snap.do entfernen

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-07-2013
Ran by mesecke (administrator) on 28-07-2013 15:45:12
Running from C:\Users\mesecke\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\system32\PSIService.exe
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Smartbar) C:\Users\mesecke\AppData\Local\Smartbar\Application\Smartbar.exe
() C:\Users\mesecke\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7739936 2009-09-11] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1549608 2009-08-14] (Synaptics Incorporated)
HKLM\...\Run: [MDS_Menu] - C:\Program Files\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM\...\Run: [PDVD9LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe [50472 2009-04-27] (CyberLink Corp.)
HKLM\...\Run: [UCam_Menu] - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [348664 2012-08-08] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKCU\...\Run: [msnmsgr] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
HKCU\...\Run: [C:\Users\mesecke\AppData\Local\Temp\tmp7C1.tmp.exe] - C:\Users\mesecke\AppData\Local\Temp\tmp7C1.tmp.exe [10411824 2012-05-08] (Freemium) <===== ATTENTION
HKCU\...\Run: [Hoolapp Android] - "C:\Users\mesecke\AppData\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized [x]
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\mesecke\AppData\Local\Smartbar\Application\Smartbar.exe [20992 2013-04-04] (Smartbar)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\mesecke\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
MountPoints2: {9201e347-101f-11df-a97f-00222008c212} - F:\pushinst.exe
HKU\Default\...\RunOnce: [SetScreenSaver] - C:\Windows\System32\oobe\info\SetScreenSaver.lnk [ 2013-07-27] ()
HKU\Default User\...\RunOnce: [SetScreenSaver] - C:\Windows\System32\oobe\info\SetScreenSaver.lnk [ 2013-07-27] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\p6_erinnerung_196.lnk
ShortcutTarget: p6_erinnerung_196.lnk -> C:\Program Files\phase6\phase6_196\WinStart\p6erinnerung.exe (phase-6 AG)
Startup: C:\Users\mesecke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=TubeBoxYB&dpid=TubeBoxYB&co=DE&userid=cf476da8-7b2c-4938-83d0-16892f37458b&searchtype=ds&q={searchTerms}&installDate=27/02/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=TubeBoxYB&dpid=TubeBoxYB&co=DE&userid=cf476da8-7b2c-4938-83d0-16892f37458b&searchtype=ds&q={searchTerms}&installDate=27/02/2013
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv2&cd=2XzuyEtN2Y1L1QzutDtDtByD0DtAyE0FyCyC0ByEyC0FtDzytN0D0Tzu0CyEyDtBtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1G2XtB&cr=186706102&ir=
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv2&cd=2XzuyEtN2Y1L1QzutDtDtByD0DtAyE0FyCyC0ByEyC0FtDzytN0D0Tzu0CyEyDtBtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1G2XtB&cr=186706102&ir=
SearchScopes: HKLM - {72D74FAB-4152-7CB3-B58F-51FF6F39324D} URL = hxxp://feed.snap.do/?publisher=TubeBoxYB&dpid=TubeBoxYB&co=DE&userid=cf476da8-7b2c-4938-83d0-16892f37458b&searchtype=ds&q={searchTerms}&installDate=27/02/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=TubeBoxYB&dpid=TubeBoxYB&co=DE&userid=cf476da8-7b2c-4938-83d0-16892f37458b&searchtype=ds&q={searchTerms}&installDate=27/02/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=TubeBoxYB&dpid=TubeBoxYB&co=DE&userid=cf476da8-7b2c-4938-83d0-16892f37458b&searchtype=ds&q={searchTerms}&installDate=27/02/2013
