Wundakynd | 05.12.2014 13:13 | Mein Postfach versendet die Spam Mails & wurde auch gestern wieder von GMX wegen Verdächtiger aktivitäten gesperrt.
Wenn meine Logs unauffällig sind werde ich mal den Rechner auf meiner Arbeit überprüfen müssen.
Ich werde dir gleich die Logs von Farbar's Recovery Scan Tool hier rein posten.
Schon mal vielen Dank
Hier die Anhänge von dem Rechner auf meiner Arbeit.
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-12-2014
Ran by o2 (administrator) on PC1 on 05-12-2014 12:18:28
Running from C:\Users\o2\Downloads
Loaded Profiles: o2 & 19000688SM & UpdatusUser (Available profiles: o2 & 19000688SM & UpdatusUser)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\ProgramData\MobileBrServ\mbbService.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Telefónica I+D) C:\Program Files\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\AutoDetector\Monitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\Hostless Modem\o2 Surfstick\CheckNDISPort_df.exe
() C:\Program Files\Hostless Modem\o2 Surfstick\CancelAutoPlay_df.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
() C:\Program Files\phonostar-Player\phonostarTimer.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Dropbox, Inc.) C:\Users\o2\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Ulead AutoDetector v2] => C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe [95504 2007-08-02] (Ulead Systems, Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [CheckNDISPortF0acA7] => C:\Program Files\Hostless Modem\o2 Surfstick\CheckNDISPort_df.exe [419072 2013-05-10] ()
HKLM\...\Run: [CancelAutoPlay_df] => C:\Program Files\Hostless Modem\o2 Surfstick\CancelAutoPlay_df.exe [446720 2013-05-10] ()
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [phonostarTimer] => C:\Program Files\phonostar-Player\phonostarTimer.exe [41472 2011-12-23] ()
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [Google Update] => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-18] (Google Inc.)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [BackgroundContainer] => "C:\Windows\system32\Rundll32.exe" "C:\Users\o2\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843568 2014-06-14] (Samsung)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1563440 2014-06-14] (Samsung)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Run: [pslixowu.exe] => "C:\Windows\system32\config\systemprofile\AppData\Roaming\Identities\pslixowu.exe"
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: E - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: J - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: K - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {07d36bc2-9e5e-11e1-8975-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {10133dca-e607-11e2-8a53-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {1d32934b-6eca-11e3-a43f-4487fcd989c5} - J:\AUTORUN_o2Surfstick.exe /EjectCDROM
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {2bc9fc1f-9b5f-11e2-8ab7-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {2be2584c-139a-11e3-8aa5-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {56429826-b327-11e3-a7d2-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {70ce7966-45ed-11e3-84bf-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {70ce7987-45ed-11e3-84bf-4487fcd989c5} - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {750885b5-6ba4-11e3-ab30-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {750885b9-6ba4-11e3-ab30-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {78cab0c8-e475-11e2-8a59-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {7fa720a2-1dfd-11e4-a7f2-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {868b21af-3725-11e4-a50b-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {86aa55ae-a04b-11e3-a46f-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {8a6eb0dd-25ab-11e3-848a-4487fcd989c5} - J:\Startme.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {8b3aeab1-f846-11e3-a4de-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {94037d43-5024-11e3-ab09-4487fcd989c5} - K:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {94037d58-5024-11e3-ab09-4487fcd989c5} - K:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {9f5dd39b-1a0e-11e4-a7e4-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {9f5dd3a0-1a0e-11e4-a7e4-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {b2ca36ad-b969-11e3-a434-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {b703062b-69e5-11e2-8a79-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {c0cffde4-2ea6-11e0-ba17-4487fcd989c5} - J:\AutoRun.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {d12fd14f-30aa-11e3-84e5-4487fcd989c5} - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {d96fb6b6-527f-11e3-ab0b-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {e2a536a1-6625-11e3-a41d-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {eeac8168-066a-11e4-a4a5-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {f35c23d4-c9ee-11e3-a409-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {f511b064-f130-11e3-a7f0-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {ff2d262d-f5ea-11e3-a412-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MountPoints2: {ff2d2631-f5ea-11e3-a412-4487fcd989c5} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-10-06] (Google Inc.)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\Run: [MobileDocuments] => C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe -update plugin
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-18\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-18\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\o2 NRW.URL -> hxxp://o2-nrw.de/forum/index.php
Startup: C:\Users\o2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\o2\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\o2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicyUsers\S-1-5-21-3852942515-1249084279-3882427996-1000\User: Group Policy restriction detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.vertriebspartner.de.o2.com/login.aspx?ReturnUrl=%2fDefault.aspx
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6DB701735C98CB01
HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCCE0F795D2D9CC01
HKU\S-1-5-21-3852942515-1249084279-3882427996-1005\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
URLSearchHook: HKLM - DivX Browser Bar DE Toolbar - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
URLSearchHook: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 - DivX Browser Bar DE Toolbar - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
SearchScopes: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=19950&mntrId=e25ff9f20000000000004487fcd989c5
SearchScopes: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> {41BEAB69-6A63-4027-B2EF-738AE3ABC8D4} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3297265&CUI=UN19045602301402823&UM=2
SearchScopes: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> {8A244612-A1F7-11E0-95C0-E71F4824019B} URL = hxxp://badoo.com/startpage/?source=bsb&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL =
BHO: DivX Browser Bar DE Toolbar -> {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} -> C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - DivX Browser Bar DE Toolbar - {6dad39c6-f4ac-4984-8e9b-f666269b9eb1} - C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000 -> DivX Browser Bar DE Toolbar - {6DAD39C6-F4AC-4984-8E9B-F666269B9EB1} - C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll (Conduit Ltd.)
