Firefoxe standartsuche Google funktioniert nicht

OTL logfile created on: 16.01.2013 15:26:49 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\M.... ...e\Downloads
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,93 Gb Total Physical Memory | 0,71 Gb Available Physical Memory | 36,57% Memory free
3,87 Gb Paging File | 2,16 Gb Available in Paging File | 55,94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 391,54 Gb Total Space | 247,31 Gb Free Space | 63,16% Space Free | Partition Type: NTFS
Drive D: | 488,28 Gb Total Space | 478,97 Gb Free Space | 98,09% Space Free | Partition Type: NTFS
Drive F: | 298,09 Gb Total Space | 294,20 Gb Free Space | 98,70% Space Free | Partition Type: NTFS
 
Computer Name: M......E-PC | User Name: M.... ...e | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\M.... ...e\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Digital Dynamic\Advanced Backup Manager\backupsvc.exe (Digital Dynamic)
PRC - C:\Program Files\Mozilla Firefox 4.0 Beta 10\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Mozilla Firefox 4.0 Beta 10\plugin-container.exe (Mozilla Corporation)
PRC - C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe (Adobe Systems, Inc.)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
PRC - C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\totalcmd\TOTALCMD.EXE (Ghisler Software GmbH)
PRC - C:\Program Files\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe (Fujitsu Technology Solutions)
PRC - C:\Program Files\TwonkyMedia\MediaManager\TwonkyMediaManager.exe (PacketVideo                         )
PRC - C:\Program Files\TwonkyMedia\twonkymediaserverwatchdog.exe (PacketVideo)
PRC - C:\Program Files\TwonkyMedia\TwonkyMediaServer.exe ()
PRC - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
PRC - C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\11.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\6.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\3.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\5.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\10.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\9.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\4.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\7.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\0.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\2.mdd ()
MOD - C:\Users\M.....T~1\AppData\Local\Temp\wrd10004.~lk\1.mdd ()
MOD - C:\Program Files\Mozilla Firefox 4.0 Beta 10\mozjs.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\log4net\199e1121526944a4d9dc77e5867fc774\log4net.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\DeskUpdateNotifier\3802e86c54c8a435573e3f78c6632fa0\DeskUpdateNotifier.ni.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\865d2bf19a7af7fab8660a42d92550fe\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\195a77fcc6206f8bb35d419ff2cf0d72\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll ()
MOD - c:\progra~2\saveas\sprote~1.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2013\txmlutil.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2013\bdmetrics.dll ()
MOD - C:\Program Files\WinRAR\rarext.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Program Files\TwonkyMedia\MediaManager\renderer.dll ()
MOD - C:\Program Files\TwonkyMedia\MediaManager\controlpoint.dll ()
MOD - C:\Program Files\TwonkyMedia\MediaManager\cplisc.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (backupsvc) -- C:\Program Files\Digital Dynamic\Advanced Backup Manager\backupsvc.exe (Digital Dynamic)
SRV - (updatesvca) -- C:\Windows\System32\updatesvca.dll (Digital Dynamic)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
SRV - (BdDesktopParental) -- C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender)
SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (NAUpdate) -- C:\Program Files\Nero\Update\NASvc.exe (Nero AG)
SRV - (TuneUp.Defrag) -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (TwonkyMedia) -- C:\Program Files\TwonkyMedia\twonkymediaserverwatchdog.exe (PacketVideo)
SRV - (Fabs) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (SandraAgentSrv) -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP4\RpcAgentSrv.exe (SiSoftware)
SRV - (AAV UpdateService) -- C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
SRV - (FirebirdServerMAGIXInstance) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe (MAGIX®)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (VirtualImDisk) -- C:\Windows\System32\drivers\virtualimdisk.sys (Olof Lagerkvist)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender)
DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.)
DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender)
DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender)
DRV - (bdselfpr) -- C:\Program Files\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC)
DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC)
DRV - (BdfNdisf) -- c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys (BitDefender LLC)
DRV - (bdfwfpf) -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC)
DRV - (epmntdrv) -- C:\Windows\System32\epmntdrv.sys ()
DRV - (EuGdiDrv) -- C:\Windows\System32\EuGdiDrv.sys ()
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WINUSB) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (SANDRA) -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP4\WNt500x86\Sandra.sys (SiSoftware)
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (SiSGbeLH) -- C:\Windows\System32\drivers\SiSGB6.sys (Silicon Integrated Systems Corp.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?crg=3.1010000.00000
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.00000
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?crg=3.1010000.00000
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 68 FD 96 47 12 59 CC 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029
IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.00000
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..CT3272810.browser.search.defaultthis.engineName: "true"
FF - prefs.js..browser.search.defaultenginename: "SearchTheWeb"
FF - prefs.js..browser.search.defaultenginename,S: S", ""
FF - prefs.js..browser.search.defaultthis.engineName: "WhiteSmoke US New E1 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3272810&SearchSource=3&q={searchTerms}&CUI=UN16704135536850312"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.order.1,S: S", ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.selectedEngine,S: S", ""
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: testpilot%40labs.mozilla.com:1.2.2
FF - prefs.js..extensions.enabledAddons: %7B25A1388B-6B18-46c3-BEBA-A81915D0DE8F%7D:1.7.8.3
FF - prefs.js..extensions.enabledAddons: %7BC9B68337-E93A-44EA-94DC-CB300EC06444%7D:4.22.0
FF - prefs.js..extensions.enabledAddons: %7Ba1e75a0e-4397-4ba8-bb50-e19fb66890f4%7D:3.16.0.100
FF - prefs.js..extensions.enabledAddons: %7Bdc572301-7619-498c-a57d-39143191b318%7D:0.4.0.4
FF - prefs.js..extensions.enabledAddons: %7B1280606b-2510-4fe0-97ef-9b5a22eafe30%7D:0.7.9.4
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - prefs.js..keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3272810&SearchSource=2&CUI=UN16704135536850312&q="
FF - prefs.js..network.proxy.type: 0
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 10\components [2013.01.15 11:29:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 10\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012.03.26 19:57:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.01.15 11:46:41 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\extension@preispilot.com: C:\Users\M.... ...e\AppData\Roaming\Mozilla\Firefox\Profiles\7c32lzmq.default\extensions\extension@preispilot.com [2013.01.16 14:53:56 | 000,000,000 | ---D | M]
 