SearchScopes: HKCU - {72D74FAB-4152-7CB3-B58F-51FF6F39324D} URL = 
BHO: TubeBoxEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
Toolbar: HKLM - TubeBox - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU -No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [261840] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default
FF user.js: detected! => C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\user.js
FF SelectedSearchEngine: Google
FF Homepage: www.t-online.de
FF Keyword.URL: hxxp://google.de
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\mesecke\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\searchplugins\sweetim.xml
FF Extension: No Name - C:\Users\mesecke\AppData\Roaming\Mozilla\Extensions\songbird@songbirdnest.com
FF Extension: No Name - C:\Users\mesecke\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\Extensions\ich@maltegoetz.de
FF Extension: artur.dubovoy - C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\Extensions\artur.dubovoy@gmail.com.xpi
FF Extension: ffextension - C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\Extensions\ffextension@weheartit.com.xpi
FF Extension: vdpure - C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\Extensions\vdpure@link64.xpi
FF Extension: YoutubeDownloader - C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi
FF Extension: youtubeunblocker - C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\mesecke\AppData\Roaming\Mozilla\Firefox\Profiles\57b2e5tr.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF StartMenuInternet: FIREFOX.EXE - C:\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR RestoreOnStartup: "hxxp://www.t-online.de/", "hxxp://feed.snap.do/?publisher=TubeBoxYB&dpid=TubeBoxYB&co=DE&userid=cf476da8-7b2c-4938-83d0-16892f37458b&searchtype=hp&installDate=27/02/2013"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (GoogleChromeRemotePlugin) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll ( )
CHR Plugin: (2007 Microsoft Office system) - C:\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Mozilla Firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (TubeBox ) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0
CHR Extension: (YouTube Options) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdokagampppgbnjfdlkfpphniapiiifn\1.8.126_0
CHR Extension: (Turn Off the Lights) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.2.0.12_0
CHR Extension: (UpHill Rush Games 1 - 5) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbjlfojhbpejadmlkgjbjmppnnkjkdg\1.0.0.17_0
CHR Extension: (Adblock Plus) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.2_0
CHR Extension: (DoNotTrackMe) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.620_0
CHR Extension: (AdBlock) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.3_0
CHR Extension: (One Direction) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjaipfncandiglmhpndpbbmcnojmlhnp\1_0
CHR Extension: (We Heart It) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\iblenkmcolcdonmlfknbpbgjebabcoae\3.0.1_0
CHR Extension: (Stealthy) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje\3.0.1_0
CHR Extension: (Adblock Pro) - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.3_0
CHR HKLM\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\mesecke\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM\...\Chrome\Extension: [nbmafkdmkkckhggblphicnnhlgljnoje] - C:\Program Files\TornTV.com\torn2_10.crx