Toolbar: HKU\S-1-5-21-3852942515-1249084279-3882427996-1005 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=e25ff9f20000000000004487fcd989c5&tlver=1.4.31.2&instlRef=sst&affID=19950&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3852942515-1249084279-3882427996-1000: @phonostar.de/phonostar -> C:\Program Files\phonostar-Player\npphonostarDetectNP.dll ( )
FF Plugin HKU\S-1-5-21-3852942515-1249084279-3882427996-1000: @tools.google.com/Google Update;version=3 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3852942515-1249084279-3882427996-1000: @tools.google.com/Google Update;version=9 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\searchplugins\badoo.xml
FF Extension: Avira Browser Safety - C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\Extensions\abs@avira.com [2014-11-20]
FF Extension: DB Browser Bar DE - C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1} [2014-11-12]
FF Extension: Adblock Plus - C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-01-08]
Chrome:
=======
CHR Profile: C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 11
CHR Extension: (DivX Browser Bar DE) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\hkoahcaobjbihehldfimhblmhgalcipm [2014-07-05]
CHR Extension: (Google Wallet) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-05]
CHR Profile: C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8
CHR Extension: (No Name) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-25]
CHR Extension: (YouTube) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-25]
CHR Extension: (Google Search) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-25]
CHR Extension: (AdBlock) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-09-26]
CHR Extension: (DivX Browser Bar DE) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\hkoahcaobjbihehldfimhblmhgalcipm [2014-01-18]
CHR Extension: (Google Wallet) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-26]
CHR Extension: (Gmail) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-25]
CHR Profile: C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9
CHR Extension: (Google Docs) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-26]
CHR Extension: (Google Drive) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-26]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-04]
CHR Extension: (YouTube) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-26]
CHR Extension: (Google-Suche) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-26]
CHR Extension: (DivX Browser Bar DE) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\hkoahcaobjbihehldfimhblmhgalcipm [2014-08-26]
CHR Extension: (Google Wallet) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-26]
CHR Extension: (Google Mail) - C:\Users\o2\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-26]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [hkoahcaobjbihehldfimhblmhgalcipm] - C:\Users\o2\AppData\Local\CRE\hkoahcaobjbihehldfimhblmhgalcipm.crx [2014-01-12]
CHR HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Chrome\Extension: [hkoahcaobjbihehldfimhblmhgalcipm] - C:\Users\o2\AppData\Local\CRE\hkoahcaobjbihehldfimhblmhgalcipm.crx [2014-01-12]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2014-04-30] (Teruten) [File not signed]
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [239184 2013-01-28] ()
R2 MotoHelper; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [214896 2011-12-06] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 TGCM_ImportWiFiSvc; C:\Program Files\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-10-23] (Avira Operations GmbH & Co. KG)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2014-04-30] () [File not signed]
S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9728 2010-06-19] (MBB Incorporated)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [9728 2009-02-03] (ZTE Incorporated)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 MpKsl2ae72d44; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6A3D025E-F863-40C2-9624-AEC3F5D5FAEF}\MpKsl2ae72d44.sys [39464 2014-12-05] (Microsoft Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-10-23] (Avira GmbH)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S1 dipyftsf; \??\C:\Windows\system32\drivers\dipyftsf.sys [X]
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [102784 2010-07-27] (Huawei Technologies Co., Ltd.)
