unico Browser. lässt sich nicht mehr deinstalieren
 

Hallo zusammen ich habe ein riesen grossen. Seit ein paar Wochen habe ich ein Laptop mit Windows 8 . Jetzt habe ich nachdem etliche Webseiten aufgegangen sind
die ich immer am x wieder geschlossen habe,
der unicon Browser , und eutliche andere Programme auf meinem pc die sich nicht löschon lassen über die systemsteuerung
Es wird immer wieder angezeigt bitte warten bis die vorherige denstallation beendet ist. Es geht beiFirefox nichts mehr . Habe in der Einstellung bei Mozilla diesen als Standards browser angekluckt aber das hat keine Funktion. LG netty

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

hi der scan ist jetzt durch und eine seite frst editor ist aufgegangen meinst du dies mit frst txt

Es gehen zwei Dateien auf mit Namen FRST.txt und Addition.txt. Diese hier posten, in Codetags.

[/CODE]
FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---


hI SORRY konnte nicht mehr schreiben mein pc hat sich total selbständig gemacht. Ich habe mir den avast runtergeladen und der ist durch gelaufen hat etliche win 32 und andere dinger gefunden. Habe alls gelöscht aber der avast zigt mir immet weiter bedrohungen an. Habe jetzt auch den Java runtergeworfen. Die logdatei habe ich hier reingsetzt aber si ist zu gross und mit zip usw habe ich garkeine ahnung lg Netty

hI SORRY konnte nicht mehr schreiben mein pc hat sich total selbständig gemacht. Ich habe mir den avast runtergeladen und der ist durch gelaufen hat etliche win 32 und andere dinger gefunden. Habe alls gelöscht aber der avast zigt mir immet weiter bedrohungen an. Habe jetzt auch den Java runtergeworfen. Die logdatei habe ich hier reingsetzt aber si ist zu gross und mit zip usw habe ich garkeine ahnung lg Netty