========================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [375760 2012-06-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [86224 2012-06-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [110032 2012-06-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [465360 2012-06-25] (Avira Operations GmbH & Co. KG)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-02-25] ()
S2 SystemStoreService; C:\Program Files\SoftwareUpdater\SystemStore.exe [296448 2013-05-01] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [83392 2012-06-25] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137928 2012-06-25] (Avira GmbH)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [36000 2012-06-25] (Avira GmbH)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [685816 2010-04-10] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-06-25] (Avira GmbH)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
U3 pwdiifow; \??\C:\Users\mesecke\AppData\Local\Temp\pwdiifow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-28 15:45 - 2013-07-28 15:45 - 00000000 ____D C:\FRST
2013-07-28 15:44 - 2013-07-28 15:44 - 01221130 _____ (Farbar) C:\Users\mesecke\Downloads\FRST.exe
2013-07-28 12:08 - 2013-07-28 12:08 - 00044609 _____ C:\Users\mesecke\Desktop\schritt 3.log
2013-07-28 12:03 - 2013-07-28 12:03 - 00377856 _____ C:\Users\mesecke\Downloads\gmer_2.1.19163.exe
2013-07-28 12:02 - 2013-07-28 12:02 - 00099410 _____ C:\Users\mesecke\Desktop\OTL.Txt
2013-07-28 12:02 - 2013-07-28 12:02 - 00046038 _____ C:\Users\mesecke\Desktop\Extras.Txt
2013-07-28 12:01 - 2013-07-28 12:01 - 00000510 _____ C:\Users\mesecke\Desktop\defogger_disable.log
2013-07-28 11:50 - 2013-07-28 11:57 - 00046038 _____ C:\Users\mesecke\Downloads\Extras.Txt
2013-07-28 11:47 - 2013-07-28 11:47 - 00099410 _____ C:\Users\mesecke\Downloads\OTL.Txt
2013-07-28 11:36 - 2013-07-28 11:36 - 00602112 _____ (OldTimer Tools) C:\Users\mesecke\Downloads\OTL.exe
2013-07-28 11:32 - 2013-07-28 11:32 - 00000508 _____ C:\Windows\system32\defogger_disable.log
2013-07-28 11:32 - 2013-07-28 11:32 - 00000020 _____ C:\Users\mesecke\defogger_reenable
2013-07-28 11:15 - 2013-07-28 11:24 - 00000290 _____ C:\Users\mesecke\Downloads\defogger_enable.log
2013-07-28 11:14 - 2013-07-28 11:24 - 00000508 _____ C:\Users\mesecke\Downloads\defogger_disable.log
2013-07-28 11:12 - 2013-07-28 11:12 - 00050477 _____ C:\Users\mesecke\Downloads\Defogger.exe
2013-07-27 23:00 - 2013-07-27 23:00 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-07-27 22:59 - 2013-07-28 00:13 - 00000000 ____D C:\Windows\471D8B37C5B344579FA1B3C693334F4F.TMP
2013-07-27 22:59 - 2013-07-27 22:59 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-07-27 22:58 - 2013-07-27 22:58 - 00726464 _____ (Enigma Software Group USA, LLC.) C:\Users\mesecke\Downloads\SpyHunter-Installer.exe
2013-07-27 22:58 - 2013-07-27 22:58 - 00726464 _____ (Enigma Software Group USA, LLC.) C:\Users\mesecke\Downloads\SpyHunter-Installer (1).exe
2013-07-22 19:50 - 2013-07-22 19:50 - 02328864 _____ C:\Users\mesecke\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe
2013-07-22 19:50 - 2013-07-22 19:50 - 00000000 ____D C:\Users\mesecke\Documents\Amazon MP3
2013-07-22 19:50 - 2013-07-22 19:50 - 00000000 ____D C:\Users\mesecke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-07-22 19:50 - 2013-07-22 19:50 - 00000000 ____D C:\Users\mesecke\AppData\Roaming\Amazon
2013-07-17 22:39 - 2013-07-17 22:39 - 00784856 _____ (Google Inc.) C:\Users\mesecke\Downloads\GoogleEarthPluginSetup.exe
2013-07-16 21:05 - 2013-07-16 21:05 - 01600000 _____ C:\Users\mesecke\Downloads\Tommy Hummelwecker.wav
2013-07-16 20:55 - 2013-07-16 20:55 - 00848000 _____ C:\Users\mesecke\Downloads\Tommy Schwuler Klingelton.wav
2013-07-16 20:55 - 2013-07-16 20:55 - 00752000 _____ C:\Users\mesecke\Downloads\Tommy Hendrikwecker.wav
2013-07-16 20:41 - 2013-07-16 20:41 - 00608000 _____ C:\Users\mesecke\Downloads\Tommy Beautybegeisterter Anrufer.wav
2013-07-16 20:31 - 2013-07-16 20:31 - 00416000 _____ C:\Users\mesecke\Downloads\Tommy Eichhörnchen.wav