S1 fczmkrwh; \??\C:\Windows\system32\drivers\fczmkrwh.sys [X]
S1 jsqeztep; \??\C:\Windows\system32\drivers\jsqeztep.sys [X]
S3 ssudobex; system32\DRIVERS\ssudobex.sys [X]
S1 uskjguod; \??\C:\Windows\system32\drivers\uskjguod.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-05 12:18 - 2014-12-05 12:19 - 00027365 _____ () C:\Users\o2\Downloads\FRST.txt
2014-12-05 12:18 - 2014-12-05 12:18 - 00000000 ____D () C:\FRST
2014-12-05 12:17 - 2014-12-05 12:18 - 01110016 _____ (Farbar) C:\Users\o2\Downloads\FRST.exe
2014-12-05 12:17 - 2014-12-05 12:17 - 02117632 _____ (Farbar) C:\Users\o2\Downloads\FRST64.exe
2014-12-02 13:23 - 2014-12-02 13:23 - 00057543 _____ () C:\Users\o2\Downloads\160 Auftragsbestätigung PK.HTML
2014-11-30 14:38 - 2014-11-30 14:38 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Musik
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Bilder
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-11-30 14:38 - 2014-11-30 14:38 - 00000000 ____D () C:\Users\TEMP
2014-11-30 14:38 - 2014-04-25 11:29 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2014-11-30 14:38 - 2012-01-20 10:55 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2014-11-30 14:38 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-30 14:38 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-19 09:11 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 09:11 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-13 14:46 - 2014-11-13 14:45 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-11-13 11:04 - 2014-11-13 11:04 - 00000000 ____D () C:\Users\o2\Documents\OneNote-Notizbücher
2014-11-12 12:40 - 2014-11-12 12:40 - 00000000 __SHD () C:\Users\o2\AppData\Local\EmieBrowserModeList
2014-11-12 11:15 - 2014-11-12 11:15 - 00153290 _____ () C:\Windows\PFRO.log
2014-11-12 09:18 - 2014-11-17 08:48 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-12 09:18 - 2014-11-17 08:47 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-12 09:17 - 2014-11-17 08:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-12 09:17 - 2014-11-12 09:17 - 00000000 ____D () C:\Users\o2\AppData\Roaming\Avira
2014-11-12 09:16 - 2014-11-17 08:47 - 00000000 ____D () C:\Program Files\Avira
2014-11-12 09:16 - 2014-11-12 09:18 - 00000000 ____D () C:\ProgramData\Avira
2014-11-12 09:16 - 2014-10-23 14:02 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-11-12 09:16 - 2014-10-23 14:02 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2014-11-12 09:16 - 2014-10-23 14:01 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-11-12 09:16 - 2014-10-23 14:01 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-11-12 09:07 - 2014-11-12 09:14 - 151804352 _____ () C:\Users\o2\Downloads\avira_free_antivirus_de_14.0.7.342.exe
2014-11-12 08:51 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:51 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:51 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:51 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:51 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:51 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:51 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:51 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:51 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:51 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:51 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:51 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:51 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:51 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:51 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:51 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:51 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:51 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:51 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:51 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:51 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:51 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:51 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:51 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:51 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:51 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:51 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:51 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:51 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:51 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:51 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:51 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:51 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:51 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:51 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:51 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:51 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:51 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:51 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:51 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:51 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:51 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:51 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:51 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:51 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:51 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:51 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:51 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 09:47 - 2014-11-11 09:48 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-11 09:04 - 2014-12-05 08:36 - 00002657 _____ () C:\Windows\setupact.log
2014-11-11 09:04 - 2014-11-11 09:04 - 00000000 _____ () C:\Windows\setuperr.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-05 12:12 - 2013-02-18 12:59 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000UA.job
2014-12-05 11:56 - 2011-10-06 09:03 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-05 11:24 - 2012-04-01 11:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-05 09:10 - 2010-12-10 12:16 - 01536699 _____ () C:\Windows\WindowsUpdate.log
2014-12-05 08:44 - 2009-07-14 05:34 - 00017536 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-05 08:44 - 2009-07-14 05:34 - 00017536 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-05 08:39 - 2013-04-02 17:02 - 00000000 ____D () C:\Users\o2\AppData\Roaming\Dropbox
2014-12-05 08:38 - 2012-01-11 16:16 - 00000000 ____D () C:\Temp
2014-12-05 08:38 - 2011-10-06 09:03 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-05 08:36 - 2011-05-23 08:26 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-05 08:36 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-04 19:12 - 2013-02-18 12:59 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000Core.job
2014-12-03 11:35 - 2013-04-09 14:52 - 00000000 ____D () C:\Users\o2\Shop Ordner
2014-11-30 14:34 - 2009-07-14 05:46 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-11-26 12:24 - 2012-04-01 11:53 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-26 12:24 - 2011-05-16 08:37 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-25 08:55 - 2012-01-23 14:23 - 00001322 __RSH () C:\Users\o2\ntuser.pol
2014-11-25 08:55 - 2010-12-10 12:19 - 00000000 ____D () C:\Users\o2
2014-11-15 08:33 - 2013-04-02 17:07 - 00001003 _____ () C:\Users\o2\Desktop\Dropbox.lnk
2014-11-15 08:33 - 2013-04-02 17:05 - 00000000 ____D () C:\Users\o2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-14 08:48 - 2010-12-10 12:22 - 01629372 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-13 13:32 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-11-12 12:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-12 11:17 - 2009-07-14 05:33 - 00462024 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 11:16 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-12 11:11 - 2010-12-23 14:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 11:08 - 2013-08-14 19:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 11:03 - 2011-05-21 18:05 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 08:39 - 2012-05-05 16:28 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-10 09:52 - 2013-06-18 12:55 - 00000000 ____D () C:\Users\o2\AppData\Roaming\Media Player Classic
2014-11-10 09:52 - 2012-11-22 16:43 - 00000000 ____D () C:\Windows\Minidump
2014-11-10 09:52 - 2010-12-10 12:13 - 00000000 ____D () C:\Windows\Panther
Files to move or delete:
====================
C:\Users\World of Warcraft - Kopie\BlizzardError.exe
C:\Users\World of Warcraft - Kopie\dbghelp.dll
C:\Users\World of Warcraft - Kopie\divxdecoder.dll
C:\Users\World of Warcraft - Kopie\MovieProxy.exe
C:\Users\World of Warcraft - Kopie\Scan-64.dll
C:\Users\World of Warcraft - Kopie\Scan.dll
C:\Users\World of Warcraft - Kopie\SystemSurvey.exe
C:\Users\World of Warcraft - Kopie\World of Warcraft Launcher.exe
C:\Users\World of Warcraft - Kopie\Wow-64.exe
C:\Users\World of Warcraft - Kopie\Wow.exe
Some content of TEMP:
====================
C:\Users\19000688SM\AppData\Local\Temp\jre-6u38-windows-i586-iftw.exe
C:\Users\19000688SM\AppData\Local\Temp\nvStInst.exe
C:\Users\o2\AppData\Local\Temp\avgnt.exe
C:\Users\o2\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaaunty.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-26 18:23
==================== End Of Log ============================ --- --- ---
--- --- ---
--- --- ---
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-12-2014
Ran by o2 at 2014-12-05 12:20:07
Running from C:\Users\o2\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.0.626 - Adobe Systems, Inc.)