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-04-2015 01
Ran by Annette (administrator) on MAUSI1702PC on 18-04-2015 21:42:45
Running from C:\Users\Annette\Downloads
Loaded Profiles: Annette (Available profiles: Annette)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(ClaraLabs) C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp
(XTab system) C:\Program Files (x86)\XTab\ProtectService.exe
() C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe
() C:\Program Files (x86)\LiveUpdateWPP\LiveUpdateWPP.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
() C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp
() C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp
() C:\Program Files (x86)\QuickRef_1.10.0.12\Service\qrsvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
() C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(SearchProtect) C:\Program Files (x86)\XTab\CmdShell.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Dropbox, Inc.) C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
() C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(iCinema) C:\Program Files (x86)\I - Cinema\e632de21-e97b-49bb-8b50-a0787fad654e-10.exe
(SoftBrain Technologies Ltd.) C:\Users\Annette\AppData\Local\SmartWeb\SmartWebHelper.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
() C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe
(InstallMoon) C:\Program Files (x86)\GoHD\8cb3e5f0-d14f-4811-afbb-496fc9ab8c98-10.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(InstallMoon) C:\Program Files (x86)\GoHD\8cb3e5f0-d14f-4811-afbb-496fc9ab8c98-1-6.exe
(BND) C:\Program Files (x86)\PalMall\7e0c8f1a-041f-4b28-9c69-165dde7038f0-1-6.exe
(BND) C:\Program Files (x86)\PalMall\7e0c8f1a-041f-4b28-9c69-165dde7038f0-10.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Cinema PlusV17.04) C:\Program Files (x86)\Cinema PlusV17.04-ntf\eccac44b-b825-4b67-a2cc-947a2db058b1-10.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
Failed to access process -> CCL.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
() C:\Program Files (x86)\XTab\HPNotify.exe
(SoftBrain Technologies Ltd.) C:\Users\Annette\AppData\Local\SmartWeb\SmartWebApp.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
( ) C:\Users\Annette\AppData\Local\Temp\nsa3477.tmp
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nsz78F6.tmp
() C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
() C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [217088 2014-06-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [66304 2015-03-18] (Acer Incorporated)
HKLM-x32\...\Run: [WinCheck] => C:\Users\Annette\AppData\Local\935477DA-1429356802-8B48-BF00-00E0B8543058\bnsuFD9F.exe [193536 2015-04-17] ()
HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90880 2015-04-16] ()
HKLM-x32\...\RunOnce: [upgmsd_de_436.exe] => C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe [3308488 2015-04-16] ()
HKLM-x32\...\RunOnce: [Update] => C:\Users\Annette\AppData\Roaming\ASPackage\ASPackage.exe /runonce
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.52\OptProLauncher.exe
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\system32\StikyNot.exe [457728 2014-03-18] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [263952 2015-04-12] ()
AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [223504 2015-04-12] (Client Connect LTD)
Startup: C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe ()
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3373016122-1355606172-358954014-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:50046;https=127.0.0.1:50046
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1429354366&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&q={searchTerms}
SearchScopes: HKLM -> {9008D51D-8C79-435E-94EE-2A3C911859C7} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_coinis_15_07&cd=2XzuyEtN2Y1L1Qzu0CyEyDyEyEyE0D0FtCtCtCtCtB0CyDtBtN0D0Tzu0StCtCtAyCtN1L2XzutAtFyBtFyBtFyDtN1L1Czu tCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtB0FzzyBtAtDyBtGtByE0DyEtG0EyE0DtDtGtDzzzztDtGtD0A0F0DzztB0DyDyC0AtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByDzyyDtAtBtD 0FtGyB0BtB0EtGyEtDtB0DtG0ByEtAyBtGtBtCtBtBtC0AyEyCzy0BzzyC2Q&cr=877273299&ir=
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1429354366&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&q={searchTerms}
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {7FCF1C48-0FA2-4932-89D5-6834E66CC742} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {8375696E-A674-4B0C-B3D7-D8A5059D8C6A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {9008D51D-8C79-435E-94EE-2A3C911859C7} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {ABCF9631-C248-4417-BBAF-0E7C9888C68A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {F05C4836-A999-43C5-9C55-5C3D999E5683} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {F11A6ACE-4F08-41F8-9FB5-764DE0EFB067} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
BHO: No Name -> {278d28be-ad0d-46ba-9951-4104b6c427f2} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-20] (Oracle Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
BHO: No Name -> {b91eb585-a676-48e7-8c7f-3e12deaa2439} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-20] (Oracle Corporation)
BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File
BHO-x32: No Name -> {278d28be-ad0d-46ba-9951-4104b6c427f2} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
BHO-x32: No Name -> {b91eb585-a676-48e7-8c7f-3e12deaa2439} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 02 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 03 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 04 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 16 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default
FF SelectedSearchEngine: webssearches
FF Homepage: https://www.facebook.com/?ref=tn_tnmn
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-20] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2015-02-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-13] (Oracle Corporation)
FF user.js: detected! => C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\user.js [2015-04-18]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\bing-.xml [2015-03-03]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\google-images.xml [2015-02-13]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\google-maps.xml [2015-02-13]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\mystartsearch-1.xml [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\bingsearch.full@microsoft.com [2015-03-03]
FF Extension: BetteRPriceCheC - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\mRuPixfo@Q.org [2015-04-13]
FF Extension: SparPilot - Gutscheine & mehr... - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\sparpilot@sparpilot.com [2015-04-07]
FF Extension: WEB.DE MailCheck - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\toolbar@web.de [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{091b6afa-55ed-d744-2edb-3f53f48efa6f} [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{4dcd442b-c6b8-861d-356e-4e32f24e540d} [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-02-09]
FF Extension: Adblock Plus - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-12]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-07-25]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKU\S-1-5-21-3373016122-1355606172-358954014-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-02-09]
CHR HKLM-x32\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - hxxp://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (GoHD) - C:\Users\Annette\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk [2015-04-18]
OPR Extension: (PalMall) - C:\Users\Annette\AppData\Roaming\Opera Software\Opera Stable\Extensions\fjadmdmahkpbhgbmmkiiaanlnlekelmn [2015-04-18]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe istartsurf