2013-07-11 10:40 - 2013-07-11 10:40 - 00000000 ____D C:\Users\mesecke\AppData\Local\DownloadGuide
2013-07-10 21:07 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-10 21:07 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-10 21:07 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-10 21:07 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-10 21:07 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-10 21:07 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-10 21:07 - 2013-06-12 01:43 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-10 21:07 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-10 21:07 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-10 21:07 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-10 21:07 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-10 21:07 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-10 21:07 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-10 21:07 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-10 21:07 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-10 21:07 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-10 20:53 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 20:53 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 20:53 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 20:53 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-07 13:04 - 2013-07-07 13:04 - 00000000 ____D C:\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-07-28 15:45 - 2013-07-28 15:45 - 00000000 ____D C:\FRST
2013-07-28 15:44 - 2013-07-28 15:44 - 01221130 _____ (Farbar) C:\Users\mesecke\Downloads\FRST.exe
2013-07-28 15:42 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-07-28 15:41 - 2011-04-12 17:57 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-28 15:41 - 2011-04-12 17:57 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-28 15:41 - 2009-12-21 12:08 - 01701854 _____ C:\Windows\WindowsUpdate.log
2013-07-28 15:40 - 2011-04-12 17:57 - 00000000 ____D C:\Users\mesecke\AppData\Roaming\Skype
2013-07-28 12:08 - 2013-07-28 12:08 - 00044609 _____ C:\Users\mesecke\Desktop\schritt 3.log
2013-07-28 12:03 - 2013-07-28 12:03 - 00377856 _____ C:\Users\mesecke\Downloads\gmer_2.1.19163.exe
2013-07-28 12:02 - 2013-07-28 12:02 - 00099410 _____ C:\Users\mesecke\Desktop\OTL.Txt
2013-07-28 12:02 - 2013-07-28 12:02 - 00046038 _____ C:\Users\mesecke\Desktop\Extras.Txt
2013-07-28 12:01 - 2013-07-28 12:01 - 00000510 _____ C:\Users\mesecke\Desktop\defogger_disable.log
2013-07-28 11:57 - 2013-07-28 11:50 - 00046038 _____ C:\Users\mesecke\Downloads\Extras.Txt
2013-07-28 11:47 - 2013-07-28 11:47 - 00099410 _____ C:\Users\mesecke\Downloads\OTL.Txt
2013-07-28 11:36 - 2013-07-28 11:36 - 00602112 _____ (OldTimer Tools) C:\Users\mesecke\Downloads\OTL.exe
2013-07-28 11:34 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-28 11:34 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-28 11:32 - 2013-07-28 11:32 - 00000508 _____ C:\Windows\system32\defogger_disable.log
2013-07-28 11:32 - 2013-07-28 11:32 - 00000020 _____ C:\Users\mesecke\defogger_reenable
2013-07-28 11:32 - 2009-12-21 12:09 - 00000000 ____D C:\Users\mesecke
2013-07-28 11:26 - 2009-12-25 12:29 - 00000000 ____D C:\Users\mesecke\Tracing
2013-07-28 11:26 - 2009-12-21 12:09 - 00000000 ____D C:\Users\mesecke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HomeCinema
2013-07-28 11:26 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-28 11:26 - 2009-07-14 06:39 - 00187340 _____ C:\Windows\setupact.log
2013-07-28 11:24 - 2013-07-28 11:15 - 00000290 _____ C:\Users\mesecke\Downloads\defogger_enable.log
2013-07-28 11:24 - 2013-07-28 11:14 - 00000508 _____ C:\Users\mesecke\Downloads\defogger_disable.log
2013-07-28 11:19 - 2009-12-21 13:06 - 00132648 _____ C:\Users\mesecke\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-28 11:19 - 2009-07-14 06:33 - 00460184 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-28 11:18 - 2009-09-29 08:23 - 00133908 _____ C:\Windows\PFRO.log
2013-07-28 11:12 - 2013-07-28 11:12 - 00050477 _____ C:\Users\mesecke\Downloads\Defogger.exe