Apple Application Support (HKLM\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E14ADE0E-75F3-4A46-87E5-26692DD626EC}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.11 - Piriform)
DHTML Editing Component (HKLM\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DivX Browser Bar DE Toolbar for IE (HKLM\...\IECT3297265) (Version: 6.17.2.8 - DivX Browser Bar DE) <==== ATTENTION
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.3.22 - DivX, LLC)
Dropbox (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
Google Chrome (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Helium (HKLM\...\{9A781940-AC41-4D5E-8E1E-76A04B916FB9}) (Version: 1.0.0 - ClockworkMod)
HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
HUAWEI DataCard Driver 4.20.12.00 (HKLM\...\HUAWEI DataCard Driver) (Version: 4.20.12.00 - Huawei technologies Co., Ltd.)
iCloud (HKLM\...\{20C6FF70-690B-4DF7-8F5D-269DD3A7FD23}) (Version: 3.0.2.163 - Apple Inc.)
iOS_Restore-Kit_DE_v6.4.1 (per user) (HKLM\...\{3C10B24D-B8EF-481A-867C-0A3BC03DCFCA}) (Version: 6.4.1 - Apple Inc.)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
iTunes (HKLM\...\{9B486871-27EB-49A5-8832-77176E63333C}) (Version: 11.0.5.5 - Apple Inc.)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Juniper Networks Setup Client (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Juniper_Setup_Client) (Version: 2.1.2.5973 - Juniper Networks)
Juniper Networks Setup Client Activex Control (HKLM\...\Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 - Juniper Networks)
K-Lite Mega Codec Pack 9.9.0 (HKLM\...\KLiteCodecPack_is1) (Version: 9.9.0 - )
LPS 2009v 3.0 USB (HKLM\...\{BDBA9828-200B-43A0-AB4F-82DABEE64F94}_is1) (Version: LPS 2009v 3.0 USB - VVR)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Access 2003 Runtime (HKLM\...\{901C0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM\...\Mobile Broadband HL Service) (Version: 22.001.20.00.03 - Huawei Technologies Co.,Ltd)
Mobile Connection Manager (HKLM\...\o2DE) (Version: - Mobile Connection Manager)
Mobile Partner (HKLM\...\Mobile Partner) (Version: 11.300.05.03.40 - Huawei Technologies Co.,Ltd)
MobileMe Control Panel (HKLM\...\{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}) (Version: 3.1.8.0 - Apple Inc.)
MotoHelper 2.1.32 Driver 5.4.0 (HKLM\...\MotoHelper) (Version: 2.1.32 - Motorola)
MotoHelper MergeModules (Version: 1.2.0 - Motorola) Hidden
Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{A55747C1-4651-433D-B082-478874FF7516}) (Version: 6.3.0 - Motorola Mobility LLC)
Mozilla Firefox 33.1 (x86 de) (HKLM\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\MyFreeCodec) (Version: - )
NVIDIA 3D Vision Controller-Treiber 310.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 310.90 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.23 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9745 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
o2 Surfstick (HKLM\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)
phonostar-Player Version 3.02.4 (HKLM\...\phonostar3RadioPlayer_is1) (Version: - )
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - )
Safari (HKLM\...\{FA4C2D53-205F-4245-9717-F3761154824D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.43.0 - SAMSUNG Electronics Co., Ltd.)