[2011.08.12 18:25:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Extensions
[2013.01.16 15:11:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\7c32lzmq.default\extensions
[2013.01.12 20:05:14 | 000,000,000 | ---D | M] (WhiteSmoke US New E1) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\7c32lzmq.default\extensions\{72a0f495-ba60-4524-827b-b36b8c18587a}
[2013.01.12 20:06:18 | 000,000,000 | ---D | M] (SaveAs) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\7c32lzmq.default\extensions\50f1b79fabf28@50f1b79fabf62.com
[2013.01.13 06:41:46 | 000,000,000 | ---D | M] (SaveAs) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\7c32lzmq.default\extensions\50f24c8915435@50f24c891546d.com
[2012.10.15 07:27:59 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\7c32lzmq.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2013.01.16 14:53:56 | 000,000,000 | ---D | M] (Preispilot) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\7c32lzmq.default\extensions\extension@preispilot.com
[2013.01.16 11:46:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\7c32lzmq.default\extensions\trash
[2013.01.16 14:53:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\7c32lzmq.default\extensions\extension@preispilot.com\chrome
[2012.09.13 05:00:34 | 000,621,521 | ---- | M] () (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\7c32lzmq.default\extensions\testpilot@labs.mozilla.com.xpi
[2013.01.10 06:27:24 | 000,516,839 | ---- | M] () (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\7c32lzmq.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
[2012.11.01 08:29:06 | 000,491,173 | ---- | M] () (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\7c32lzmq.default\extensions\{25A1388B-6B18-46c3-BEBA-A81915D0DE8F}.xpi
[2012.11.23 12:26:37 | 000,804,627 | ---- | M] () (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\7c32lzmq.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.01.10 06:27:24 | 000,713,793 | ---- | M] () (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\7c32lzmq.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
[2013.01.16 14:54:53 | 000,001,221 | ---- | M] () -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\7c32lzmq.default\searchplugins\conduit.xml
[2011.08.13 18:38:18 | 000,002,048 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml
 