2013-07-28 11:06 - 2011-05-19 15:54 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-07-28 11:00 - 2011-01-13 17:41 - 00000000 ____D C:\Users\mesecke\AppData\Roaming\Apple Computer
2013-07-28 11:00 - 2011-01-13 17:18 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-28 10:56 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Microsoft Games
2013-07-28 10:38 - 2013-02-23 19:25 - 00000000 ____D C:\Program Files\VS Revo Group
2013-07-28 10:01 - 2009-09-29 05:58 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-28 00:13 - 2013-07-27 22:59 - 00000000 ____D C:\Windows\471D8B37C5B344579FA1B3C693334F4F.TMP
2013-07-27 23:00 - 2013-07-27 23:00 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-07-27 22:59 - 2013-07-27 22:59 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-07-27 22:58 - 2013-07-27 22:58 - 00726464 _____ (Enigma Software Group USA, LLC.) C:\Users\mesecke\Downloads\SpyHunter-Installer.exe
2013-07-27 22:58 - 2013-07-27 22:58 - 00726464 _____ (Enigma Software Group USA, LLC.) C:\Users\mesecke\Downloads\SpyHunter-Installer (1).exe
2013-07-27 22:34 - 2012-08-21 22:08 - 00000000 ____D C:\Users\mesecke\Desktop\xyAlbum covers
2013-07-27 22:15 - 2012-05-08 18:10 - 00000000 ____D C:\Users\mesecke\Documents\TubeBox
2013-07-27 00:07 - 2011-04-12 17:56 - 00000000 ___RD C:\Program Files\Skype
2013-07-27 00:07 - 2011-04-12 17:56 - 00000000 ____D C:\ProgramData\Skype
2013-07-25 23:07 - 2012-09-08 08:32 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-22 19:50 - 2013-07-22 19:50 - 02328864 _____ C:\Users\mesecke\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe
2013-07-22 19:50 - 2013-07-22 19:50 - 00000000 ____D C:\Users\mesecke\Documents\Amazon MP3
2013-07-22 19:50 - 2013-07-22 19:50 - 00000000 ____D C:\Users\mesecke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-07-22 19:50 - 2013-07-22 19:50 - 00000000 ____D C:\Users\mesecke\AppData\Roaming\Amazon
2013-07-21 23:17 - 2012-02-11 21:52 - 00000000 ____D C:\Users\mesecke\Documents\KrimsKrams
2013-07-17 22:41 - 2011-04-12 17:57 - 00000000 ____D C:\Program Files\Google
2013-07-17 22:39 - 2013-07-17 22:39 - 00784856 _____ (Google Inc.) C:\Users\mesecke\Downloads\GoogleEarthPluginSetup.exe
2013-07-16 21:05 - 2013-07-16 21:05 - 01600000 _____ C:\Users\mesecke\Downloads\Tommy Hummelwecker.wav
2013-07-16 20:55 - 2013-07-16 20:55 - 00848000 _____ C:\Users\mesecke\Downloads\Tommy Schwuler Klingelton.wav
2013-07-16 20:55 - 2013-07-16 20:55 - 00752000 _____ C:\Users\mesecke\Downloads\Tommy Hendrikwecker.wav
2013-07-16 20:41 - 2013-07-16 20:41 - 00608000 _____ C:\Users\mesecke\Downloads\Tommy Beautybegeisterter Anrufer.wav
2013-07-16 20:31 - 2013-07-16 20:31 - 00416000 _____ C:\Users\mesecke\Downloads\Tommy Eichhörnchen.wav
2013-07-13 23:16 - 2012-04-01 11:21 - 00000000 ____D C:\Users\mesecke\Documents\SCHULE
2013-07-13 20:42 - 2013-04-03 17:18 - 00002133 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-13 14:09 - 2009-07-14 06:53 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-12 20:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-12 00:33 - 2011-05-19 16:01 - 00000000 ____D C:\Users\mesecke\Desktop\Dies Das
2013-07-11 10:40 - 2013-07-11 10:40 - 00000000 ____D C:\Users\mesecke\AppData\Local\DownloadGuide
2013-07-11 10:33 - 2009-09-29 08:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 00:05 - 2009-07-14 10:56 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 00:05 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-10 21:22 - 2009-09-29 07:03 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-07-10 21:07 - 2009-09-29 08:08 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 21:03 - 2009-10-14 11:38 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-10 19:37 - 2012-09-29 13:52 - 00000000 ____D C:\Program Files\Freetec
2013-07-10 19:35 - 2013-02-09 22:56 - 00000000 ____D C:\ProgramData\Package Cache
2013-07-07 13:04 - 2013-07-07 13:04 - 00000000 ____D C:\Mozilla Firefox
2013-07-04 17:25 - 2013-05-18 17:44 - 00000000 ____D C:\Program Files\SingAlong