signPOS (HKLM\...\{D39FEB34-A3DF-497C-B051-C96284AB3DBE}) (Version: 2.1.11 - POS.AG)
Sony PC Companion 2.10.174 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.174 - Sony)
SpeedCommander 14 (HKLM\...\SpeedCommander 14) (Version: 14.20.6800 - SWE Sven Ritter)
Spotify (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 7 (HKLM\...\TeamViewer 7) (Version: 7.0.12541 - TeamViewer)
translate plus 10 (HKLM\...\translate plus 10) (Version: 10.0 - Lingenio GmbH, Heidelberg)
Ulead PhotoImpact X3 (HKLM\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 1.00.0000 - Corel)
Ulead PhotoImpact X3 (Version: 1.00.0000 - Corel) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VLC media player 2.0.1 (HKLM\...\VLC media player) (Version: 2.0.1 - VideoLAN)
Widevine Media Optimizer Chrome 6.0.0 (HKU\S-1-5-21-3852942515-1249084279-3882427996-1000\...\optimizer_chrome) (Version: 6.0.0.12757 - Widevine Technologies)
Windows Phone app for desktop (HKLM\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
ZTE USB Driver (HKLM\...\ZTE USB Driver) (Version: 1.0.1.27_TME - ZTE Corporation)
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\o2\AppData\Local\Google\Chrome\Application\39.0.2171.71\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\o2\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3852942515-1249084279-3882427996-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\o2\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
==================== Restore Points =========================
17-11-2014 07:52:02 Windows Update
19-11-2014 19:01:50 Windows Update
24-11-2014 07:54:28 Windows Update
28-11-2014 07:56:45 Windows Update
03-12-2014 08:21:13 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {037917B4-3502-45A1-AF9E-B3F4EAAC1EA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
Task: {1CEACC8D-1E7C-42F3-9267-99CD365A7F66} - System32\Tasks\MotoHelper Update => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {3BD70CCB-D5EF-4FFE-AEA9-5381E910E148} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
Task: {4E7FB8E4-3CE5-4C5B-903C-C05032A7726F} - System32\Tasks\MotoHelper Initial Update => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {575D6EE9-741F-494F-BB56-8803D68A9B79} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26] (Adobe Systems Incorporated)
Task: {5A12E96C-7EDA-4219-B4AB-8669C8DED3D8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {867DCFAA-7D63-4FFB-97A0-AF49D6681360} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\o2\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION
Task: {AF5E3256-699C-4D07-AE75-FC4FCD2F3265} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000Core => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-18] (Google Inc.)
Task: {BCEC4B81-189C-41BB-A12E-89ED0BA04530} - System32\Tasks\MotoHelper Routing => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
Task: {D4E2F107-867D-4DFB-92AF-3E9E9EA792A6} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {E6D9E0A7-E7E0-42EA-BFDC-14B39D746380} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000UA => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-18] (Google Inc.)
Task: {EE26C656-1A04-4DE6-B791-0FB593CBBA0B} - System32\Tasks\MotoHelper MUM => C:\Program Files\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-12-06] ()
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000Core.job => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3852942515-1249084279-3882427996-1000UA.job => C:\Users\o2\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-05-23 10:59 - 2013-09-12 07:28 - 00088864 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2011-07-29 13:28 - 2010-06-17 20:56 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2011-09-09 13:41 - 2009-08-03 02:53 - 00475136 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\sso2mdu.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-02-28 12:50 - 2013-01-28 03:49 - 00239184 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2011-12-06 22:00 - 2011-12-06 22:00 - 00214896 _____ () C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
2014-04-25 11:29 - 2012-12-07 16:26 - 00167424 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
2012-04-13 09:16 - 2007-08-02 20:07 - 00034064 _____ () C:\Program Files\Common Files\Ulead Systems\AutoDetector\DetMethod.dll
2014-03-24 18:24 - 2013-05-10 12:03 - 00419072 _____ () C:\Program Files\Hostless Modem\o2 Surfstick\CheckNDISPort_df.exe
2014-03-24 18:24 - 2013-05-10 12:03 - 00446720 _____ () C:\Program Files\Hostless Modem\o2 Surfstick\CancelAutoPlay_df.exe
2011-12-06 22:00 - 2011-12-06 22:00 - 00784240 _____ () C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
2012-01-04 19:35 - 2011-12-23 15:28 - 00041472 _____ () C:\Program Files\phonostar-Player\phonostarTimer.exe
2012-01-04 19:35 - 2011-06-15 13:07 - 02293248 _____ () C:\Program Files\phonostar-Player\QtCore4.dll
2012-01-04 19:35 - 2011-03-30 07:16 - 08173568 _____ () C:\Program Files\phonostar-Player\QtGui4.dll
2012-01-04 19:35 - 2011-03-30 06:59 - 00191488 _____ () C:\Program Files\phonostar-Player\QtSql4.dll
2012-01-04 19:35 - 2011-03-30 10:46 - 00416256 _____ () C:\Program Files\phonostar-Player\plugins\sqldrivers\qsqlite4.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 00186368 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\9529c74be90e4d89b971133723a8f287\Kies.Common.DeviceServiceLib.Interface.ni.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 14993920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\e2d1188482af4b3a4facf149f6ce2c2f\Kies.Theme.ni.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 01865728 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\c5131e750218141d787e2b918725df67\Kies.UI.ni.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\7d4e97c2d114662ac2d3c1b7d7fb39cf\Kies.MVVM.ni.dll
2014-10-16 08:10 - 2014-10-16 08:10 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\6815ff93472d008087880a6462931188\ASF_cSharpAPI.ni.dll
2014-12-05 08:39 - 2014-12-05 08:39 - 00043008 _____ () c:\users\o2\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaaunty.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\o2\AppData\Roaming\Dropbox\bin\libcef.dll
2014-11-11 09:47 - 2014-11-11 09:48 - 03649648 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-11-26 12:24 - 2014-11-26 12:24 - 16841392 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: AppleSyncNotifier => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KiesHelper => C:\Program Files\Samsung\Kies\KiesHelper.exe /s
MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: Spotify => "C:\Users\o2\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\o2\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"
========================= Accounts: ==========================
19000688SM (S-1-5-21-3852942515-1249084279-3882427996-1005 - Administrator - Enabled) => C:\Users\19000688SM
Administrator (S-1-5-21-3852942515-1249084279-3882427996-500 - Administrator - Disabled)
Gast (S-1-5-21-3852942515-1249084279-3882427996-501 - Limited - Enabled)
o2 (S-1-5-21-3852942515-1249084279-3882427996-1000 - Administrator - Enabled) => C:\Users\o2
UpdatusUser (S-1-5-21-3852942515-1249084279-3882427996-1006 - Limited - Enabled) => C:\Users\TEMP
==================== Faulty Device Manager Devices =============
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/03/2014 01:23:07 PM) (Source: VSS) (EventID: 12298) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (12/03/2014 01:23:07 PM) (Source: VSS) (EventID: 12310) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{92a333dc-044e-11e0-ba18-806e6f6e6963} - 00000100,0x0053c010,00E21FF8,0,001CCFD0,4096,[0]).