========== Chrome  ==========
 
CHR - Extension: SaveAs = C:\Users\M.... ...e\AppData\Local\Google\Chrome\User Data\Default\Extensions\hikdcibhllfknebanabljllcnkmjloac\1\
CHR - Extension: SaveAs = C:\Users\M.... ...e\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkdgaennipccbapackpoleglfofpacdd\1\
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (SaveAs) - {81BE7674-E58B-74A8-5D89-0C67E2261A38} - C:\ProgramData\SaveAs\50f1b79fac0bb.dll ()
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No CLSID value found.
O4 - HKLM..\Run: [Bdagent] C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [DeskUpdateNotifier] C:\Program Files\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe (Fujitsu Technology Solutions)
O4 - Startup: C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Vodafone Media Manager.lnk = C:\Program Files\TwonkyMedia\MediaManager\TwonkyMediaManager.exe (PacketVideo                         )
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0921659C-F994-4ECB-9F3E-DD89537F1F46}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B1EAD508-83B9-4FE9-8E1E-A5411B620ADE}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F2D47EBD-9378-4D70-A0CB-E1B2A352771B}: NameServer = 192.168.5.1,192.168.5.3
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~2\saveas\sprote~1.dll) - c:\progra~2\saveas\sprote~1.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.01.16 16:00:55 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CPUCooL
[2013.01.16 16:00:02 | 000,000,000 | ---D | C] -- C:\Program Files\CPUCooL
[2013.01.16 15:10:53 | 000,000,000 | ---D | C] -- C:\Windows\System32\IO
[2013.01.16 14:54:55 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Opera
[2013.01.16 14:53:58 | 000,493,056 | ---- | C] ( datenhaus GmbH) -- C:\Windows\System32\dhRichClient3.dll
[2013.01.16 14:53:53 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\OCS
[2013.01.16 14:53:37 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\DesktopIconForAmazon
[2013.01.16 11:14:28 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\Documents\LocaleMetaData
[2013.01.15 13:47:26 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Malwarebytes
[2013.01.15 13:47:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.01.15 13:47:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.01.15 13:47:12 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.01.15 13:47:12 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.01.15 13:46:59 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Local\Programs
[2013.01.15 13:05:00 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Digital Dynamic
[2013.01.15 13:04:50 | 000,034,448 | ---- | C] (Olof Lagerkvist) -- C:\Windows\System32\drivers\virtualimdisk.sys
[2013.01.15 13:04:49 | 000,177,664 | ---- | C] (Digital Dynamic) -- C:\Windows\System32\updatesvca.dll
[2013.01.15 13:04:48 | 000,000,000 | ---D | C] -- C:\Program Files\Digital Dynamic
[2013.01.15 13:02:13 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\Desktop\Logfiles
[2013.01.15 12:41:42 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.01.15 11:48:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013
[2013.01.15 11:47:00 | 000,000,000 | ---D | C] -- C:\ProgramData\BDLogging
[2013.01.15 11:46:37 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\capicom.dll
[2013.01.15 11:46:37 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys
[2013.01.15 11:46:37 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys
[2013.01.15 11:46:33 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01009.dll
[2013.01.15 11:46:23 | 000,242,504 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avchv.sys
[2013.01.15 11:46:22 | 000,481,464 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys
[2013.01.15 11:46:21 | 000,622,616 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys
[2013.01.15 11:45:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
[2013.01.15 11:39:28 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys
[2013.01.15 11:39:13 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys
[2013.01.15 11:39:13 | 000,000,000 | ---D | C] -- C:\Program Files\Bitdefender
[2013.01.15 11:17:49 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\BitDefender
[2013.01.12 20:19:51 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2013.01.12 20:06:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Cloud Software LTD
[2013.01.12 20:05:52 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Local\SwvUpdater
[2013.01.12 20:03:45 | 000,000,000 | ---D | C] -- C:\Program Files\SaveAs
[2013.01.12 19:59:36 | 000,000,000 | ---D | C] -- C:\ProgramData\SaveAs
[2013.01.12 19:59:36 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Local\Google
[2013.01.12 19:58:36 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
[2013.01.11 07:26:17 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox 4.0 Beta 10
[2013.01.09 18:15:09 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2013.01.09 18:15:09 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013.01.09 18:15:08 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2013.01.09 18:15:08 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2013.01.09 18:15:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.01.09 18:15:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2013.01.09 18:15:07 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2013.01.09 18:15:07 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2013.01.09 18:15:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2013.01.09 18:15:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2013.01.09 18:15:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2013.01.09 18:15:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2013.01.09 18:12:28 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013.01.09 18:08:00 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs
[2013.01.09 18:08:00 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
[2013.01.09 18:08:00 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
[2013.01.09 18:08:00 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs
[2013.01.09 18:08:00 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs
[2013.01.09 18:08:00 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs
[2013.01.09 18:07:59 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2013.01.09 18:07:59 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs
[2013.01.09 18:07:59 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs
[2013.01.09 18:07:59 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
[2013.01.09 18:07:59 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs
[2013.01.09 18:07:58 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
[2013.01.09 18:07:56 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs
[2013.01.09 18:07:56 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
[2013.01.09 18:07:55 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs
[2013.01.09 18:07:55 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs
[2013.01.09 18:07:23 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2013.01.09 18:02:36 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2012.12.22 03:03:34 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2012.12.22 03:03:33 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2012.12.19 21:10:30 | 000,000,000 | -HSD | C] -- C:\found.002
[2011.09.28 07:53:06 | 002,750,912 | ---- | C] (J3S GmbH) -- C:\Users\M.... ...e\COMPUTERBILD App-Center-Installation.exe
 