Files to move or delete:
====================
C:\Users\mesecke\AppData\Local\Temp\tmp7C1.tmp.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-15 10:31

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-07-2013
Ran by mesecke at 2013-07-28 15:49:30
Running from C:\Users\mesecke\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 Update for Microsoft Office 2007 (KB2508958)
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Avira Antivirus Premium 2012 (Version: 12.1.9.2400)
Bonjour (Version: 3.0.0.10)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
CyberLink LabelPrint (Version: 2.5.1927)
CyberLink MediaShow (Version: 4.1.3121)
CyberLink PhotoNow (Version: 1.1.6622)
CyberLink Power2Go (Version: 6.1.3213)
CyberLink PowerDirector (Version: 7.0.3003)
CyberLink PowerDVD 9 (Version: 9.0.2010)
CyberLink PowerDVD Copy (Version: 1.0.6720)
CyberLink PowerProducer (Version: 5.0.2.2124)
CyberLink YouCam (Version: 3.0.2104)
Ease Audio Converter 5.27
Free Audio CD Burner version 1.4.8
Free M4a to MP3 Converter 8.0
Free YouTube Download Manager (Version: 1.0.2.40)
Google Chrome (Version: 28.0.1500.72)
Google Earth Plug-in (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.153)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2202)
Intel(R) TV Wizard
Intel® Matrix Storage Manager
iTunes (Version: 11.0.4.4)
JMicron Ethernet Adapter NDIS Driver (Version: 6.0.10.5)
JMicron Flash Media Controller Driver (Version: 1.0.31.3)
Junk Mail filter update (Version: 14.0.8117.416)
Medion Home Cinema (Version: 6.0.0000)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook Connector (Version: 12.0.6423.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
phase6_196 (Version: 1.96.0000)
QuickTime (Version: 7.74.80.86)
Realtek High Definition Audio Driver (Version: 6.0.1.5936)
REALTEK Wireless LAN Driver (Version: 1.00.0124)
Skype Click to Call (Version: 5.10.9560)
Skype™ 6.6 (Version: 6.6.106)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Synaptics Pointing Device Driver (Version: 14.0.0.3)
TubeBox (Version: 4.3.0.12)
TubeBox Smartbar (Version: 1.6.1.935)
TubeBox Smartbar Engine (HKCU Version: 1.6.1.935)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817563) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Windows Live Call (Version: 14.0.8117.0416)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Fotogalerie (Version: 14.0.8117.416)
Windows Live Mail (Version: 14.0.8117.0416)
Windows Live Messenger (Version: 14.0.8117.0416)
Windows Live Movie Maker (Version: 14.0.8117.0416)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live Writer (Version: 14.0.8117.0416)
 