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
Error: (12/03/2014 09:21:14 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3852942515-1249084279-3882427996-1006.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {2ba3533a-f323-4838-acb1-5c99a65f7b17}
Error: (11/30/2014 02:38:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: PC1)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.
Error: (11/30/2014 02:38:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: PC1)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.
Error: (11/30/2014 02:38:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: PC1)
Description: Das lokal gespeicherte Profil kann nicht geladen werden. Mögliche Fehlerursachen sind nicht ausreichende Sicherheitsrechte oder ein beschädigtes lokales Profil.
Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
Error: (11/30/2014 02:38:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht.
Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
for C:\Users\UpdatusUser\ntuser.dat
Error: (11/30/2014 02:36:49 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
DETAIL - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
Error: (11/30/2014 02:36:49 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht.
Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
for C:\Users\o2\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (11/30/2014 02:36:48 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
DETAIL - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
System errors:
=============
Error: (12/03/2014 01:23:17 PM) (Source: volsnap) (EventID: 8) (User: )
Description: Das Zeitlimit für den Lösch- und Speicherschreibvorgang für Volume "C:" wurde beim Warten auf eine Schreibvorgangfreigabe überschritten.
Error: (11/25/2014 08:58:04 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (11/24/2014 08:46:19 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (11/21/2014 11:16:44 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error: (11/20/2014 08:03:06 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (11/19/2014 09:04:24 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (11/15/2014 08:31:04 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (11/13/2014 08:43:42 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (11/12/2014 11:18:53 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SPEEDPORT.IP",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{47290901-2AAA-4AAB-827F-CF04A-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (11/10/2014 08:03:04 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Microsoft Office Sessions:
=========================
Error: (11/22/2014 02:23:27 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/22/2014 02:23:12 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/22/2014 02:01:22 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/22/2014 02:01:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/22/2014 11:38:27 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 20 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/15/2014 10:33:53 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/14/2014 05:17:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/13/2014 10:18:17 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash.
Error: (07/12/2011 00:03:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 12893 seconds with 1920 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Processor: Pentium(R) Dual-Core CPU E5700 @ 3.00GHz
Percentage of memory in use: 58%
Total physical RAM: 3071.24 MB
Available physical RAM: 1283.41 MB
Total Pagefile: 6140.77 MB
Available Pagefile: 3895.82 MB
Total Virtual: 2047.88 MB
Available Virtual: 1895.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:453.66 GB) (Free:314.35 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 572EBBD4)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=453.7 GB) - (Type=07 NTFS)
==================== End Of Log ============================ So also es ist definitiv der Rechner auf meiner Arbeit.
Mein Kollege hat ein mal Malwarebytes laufen lassen & dort kam erschreckendes raus.
Ich hoffe das ganze kann bereinigt werden da ich Angst um die Kunden-Daten habe. Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 05.12.2014
Scan Time: 12:58:07
Logfile: MWB.txt
Administrator: Yes
Version: 2.00.4.1028
Malware Database: v2014.12.05.04
Rootkit Database: v2014.12.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: o2
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 442276
Time Elapsed: 12 min, 22 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 1
PUP.Optional.ClientConnect, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1}\Plugins\npFirefoxPlugin.dll, , [77c1a6b9abd17eb8697dedce7e831ee2],
Registry Keys: 16
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\CLSID\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\CLSID\{F663448B-1B58-43EA-8EF6-A410B6E82DEA}, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\Toolbar.CT3297265, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{F663448B-1B58-43EA-8EF6-A410B6E82DEA}, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit, HKLM\SOFTWARE\CLASSES\CLSID\{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}\INPROCSERVER32, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Babylon.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [d95fd48beb918ea85d0eb116a0626f91],
PUP.Optional.DivXBrowserBar.A, HKLM\SOFTWARE\DivX_Browser_Bar_DE, , [85b3a5ba74081a1c3f705ef06b986898],
PUP.Optional.DivXBrowserBar.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DivX_Browser_Bar_DE, , [f93f1e41c4b8270fcee3232b50b3a060],
PUP.Optional.Conduit.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, , [9c9c5e0199e31e180fb4bfe2c143c040],
PUP.Optional.ValueApps.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\ValueApps, , [7abe86d9205c90a6efb6b5d18083d42c],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [3602b4abc1bb71c51f353c6051b33ec2],
PUP.Optional.Softonic.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [290f71ee522a9e989de5136246bd9967],
PUP.Optional.Conduit.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IECT3297265, , [4eea61fef08c3ff77aa321f49073ad53],
Registry Values: 7
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, Ã?9Â*m¬ôâ??IŽâ?ºÃ¶f&â?ºÅ¾Â±, , [af8973ecbdbfef479a39bd72e11fb64a]
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, DivX Browser Bar DE Toolbar, , [af8973ecbdbfef479a39bd72e11fb64a]
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{6DAD39C6-F4AC-4984-8E9B-F666269B9EB1}, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0I1L1MtGtCtH1N1N1Q0ZtGzr, , [3602b4abc1bb71c51f353c6051b33ec2]
PUP.Optional.Conduit, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|BackgroundContainer, "C:\Windows\system32\Rundll32.exe" "C:\Users\o2\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun, , [ca6e4e119ae263d3b88e45650cf8ed13]