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BrsHelper; C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [22376 2015-01-08] ()
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [94208 2014-05-06] () [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2749696 2015-03-18] (Acer Incorporated)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3251472 2015-04-12] (Client Connect LTD) [File not signed]
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-07-22] (Acer Incorporated)
R2 f8794fcc; c:\Program Files (x86)\Optimizer Pro 3.52\OptProMon.dll [2018856 2015-03-04] ()
R2 fogezyny; C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp [185856 2015-04-07] () [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-06-26] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [93408 2015-02-08] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-06-09] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R2 lupuzyky; C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp [94720 2015-04-18] () [File not signed]
R2 pihofyby; C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp [102912 2015-03-03] () [File not signed]
R2 popineje; C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nsz78F6.tmp [251904 2015-04-18] () [File not signed]
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R2 tycubyto; C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp [98304 2015-04-18] () [File not signed]
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 zorevige; C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp [226304 2015-04-18] () [File not signed]
S4 fozududy; C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\nsg81E1.tmpfs [X]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /svc [X] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /medsvc [X] <==== ATTENTION
S3 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 aswSP; No ImagePath
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [110824 2014-06-11] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [41688 2014-10-30] (Intel Corporation)
S3 NetTap630; C:\Windows\system32\DRIVERS\nettap630.sys [67800 2014-10-30] (Intel Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [573144 2014-04-18] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3468504 2014-05-22] (Realtek Semiconductor Corporation )
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 22:11 - 2015-04-18 22:11 - 00055104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cwovjymd.sys
2015-04-18 21:42 - 2015-04-18 21:52 - 00032636 _____ () C:\Users\Annette\Downloads\FRST.txt
2015-04-18 21:40 - 2015-04-18 21:45 - 00000000 ____D () C:\FRST
2015-04-18 21:33 - 2015-04-18 21:34 - 02098176 _____ (Farbar) C:\Users\Annette\Downloads\FRST64.exe
2015-04-18 20:00 - 2015-04-18 20:29 - 00000000 ____D () C:\Program Files\Reimage
2015-04-18 19:57 - 2015-04-18 20:29 - 00000158 _____ () C:\Windows\Reimage.ini
2015-04-18 19:55 - 2015-04-18 19:55 - 00768512 _____ (Reimage®) C:\Users\Annette\Downloads\ReimageRepair.exe
2015-04-18 19:15 - 2015-04-18 19:16 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Annette\Downloads\SpyHunter-installer(1).exe
2015-04-18 19:02 - 2015-04-18 19:03 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Annette\Downloads\SpyHunter-installer.exe
2015-04-18 17:35 - 2015-04-18 17:35 - 00000000 ____D () C:\Users\Annette\AppData\Local\Crossbrowse
2015-04-18 14:58 - 2015-04-18 14:57 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp66CA.tmp
2015-04-18 13:32 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\I - Cinema
2015-04-18 13:01 - 2015-04-18 13:01 - 00000000 ____D () C:\Users\Annette\SupTab
2015-04-18 13:00 - 2015-04-18 13:00 - 00003178 _____ () C:\Windows\System32\Tasks\Run_Browser
2015-04-18 12:59 - 2015-04-18 13:00 - 00000000 ____D () C:\Users\Annette\AppData\Local\UnicoBrowser
2015-04-18 12:55 - 2015-04-18 12:55 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-04-18 12:53 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\istartsurf
2015-04-18 12:47 - 2015-04-18 12:47 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsvCCD8.tmp
2015-04-18 12:42 - 2015-04-18 12:42 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp46BA.tmp
2015-04-18 12:38 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\QuickRef_1.10.0.12
2015-04-18 12:32 - 2015-04-18 12:32 - 00000008 _____ () C:\END
2015-04-18 12:25 - 2015-04-18 12:25 - 00003114 _____ () C:\Windows\System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A}
2015-04-18 12:24 - 2015-04-18 12:23 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsx96A2.tmp
2015-04-18 12:19 - 2015-04-18 12:19 - 00001929 _____ () C:\Users\Public\Desktop\abDocs.lnk
2015-04-18 12:18 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\GoHD
2015-04-18 12:17 - 2015-04-18 18:48 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\systweak
2015-04-18 12:17 - 2015-02-19 13:09 - 00020248 _____ () C:\Windows\system32\roboot64.exe
2015-04-18 12:10 - 2015-04-18 17:30 - 00008688 _____ () C:\Windows\SysWOW64\CCLOff.ini