==================== Restore Points  =========================

16-07-2013 09:07:02 Windows Update
19-07-2013 12:05:20 Windows Defender Checkpoint
23-07-2013 08:06:23 Windows Update
26-07-2013 18:00:19 Windows Update
27-07-2013 20:59:40 Installed SpyHunter
27-07-2013 22:11:29 Removed SpyHunter
28-07-2013 08:34:49 Removed VirtualDJ Home FREE
28-07-2013 08:38:52 Removed Safari
28-07-2013 08:57:36 Sprachtrainer Fonts wird entfernt
28-07-2013 09:01:01 Removed SweetIM for Messenger 3.7
28-07-2013 09:04:47 Removed SweetPacks bundle uninstaller
28-07-2013 09:05:28 Removed SweetPacks bundle uninstaller
28-07-2013 09:05:55 Removed Update Manager for SweetPacks 1.1

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {005B4B6A-B05A-4147-825E-1BC3E534FE57} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {0E2AA079-1F45-479B-AE56-F8BCF480D244} - System32\Tasks\Funmoods => C:\Users\mesecke\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE No File
Task: {18C3D0DE-875D-4AEF-8D97-E0F6419CE93F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-12] (Google Inc.)
Task: {66D49FE8-7725-46DF-8856-B77AEE72D504} - System32\Tasks\User_Feed_Synchronization-{ECC7586E-98D7-4217-9802-73E75D7B0839} => C:\Windows\system32\msfeedssync.exe [2013-05-07] (Microsoft Corporation)
Task: {6C16C51F-E564-4041-A5E6-E8B1DE96DB97} - System32\Tasks\Hoolapp Init => C:\Users\mesecke\AppData\Roaming\HOOLAP~1\Hoolapp.exe No File
Task: {6E9F9FFC-6B05-4E4E-A53D-AAC57BEF34F3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-12] (Google Inc.)
Task: {8C47ECEF-8702-4BA9-A2F4-28E1BF63EC35} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {913C9352-31B9-49A6-BFA1-6133A377C0A2} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-07-13] ()
Task: {9F44CED7-269A-4D7E-9BF2-03534E00DB05} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {B363DA0D-BCEE-4E23-BB03-3447C8AE1947} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {B4172023-D2BB-4FA9-B5F5-5E9D08C731E3} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-07-08] ()
Task: {CCA0674A-B64B-4545-93DD-1DDFA6AC9814} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {D46A0BA5-3070-4153-AB1B-FE90B65A3BBB} - System32\Tasks\Hoolapp for Android => C:\Users\mesecke\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.EXE No File
Task: {D721C693-7A22-4564-9795-18EB80C99566} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {DBFE7CBB-976A-41B7-BBCA-D31690729B5B} - System32\Tasks\{772FA0BD-4577-4229-B896-2E7480CD4FE9} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/28/2013 03:40:55 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11429569

Error: (07/28/2013 03:40:55 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11429569

Error: (07/28/2013 03:40:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/27/2013 10:01:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3201500

Error: (07/27/2013 10:01:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3201500

Error: (07/27/2013 10:01:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/27/2013 10:01:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3200376

Error: (07/27/2013 10:01:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3200376

Error: (07/27/2013 10:01:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/27/2013 09:08:49 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12434


System errors:
=============
Error: (07/28/2013 11:27:14 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
sptd

Error: (07/28/2013 11:25:44 AM) (Source: sptd) (User: )
Description: Der Treiber hat einen internen Fehler in seinen Datenstrukturen für  festgestellt.

Error: (07/28/2013 11:20:51 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
sptd

Error: (07/28/2013 11:19:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "System Store" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (07/28/2013 11:19:59 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst System Store erreicht.

Error: (07/28/2013 11:18:49 AM) (Source: sptd) (User: )
Description: Der Treiber hat einen internen Fehler in seinen Datenstrukturen für  festgestellt.

Error: (07/28/2013 11:04:53 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/28/2013 11:01:20 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/28/2013 11:01:19 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/28/2013 11:01:19 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.


Microsoft Office Sessions:
=========================
Error: (10/26/2012 00:32:38 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6662.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 11 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 47%
Total physical RAM: 3004.88 MB
Available physical RAM: 1565.88 MB
Total Pagefile: 6008.04 MB
Available Pagefile: 4055.55 MB
Total Virtual: 2047.88 MB
Available Virtual: 1909.72 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:424.66 GB) (Free:333.42 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:30.2 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=425 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================