Trojan.Agent.IDGen, HKU\S-1-5-21-3852942515-1249084279-3882427996-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|pslixowu.exe, "C:\Windows\system32\config\systemprofile\AppData\Roaming\Identities\pslixowu.exe", , [de5ae877f28a191dda51547026de5aa6]
Registry Data: 0
(No malicious items detected)
Folders: 41
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE, , [4eea61fef08c3ff77aa321f49073ad53],
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3297265, , [4eea61fef08c3ff77aa321f49073ad53],
PUP.Optional.ValueApps.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\valueApps, , [75c32c333b41a096243493875ba801ff],
PUP.Optional.ValueApps.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\valueApps\CT3297265, , [75c32c333b41a096243493875ba801ff],
PUP.Optional.Babylon.A, C:\Users\o2\AppData\LocalLow\BabylonToolbar, , [88b0df809ce04bebe23c3fe780836799],
PUP.Optional.Babylon.A, C:\Users\o2\AppData\LocalLow\BabylonToolbar\BabylonToolbar, , [88b0df809ce04bebe23c3fe780836799],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\AddedAppDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DefualtImages, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DetectedAppDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\EngineFirstTimeDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\images, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\Images, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarUntrustedAppsApprovalDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAddedAppDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppApprovalDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppPendingDialog, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\EmailNotifier, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Logs, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\MyStuffApps, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\DynamicDialogs, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarHiddenLogin, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarHiddenSettings, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarLogin, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarSettings, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarTranslation, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\UserDefinedItems, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE, , [46f2550a91ebbb7bc813132b8380c040],
Files: 151
PUP.Optional.ClientConnect, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1}\Plugins\npFirefoxPlugin.dll, , [77c1a6b9abd17eb8697dedce7e831ee2],
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\prxtbDivX.dll, , [af8973ecbdbfef479a39bd72e11fb64a],
PUP.Optional.Conduit.A, C:\Program Files\DivX_Browser_Bar_DE\DivX_Browser_Bar_DEToolbarHelper.exe, , [48f07de2651731058b02ab73df2135cb],
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\hk64tbDivX.dll, , [f34591cef68689ad686b89a6b34d1ae6],
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\hktbDivX.dll, , [3008f9660c70d363ebe854db966ad42c],
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\ldrtbDivX.dll, , [1820db848defb77f24afd659bb457a86],
PUP.Optional.Conduit, C:\Program Files\DivX_Browser_Bar_DE\tbDivX.dll, , [8aae5609017b9b9b5a79909f1ae69868],
Trojan.Agent.ED, C:\Users\o2\AppData\Local\Temp\272.tmp, , [d266fc639ede7cbae6e8a24458a92cd4],
Trojan.Agent.ED, C:\Users\o2\AppData\Local\Temp\8739.tmp, , [61d7c798d7a5a393c20c03e3966b3fc1],
Trojan.Agent.ED, C:\Users\o2\AppData\Local\Temp\9270.tmp, , [49efd58afb815bdbc905499d42bf27d9],
Trojan.Agent.ED, C:\Users\o2\AppData\Local\Temp\98E0.tmp, , [ff393926b2ca89ad309eebfbca37e917],
Trojan.Downloader.EMT, C:\Windows\Temp\EE0.tmp, , [c96fb2ad126af6406e3fe074ab5a4db3],
PUP.Optional.Conduit.A, C:\Users\o2\AppData\Local\Conduit\CT3297265\DivX_Browser_Bar_DEAutoUpdateHelper.exe, , [d662b4ab49333bfb8b02849a9070639d],
PUP.Optional.Conduit, C:\Windows\System32\Tasks\BackgroundContainer Startup Task, , [49ef93ccd7a52511951b8125956f0cf4],
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3297265\configutaion.json, , [4eea61fef08c3ff77aa321f49073ad53],
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3297265\SetupIcon.ico, , [4eea61fef08c3ff77aa321f49073ad53],
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE\CT3297265\UninstallerUI.exe, , [4eea61fef08c3ff77aa321f49073ad53],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\hk64tbDivX.dll, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\hktbDivX.dll, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ldrtbDivX.dll, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\tbDivX.dll, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ThirdPartyComponents.xml, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\toolbar.cfg, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014059404370718_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014059795938248_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014060384358956_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014060791997408_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014061070152540_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014061359383956_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635014062864205252_16PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635013222629112125_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_eula_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_images_Menu_uninstall-icon_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_65_329_CT3297265_images_635028854493425733_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_65_329_CT3297265_images_635057862436686982_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_Images_635013209331683703_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635013215523152454_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635013221545682805_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\CacheIcons\http___storage_conduit_com_91_328_CT3288691_images_635013222428649555_24PX_png.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\RoundedCornersIE9.css, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DialogsAPI.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\excanvas.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\generalDialogStyle.css, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\PIE.htc, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\RoundedCorners.css, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\settings.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\version.txt, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\AddedAppDialog\app-added.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\AddedAppDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DefualtImages\icon.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DetectedAppDialog\app-2go.