========== Files - Modified Within 30 Days ==========
 
[2013.01.16 16:21:49 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.01.16 16:01:02 | 000,000,993 | ---- | M] () -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPUCooL.lnk
[2013.01.16 16:00:59 | 000,000,953 | ---- | M] () -- C:\Users\M.... ...e\Desktop\CPUCooL.lnk
[2013.01.16 15:15:17 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.01.16 15:15:17 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.01.16 15:11:58 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.01.16 15:11:58 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.01.16 15:11:58 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.01.16 15:11:58 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.01.16 15:06:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.01.16 15:06:08 | 1558,056,960 | -HS- | M] () -- C:\hiberfil.sys
[2013.01.16 14:52:04 | 000,001,645 | ---- | M] () -- C:\Users\M.... ...e\Desktop\licensecrawler_v0125298.exe - Verknüpfung.lnk
[2013.01.16 11:52:20 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.01.16 11:51:56 | 000,001,459 | ---- | M] () -- C:\Users\M.... ...e\Desktop\OTL.exe - Verknüpfung.lnk
[2013.01.16 11:14:27 | 001,118,208 | ---- | M] () -- C:\Users\M.... ...e\Documents\Bootzeitprotokoll.evtx
[2013.01.15 13:04:50 | 000,034,448 | ---- | M] (Olof Lagerkvist) -- C:\Windows\System32\drivers\virtualimdisk.sys
[2013.01.15 13:04:49 | 000,177,664 | ---- | M] (Digital Dynamic) -- C:\Windows\System32\updatesvca.dll
[2013.01.15 13:03:42 | 000,001,528 | ---- | M] () -- C:\Users\M.... ...e\Desktop\HijackThis - Verknüpfung.lnk
[2013.01.15 12:41:42 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.01.15 11:52:23 | 000,728,742 | ---- | M] () -- C:\ProgramData\1358246342.bdinstall.bin
[2013.01.15 11:49:04 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01
[2013.01.15 11:49:04 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr
[2013.01.15 11:49:04 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01
[2013.01.15 11:48:00 | 000,002,126 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.01.15 11:48:00 | 000,002,078 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Safepay.lnk
[2013.01.15 11:47:58 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2013.01.15 11:29:24 | 000,000,000 | ---- | M] () -- C:\END
[2013.01.15 11:14:40 | 000,077,731 | ---- | M] () -- C:\ProgramData\bdinstall.bin
[2013.01.10 06:21:27 | 000,464,608 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.01.09 18:22:25 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.01.09 18:22:24 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.01.08 10:13:18 | 000,029,969 | ---- | M] () -- C:\Users\M.... ...e\Documents\tatt0_1---tmai12d722cf2a306f5e;jsessionid=84AF92A22C38FCCAF1A6D8B327B78D6F-n1.pdf
[2012.12.30 17:18:10 | 225,366,923 | ---- | M] () -- C:\Windows\MEMORY.DMP
 