2015-04-18 12:10 - 2015-04-18 17:30 - 00008688 _____ () C:\Windows\system32\CCLOff.ini
2015-04-18 12:09 - 2015-04-18 22:25 - 00001366 _____ () C:\Windows\Tasks\AFCZ.job
2015-04-18 12:09 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\IGS
2015-04-18 12:09 - 2015-04-18 12:09 - 00004384 _____ () C:\Windows\System32\Tasks\AFCZ
2015-04-18 12:09 - 2015-04-16 09:20 - 00341696 _____ (CC Corporation) C:\Windows\SysWOW64\CCL.dll
2015-04-18 12:08 - 2015-04-18 12:08 - 00000000 ____D () C:\Users\Annette\AppData\Local\Macromedia
2015-04-18 12:07 - 2015-04-18 19:55 - 00001370 _____ () C:\Windows\Tasks\EWSRRH.job
2015-04-18 12:07 - 2015-04-18 12:07 - 00004386 _____ () C:\Windows\System32\Tasks\EWSRRH
2015-04-18 12:07 - 2015-04-18 12:07 - 00000000 ____D () C:\Users\Annette\AppData\Local\globalUpdate
2015-04-18 12:07 - 2015-04-18 12:07 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV17.04-ntf
2015-04-18 12:06 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-04-18 12:05 - 2015-04-18 12:05 - 00000000 ____D () C:\Program Files (x86)\Crossbrowse
2015-04-18 12:03 - 2015-04-18 20:37 - 00000000 ____D () C:\Users\Annette\AppData\Local\BrowserHelper
2015-04-18 12:02 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Local\SmartWeb
2015-04-18 12:01 - 2015-04-18 19:56 - 00000000 ____D () C:\Program Files (x86)\Infonaut_1.10.0.14
2015-04-18 12:00 - 2015-04-18 20:30 - 00000000 ____D () C:\Users\Annette\AppData\Local\gmsd_de_436
2015-04-18 12:00 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_436
2015-04-18 11:58 - 2015-04-18 20:01 - 00000000 ____D () C:\Users\Annette\AppData\Local\CrashDumps
2015-04-18 11:55 - 2015-04-18 18:36 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieUserList
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieSiteList
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieBrowserModeList
2015-04-18 11:55 - 2015-04-18 11:55 - 00000177 _____ () C:\Windows\SysWOW64\SetupComponents.exe
2015-04-18 11:51 - 2015-04-18 18:27 - 00004840 _____ () C:\Users\Annette\AppData\Local\BTServer.log
2015-04-18 11:45 - 2015-04-18 11:45 - 00003732 _____ () C:\Windows\System32\Tasks\SMupdate1
2015-04-18 11:45 - 2015-04-18 11:45 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-04-18 11:45 - 2015-04-18 11:45 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-04-18 11:44 - 2015-04-18 21:02 - 00000000 ____D () C:\Program Files (x86)\YTDownloader
2015-04-18 11:44 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\SearchModule
2015-04-18 11:44 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2015-04-18 11:44 - 2015-04-18 14:59 - 00000000 ____D () C:\Program Files\Common Files\Goobzo
2015-04-18 11:43 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\LiveUpdateWPP
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
2015-04-18 11:42 - 2015-04-18 12:15 - 00000000 ____D () C:\Program Files (x86)\OkayFreedom
2015-04-18 11:42 - 2015-04-18 12:14 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Steganos
2015-04-18 11:42 - 2015-04-18 11:56 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Steganos VPN
2015-04-18 11:41 - 2015-04-18 11:41 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\WebExtend
2015-04-18 11:36 - 2015-04-18 18:32 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058
2015-04-18 11:35 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\PalMall
2015-04-18 11:35 - 2015-04-18 11:48 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058
2015-04-18 11:35 - 2015-04-18 11:35 - 00003994 _____ () C:\Windows\System32\Tasks\LaunchPreSignup
2015-04-18 11:33 - 2015-04-18 19:16 - 00001362 _____ () C:\Windows\Tasks\OB.job
2015-04-18 11:33 - 2015-04-18 11:48 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356802-8B48-BF00-00E0B8543058
2015-04-18 11:33 - 2015-04-18 11:33 - 00004378 _____ () C:\Windows\System32\Tasks\OB
2015-04-18 11:32 - 2015-04-18 20:19 - 00001366 _____ () C:\Windows\Tasks\CBHT.job
2015-04-18 11:32 - 2015-04-18 11:32 - 00004382 _____ () C:\Windows\System32\Tasks\CBHT
2015-04-18 11:31 - 2015-04-18 13:54 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058
2015-04-18 11:26 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2015-04-18 11:26 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\ORBTR
2015-04-18 11:26 - 2015-04-18 11:27 - 00000000 ____D () C:\Users\Annette\AppData\Local\SearchProtect
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 ____D () C:\bbc1ebbe-7ca3-40b2-9412-4351361b49be
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL226C.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL220E.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL21C0.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL20B6.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL2087.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL202A.tmp
2015-04-18 11:24 - 2015-04-18 11:25 - 00368128 _____ () C:\Users\Annette\Downloads\Setup.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-04-17 16:10 - 2015-04-17 16:10 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsa887A.tmp