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\DetectedAppDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\EngineFirstTimeDialog\EngineFirstTimeDialog.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\EngineFirstTimeDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\EngineFirstTimeDialog\right-click.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\SearchProtector.css, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\SearchProtector.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\images\ok-button.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\images\separation-line.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\NewSearchProtectorDialog\images\warning.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\bubble.css, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\bubble.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\information.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\x-default-LTR.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\x-default-RTL.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-LTR.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-RTL.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\SearchProtector.css, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\SearchProtector.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\Images\info.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\Images\ok-on.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorDialog\Images\ok.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.css, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images\Icon.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images\info.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images\ok-on.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\SearchProtectorRetakeoverDialog\Images\ok.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.css, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\app-store-icon.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\arrow.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\divider.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\emailNotifier.gif, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\facebook.png, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\radio.GIF, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\Thumbs.db, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\truste_welcome.GIF, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarFirstTimeDialog\images\weather.GIF, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarUntrustedAppsApprovalDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\ToolbarUntrustedAppsApprovalDialog\ToolbarUntrustedAppsApprovalDialog.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAddedAppDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAddedAppDialog\UT-app-dialog-added.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppApprovalDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppApprovalDialog\UT-app-dialog-needs-your-approval.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppPendingDialog\main.html, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Dialogs\UntrustedAppPendingDialog\UT-app-dialog-is-waiting.js, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=de&ctid=CT3297265.xml, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=de&ctid=CT3297265.xml, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=de&ctid=CT3297265.xml, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=de&ctid=CT3297265&UM=2.xml, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\DynamicDialogs\data.txt, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarHiddenLogin\data.txt, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarHiddenSettings\data.txt, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarLogin\data.txt, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarSettings\data.txt, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Users\o2\AppData\LocalLow\DivX_Browser_Bar_DE\Repository\conduit_CT3297265_CT3297265\ToolbarTranslation\data.txt, , [a1977de2b8c452e47565ef4ff70c728e],
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\GottenAppsContextMenu.xml, , [46f2550a91ebbb7bc813132b8380c040],
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\OtherAppsContextMenu.xml, , [46f2550a91ebbb7bc813132b8380c040],
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\SharedAppsContextMenu.xml, , [46f2550a91ebbb7bc813132b8380c040],
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\toolbar.cfg, , [46f2550a91ebbb7bc813132b8380c040],
PUP.Optional.DivXBrowserBar.A, C:\Program Files\DivX_Browser_Bar_DE\ToolbarContextMenu.xml, , [46f2550a91ebbb7bc813132b8380c040],
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=e25ff9f20000000000004487fcd989c5&tlver=1.4.31.2&instlRef=sst&affID=19950&q=");), ,[e157025da0dca393a3d6217814f117e9]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.bbDpng", 9);), ,[78c0431cd0acde58fcaccfcac045a060]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (Preferences
/* Do not edit this file.
*
* If), ,[fe3a0a5594e846f0e3c5fe9b36cf56aa]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (eferences
/* Do not edit this file.
*
* If you m), ,[74c41d42532977bf099f099039ccb24e]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (ences
/* Do not edit this file.
*
* If you make changes to this file while ), ,[f93fc996027ab87ef8b0dbbea65f8d73]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (s file.
*
* If you make changes to this file whil), ,[ba7ec09f83f9fb3bedbbcbce07fe41bf]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (erences
/* Do not edit this file.
*
* If y), ,[5cdcdf804a32d36328808316dd28728e]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (Preferences
/* Do not edit this file.
*
* If you make changes t), ,[8aae9fc03a4222149810bbde9273ca36]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (not edit this file.
*
* If you make changes to t), ,[bf79005fbfbd2115099fd7c2c342e41c]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (ferences
/* Do not edit this file.
*
* If you make changes to this file while the app), ,[eb4d46199ddf3afc8d1b5c3d7b8aa957]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (*
* If you make changes to this file while the application i), ,[06323b24403c0f27f2b6fc9dc0457e82]
PUP.Optional.Babylon.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
*
* If you make changes), ,[fc3cc29dd7a5f2442d7b42572cd9f709]
PUP.Optional.Conduit.A, C:\Users\o2\AppData\Roaming\Mozilla\Firefox\Profiles\s8zbyte8.default\prefs.js, Good: (), Bad: (user_pref("CT3297265.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3297265&octid=CT3297265&ISID=ISID_ID&SearchSource=15&CUI=UN23243815091916487&Lay=1&UM=2\"}");), ,[6ccca9b65f1d092dff14069433d26c94]
Physical Sectors: 0
(No malicious items detected)
(end) |