========== Files Created - No Company Name ==========
 
[2013.01.16 16:01:02 | 000,000,993 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPUCooL.lnk
[2013.01.16 16:00:59 | 000,000,953 | ---- | C] () -- C:\Users\M.... ...e\Desktop\CPUCooL.lnk
[2013.01.16 14:53:59 | 000,338,432 | ---- | C] () -- C:\Windows\System32\sqlite36_engine.dll
[2013.01.16 14:52:04 | 000,001,645 | ---- | C] () -- C:\Users\M.... ...e\Desktop\licensecrawler_v0125298.exe - Verknüpfung.lnk
[2013.01.16 11:51:24 | 000,001,459 | ---- | C] () -- C:\Users\M.... ...e\Desktop\OTL.exe - Verknüpfung.lnk
[2013.01.16 11:14:14 | 001,118,208 | ---- | C] () -- C:\Users\M.... ...e\Documents\Bootzeitprotokoll.evtx
[2013.01.15 13:47:18 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.01.15 13:03:42 | 000,001,528 | ---- | C] () -- C:\Users\M.... ...e\Desktop\HijackThis - Verknüpfung.lnk
[2013.01.15 11:52:23 | 000,728,742 | ---- | C] () -- C:\ProgramData\1358246342.bdinstall.bin
[2013.01.15 11:49:04 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01
[2013.01.15 11:48:00 | 000,002,126 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.01.15 11:48:00 | 000,002,078 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Safepay.lnk
[2013.01.15 11:47:58 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2013.01.15 11:45:30 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz
[2013.01.15 11:45:30 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01
[2013.01.15 11:45:30 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01
[2013.01.15 11:45:30 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr
[2013.01.12 20:04:49 | 000,000,000 | ---- | C] () -- C:\END
[2013.01.08 10:13:17 | 000,029,969 | ---- | C] () -- C:\Users\M.... ...e\Documents\tatt0_1---tmai12d722cf2a306f5e;jsessionid=84AF92A22C38FCCAF1A6D8B327B78D6F-n1.pdf
[2012.06.22 05:23:31 | 000,000,011 | ---- | C] () -- C:\ProgramData\.tv6
[2012.06.10 11:33:37 | 000,000,126 | ---- | C] () -- C:\ProgramData\search_result.xml
[2012.02.12 10:37:38 | 000,033,134 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\UserTile.png
[2011.09.25 17:30:07 | 011,137,024 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\Sandra.mdb
[2011.09.25 17:30:07 | 000,000,064 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\Sandra.ldb
[2011.09.25 15:59:35 | 000,000,123 | ---- | C] () -- C:\Windows\System32\QVPMON.INI
[2011.09.07 19:31:00 | 000,000,094 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\sversion.ini
[2011.09.07 19:26:05 | 000,069,632 | ---- | C] () -- C:\Windows\uinst001.exe
[2011.08.14 18:25:50 | 002,469,248 | ---- | C] () -- C:\Windows\System32\BootMan.exe
[2011.08.14 18:25:50 | 000,019,840 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll
[2011.08.14 18:25:49 | 000,086,408 | ---- | C] () -- C:\Windows\System32\setupempdrv03.exe
[2011.08.14 18:25:49 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys
[2011.08.14 18:25:49 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys
[2011.08.13 12:29:04 | 000,000,016 | ---- | C] () -- C:\Windows\System32\asdict.dat
[2011.08.13 10:48:17 | 000,077,731 | ---- | C] () -- C:\ProgramData\bdinstall.bin
[2011.07.06 13:21:42 | 000,311,296 | ---- | C] () -- C:\Windows\System32\EMRegSys.dll
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2011.10.03 08:38:26 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Ashampoo
[2011.08.31 21:11:59 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Babylon
[2013.01.15 11:17:49 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\BitDefender
[2011.09.21 21:31:15 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Canneverbe Limited
[2013.01.16 15:11:32 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\DesktopIconForAmazon
[2011.09.25 17:15:47 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Engelmann Media
[2011.08.13 12:46:34 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\GHISLER
[2011.08.13 20:33:35 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\GoPal Assistant
[2011.09.22 03:54:29 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\ImgBurn
[2011.10.05 07:04:36 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Lexware
[2011.09.07 19:46:38 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Lingo4u
[2011.09.06 21:04:25 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\MAGIX
[2013.01.16 14:53:53 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\OCS
[2011.09.01 04:08:55 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\OpenOffice.org
[2013.01.16 14:54:55 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Opera
[2011.08.13 10:50:37 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\QuickScan
[2012.03.19 12:42:50 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\SMA
[2011.08.13 11:49:02 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Thunderbird
[2011.09.26 05:43:04 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\TuneUp Software
 