2015-04-17 16:10 - 2015-04-17 16:10 - 00000000 __SHD () C:\Users\Annette\AppData\Roaming\AnyProtectEx
2015-04-16 15:11 - 2015-04-16 15:11 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-16 15:09 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 15:09 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 15:09 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-16 15:09 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-16 15:09 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-16 15:09 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-16 15:09 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-16 15:09 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-16 15:09 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-16 15:09 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-16 15:09 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-16 15:09 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-16 15:09 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-16 15:09 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-16 15:09 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 15:09 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 15:09 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 15:09 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-16 15:09 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-16 15:09 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 15:09 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 15:09 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-16 15:09 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 15:09 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-16 15:09 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-16 15:09 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-16 15:09 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-16 15:09 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2015-04-16 15:09 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-04-16 15:09 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-04-16 15:09 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-16 15:09 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-16 15:09 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-04-16 15:09 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-04-16 15:09 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-16 15:09 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-16 15:08 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 15:08 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-16 15:08 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-16 15:08 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-16 15:08 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-16 15:08 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-16 15:08 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 15:08 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-16 15:08 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-16 15:08 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 15:08 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 15:08 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-16 15:08 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-16 15:06 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-16 15:06 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-16 15:06 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-16 15:06 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-16 15:06 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-16 15:06 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-16 15:06 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-16 15:06 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-16 15:06 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-16 15:06 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-16 15:06 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-16 15:06 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-16 15:06 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-16 15:06 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-16 15:06 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-16 15:06 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-16 15:06 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-16 15:06 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-16 15:06 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-16 15:06 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-16 15:06 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-16 15:06 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-16 15:06 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-16 15:06 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-04-16 15:05 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-13 10:15 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\SalesCuheCkeer
