2014-11-03 09:31 - 2014-11-05 11:20 - 00000000 ____D () C:\Program Files\CHIP Updater
2014-10-31 20:40 - 2014-10-31 20:40 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-10-30 20:49 - 2014-11-02 03:00 - 00000000 ____D () C:\Windows\system32\AutoUpdateLicense
2014-10-28 20:36 - 2014-10-22 02:34 - 00010777 _____ () C:\Windows\system32\AutoconfigV2.cab
2014-10-28 20:36 - 2014-10-22 02:33 - 00437424 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2014-10-28 20:36 - 2014-10-22 02:33 - 00409080 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2014-10-28 20:36 - 2014-10-22 02:08 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-10-28 20:36 - 2014-10-22 02:08 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-28 20:36 - 2014-10-22 02:07 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-26 01:00 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\system32\sru
2014-11-26 00:32 - 2013-01-23 16:18 - 01305176 _____ () C:\Windows\WindowsUpdate.log
2014-11-25 23:17 - 2012-07-26 07:43 - 00000000 ____D () C:\Windows\CbsTemp
2014-11-25 21:48 - 2013-01-28 15:23 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\JDownloader Packages
2014-11-24 03:01 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-21 04:13 - 2014-09-13 10:18 - 00000000 ____D () C:\Windows\rescache
2014-11-20 20:07 - 2013-01-23 16:22 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-20 20:05 - 2013-08-29 19:30 - 00008192 _____ () C:\Windows\system32\WDPABKP.dat
2014-11-20 19:59 - 2012-07-26 07:04 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-20 19:54 - 2013-12-31 11:35 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player
2014-11-20 19:54 - 2012-07-26 05:43 - 00000000 ___RD () C:\Users\Public
2014-11-20 18:22 - 2012-07-26 05:17 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-20 18:19 - 2012-07-26 05:17 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-20 17:51 - 2013-01-28 20:45 - 00000000 ____D () C:\Program Files\Java
2014-11-20 17:31 - 2013-12-06 15:12 - 00001156 __RSH () C:\Users\Sunako Kirishiki\ntuser.pol
2014-11-20 17:31 - 2013-01-23 16:18 - 00000000 ____D () C:\Users\Sunako Kirishiki
2014-11-18 12:50 - 2014-10-22 22:47 - 03827248 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-18 12:48 - 2013-01-23 16:28 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-18 12:44 - 2014-07-21 16:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ___RD () C:\Windows\ToastData
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-18 12:44 - 2012-07-26 07:53 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-18 07:24 - 2013-01-23 17:15 - 00000497 _____ () C:\Windows\system32\checkdnsid.xml
2014-11-16 18:12 - 2013-04-12 17:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-16 18:12 - 2013-04-12 17:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-14 03:00 - 2013-07-23 17:22 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-14 00:38 - 2013-01-23 16:50 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-14 00:32 - 2012-07-26 05:17 - 00000201 _____ () C:\Windows\win.ini
2014-11-13 17:12 - 2014-01-03 01:54 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2014-11-13 17:12 - 2013-08-29 19:58 - 00528248 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2014-11-13 17:12 - 2013-08-29 19:33 - 00385096 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2014-11-13 17:11 - 2014-01-03 01:54 - 00027168 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2014-11-13 17:10 - 2013-01-23 16:46 - 00242944 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2014-11-12 05:57 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-11-11 14:59 - 2013-05-08 09:28 - 00000000 ____D () C:\Program Files\Opera
2014-11-07 00:58 - 2014-09-24 16:01 - 00000000 ___HD () C:\$Windows.~BT
2014-11-05 11:04 - 2014-08-07 13:05 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Adobe
2014-11-05 10:59 - 2013-04-29 21:40 - 00000000 ____D () C:\Program Files\Google
2014-11-05 10:59 - 2013-01-28 18:03 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Local\Google
2014-11-05 02:45 - 2013-02-28 10:41 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\DAEMON Tools Lite
2014-11-05 02:45 - 2013-01-28 16:04 - 00000000 ____D () C:\Program Files\PDFCreator
2014-11-05 02:44 - 2013-01-31 14:59 - 00000000 ____D () C:\Windows\Minidump
2014-11-05 02:44 - 2013-01-23 16:13 - 00000000 ____D () C:\Windows\Panther
2014-10-30 20:49 - 2012-07-26 07:53 - 00000000 ____D () C:\Windows\WinStore
2014-10-28 14:51 - 2013-01-24 22:57 - 00000000 ____D () C:\Users\Sunako Kirishiki\AppData\Roaming\Skype

Some content of TEMP:
====================
C:\Users\Sunako Kirishiki\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\Sunako Kirishiki\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Sunako Kirishiki\AppData\Local\Temp\Quarantine.exe
C:\Users\Sunako Kirishiki\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-24 03:01

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 26.11.2014 21:40
Bitte mal testen:

welche Seiten gehen aktuell in welchem Browser nicht? Gehen die Seiten dann im IE?
Schalte dann mal Bitdefender ab, und teste nochmal.

genso.sekai 27.11.2014 11:42
Hallo Schrauber

Geliche Seiten die ich Besuche funktionieren, bis auf Youtube.
Habe bei Bitdefender alles deaktiviert, da ich nicht weiß wie man es "aktiv" schließen kann.

Sowohl bei IE, Opera und FireFox heißt es, dass die Seite nicht gefunden wird.
Langsam frage ich mich woran das noch liegen könnte...

schrauber 28.11.2014 08:35
Setz mal bitte deinen DNS auf Google DNS und teste nochmal ob Youtube geht.

Google DNS-Server: Internet beschleunigen und Ping verbessern - NETZWELT

genso.sekai 01.12.2014 22:01
Danke viel mals! Das war es.
gerade ausprobiert und jetzt läuft alles wieder reibungslos! :D

schrauber 02.12.2014 19:44
Dann jetzt bitte mal den Anbieter kontaktieren :)

genso.sekai 09.12.2014 17:32
Du meinst meinen Internet-Anbieter?

Mittlerweile habe ich das Prooblem wieder,
wenn ich über DNS Einstellungen gehe und das ganze nochmals eigebe,
komme ich wieder auf Youtube, aber nur wenn es erneut manuell eigegeben worden ist.
Wie kann ich das machen, dass diese Einstellungen bestehen bleiben?
Oder anders, warum haut es die mir immer wieder raus?

schrauber 10.12.2014 13:48
Wenn mit EIngabe des Google DNS alles funktioniert liegt das Problem an deinem Router oder deinem Internet Anbieter.


Alle Zeitangaben in WEZ +1. Es ist jetzt 11:56 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131