========== Purity Check ==========
 
 
 
========== Files - Unicode (All) ==========
[2013.01.15 11:14:42 | 000,000,000 | ---- | M] ()(C:\Windows\System32\?????) -- C:\Windows\System32\獷楬汢捯污
[2013.01.15 11:02:47 | 000,000,000 | ---- | C] ()(C:\Windows\System32\?????) -- C:\Windows\System32\獷楬汢捯污

< End of report >
         

 Malwarebytes Anti-Malware  (Test) 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.01.15.09

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
M.... ...e :: M......E-PC [Administrator]

Schutz: Aktiviert

15.01.2013 13:50:08
mbam-log-2013-01-15 (13-50-08).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte  Suchlaufeinstellungen: Speicher | Autostart | Registrierung |  Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 336702
Laufzeit: 3 Stunde(n), 28 Minute(n), 36 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 8
C:\Users\M....  ...e\AppData\Local\Microsoft\Windows\Temporary Internet  Files\Content.IE5\P305MHRM\50f1b79fc430f[1].exe (Adware.Dropper) ->  Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\M....  ...e\AppData\Local\Microsoft\Windows\Temporary Internet  Files\Content.IE5\ZR4PZCEU\50f24c892cb17[1].exe (Adware.Dropper) ->  Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\M....  ...e\AppData\Local\Temp\{F2A2D171-C33C-44B7-A65C-8B1E2941F387}\Addons\coupon_setup.exe  (Adware.Dropper) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\M....  ...e\Downloads\SoftonicDownloader_fuer_openoffice(2).exe  (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne  gestellt.
C:\Users\M....  ...e\Downloads\SoftonicDownloader_fuer_openoffice.exe  (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne  gestellt.
C:\Users\M....  ...e\Downloads\SoftonicDownloader_fuer_cdburnerxp-pro.exe  (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne  gestellt.
C:\Users\M....  ...e\Downloads\SoftonicDownloader_fuer_magix-video-deluxe.exe  (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne  gestellt.
C:\Users\M....  ...e\Downloads\SoftonicDownloader_fuer_openoffice(1).exe  (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne  gestellt.

(Ende)was ist zu tun?