2015-04-13 10:15 - 2015-04-13 10:15 - 00000000 ____D () C:\Windows\Sun
2015-04-13 10:14 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\GChat Pix
2015-04-13 10:14 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\BetteRPriceCheC
2015-04-13 10:13 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\ShopperMastaer
2015-04-08 10:45 - 2015-04-08 10:45 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-08 10:45 - 2015-04-08 10:45 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-07 15:32 - 2015-04-07 15:31 - 00333503 _____ (AnySend.com) C:\Users\Annette\AppData\Local\nsfFD0B.tmp
2015-04-07 15:01 - 2015-04-18 15:00 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-07 15:01 - 2015-04-18 15:00 - 00001123 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-07 15:01 - 2015-04-07 15:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-07 14:58 - 2015-04-17 20:32 - 01203488 _____ () C:\Users\Annette\Downloads\Firefox - CHIP-Installer.exe
2015-04-07 13:54 - 2015-04-07 13:54 - 00000000 ____D () C:\ProgramData\e93af55400007372
2015-04-07 13:51 - 2015-04-07 13:51 - 00003166 _____ () C:\Windows\System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552}
2015-04-07 13:46 - 2015-04-18 20:28 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058
2015-04-07 13:43 - 2015-04-14 23:03 - 00000000 ____D () C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}
2015-04-07 13:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\XTab
2015-04-07 13:41 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\mystartsearch
2015-04-07 13:31 - 2015-04-07 13:48 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\.minecraft
2015-04-07 13:29 - 2015-04-07 13:29 - 00000000 ____D () C:\ProgramData\d67f62e779954f0498e30aa3abc72476
2015-04-07 13:26 - 2015-04-07 13:26 - 00394480 _____ () C:\Users\Annette\Downloads\minecraft-Download.exe
2015-04-07 13:25 - 2015-04-07 13:25 - 00003336 _____ () C:\Windows\System32\Tasks\InfoCollect
2015-04-07 13:25 - 2015-04-07 13:25 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2015-04-07 13:24 - 2015-04-07 13:24 - 00001990 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2015-04-07 13:18 - 2015-04-07 13:18 - 554965182 _____ () C:\Windows\MEMORY.DMP
2015-04-07 13:18 - 2015-04-07 13:18 - 01005576 _____ () C:\Windows\Minidump\040715-37203-01.dmp
2015-04-07 13:18 - 2015-04-07 13:18 - 00000000 ____D () C:\Windows\Minidump
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Annette\AppData\Roaming\EWSRRH
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Annette\AppData\Roaming\CBHT
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Annette\AppData\Roaming\OB
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Annette\AppData\Roaming\AFCZ
2015-03-24 17:24 - 2015-03-24 17:24 - 00000000 ___RD () C:\Users\Annette\Documents\Notes
2015-03-23 20:13 - 2015-03-23 20:13 - 00000000 ____D () C:\Program Files (x86)\CommentBlocker
2015-03-23 19:53 - 2015-03-23 19:53 - 00000000 ____D () C:\Program Files (x86)\DiscoUnntLoCaetor
2015-03-23 19:34 - 2015-04-07 14:46 - 00000000 ____D () C:\Program Files (x86)\shopnnDROP
2015-03-23 19:33 - 2015-04-07 14:46 - 00000000 ____D () C:\Program Files (x86)\FleuxibleShopper
2015-03-22 19:36 - 2015-04-07 15:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-22 19:05 - 2015-04-18 11:35 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-19 12:22 - 2015-03-19 12:22 - 00000197 _____ () C:\Windows\system32\2015-03-19-10-22-35.055-AvastVBoxSVC.exe-2544.log
2015-03-19 11:13 - 2015-03-19 11:13 - 00000197 _____ () C:\Windows\system32\2015-03-19-09-13-14.010-AvastVBoxSVC.exe-1768.log

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---


hoffe das war so richtig

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version: - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version: - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version: - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version: - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version: - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

besser habe ich es nicht hinbekommen :-( hoffe du kannst etwas damit anfangen .g netty

Ich hoffe das hilft dir weiter besser ging es nicht lg netty

Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

• Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
• Klicke auf Optionen und wähle als Sprache Deutsch.
• Suche im Uninstallerfeld nach den Programmen:
  
  CommentBlocker
  DiscoUnntLoCaetor
  FleuxibleShopper
  Optimizer Pro v3.2
  Search Protect
  shopnnDROP
  WSE_Binkiland
  
  
• Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

 

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hi
Mein pc lässt sich gereicht mehr starten meine Tochter hat ihn heute Morgen mitgenommen und gibt ihn zu einem Freund im Computerspiel. Tut mir leid danke dennoch für deine Hilfe . LG Betty
Ich hoffe wenn ich wieder mal ein Problem habe das ich mich hier wieder melden darf. Jetzt geht es kleiner weiter mit Tabletten.

Computerservice #

ok :)