| |
| |||||||
Log-Analyse und Auswertung: Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in FirefoxWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
12.08.2013, 13:29
| #1 |
 |  Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Hallo zusammen, ich habe seit einigen Tagen das Problem, dass sich in Firefox gelegentlich ein weiteres Fenster mit folgendem Inhalt öffnet: hxxp://serve.bannersdontwork.com/text/javascript hxxp://serve.bannersdontwork.com/&m=true Was kann ich dagegen tun? Ich habe alle Logfiles wie in der Anleitung erstellt und freue mich auf eine Rückmeldung, danke bereits im Voraus! =) LG Nela defogger_disable.txt Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:37 on 12/08/2013 (Nelli)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-08-2013 02 Ran by Nelli (administrator) on 12-08-2013 13:40:54 Running from C:\Users\Nelli\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe () C:\Program Files (x86)\PHotkey\ASLDRSrv.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe () C:\Program Files (x86)\PHotkey\GFNEXSrv.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe ( ) C:\Windows\system32\lxczcoms.exe ( ) C:\Windows\system32\lxeccoms.exe (Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe (pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe (pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe (Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\loggingserver.exe (Wajam) C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe () C:\Program Files (x86)\watchmi\TvdService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe () C:\Program Files (x86)\PHotkey\PHotkey.exe () C:\Program Files (x86)\PHotkey\MsgTranAgt.exe () C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe () C:\Program Files (x86)\PHotkey\PVDesktop.exe () C:\Program Files (x86)\PHotkey\PVDAgent.exe (Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe () C:\Program Files (x86)\PHotkey\POSD.exe () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe () C:\Program Files (x86)\AVG Secure Search\vprot.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files (x86)\watchmi\TvdTray.exe (Dropbox, Inc.) C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated) HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation) HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10365952 2011-05-19] (Intel Corporation) HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.) HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.) HKLM\...\Run: [lxecmon.exe] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] () HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] () HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung) HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics) HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung) HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung) MountPoints2: {0a39669c-ba41-11e1-a621-4c8093361cd9} - F:\iStudio.exe HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink) HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-31] (CyberLink Corp.) HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2285232 2013-07-29] () HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [684024 2012-10-17] (Cisco Systems, Inc.) HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [x] HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] () HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] () AppInit_DLLs: C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.) Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={92B34DDB-9A67-4FFB-B737-B6FB0AC75D3E}&mid=82fab4fa306347d0ac2c9dc9d5d2f52a-721d5dd7c126087c8f5c335bf7626a0b12457f2a&lang=de&ds=pd011&pr=sa&d=2012-09-14 13:36:35&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=94874C8093361CD6 SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={92B34DDB-9A67-4FFB-B737-B6FB0AC75D3E}&mid=82fab4fa306347d0ac2c9dc9d5d2f52a-721d5dd7c126087c8f5c335bf7626a0b12457f2a&lang=de&ds=pd011&pr=sa&d=2012-09-14 13:36:35&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms} BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.4.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search) BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.4.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search) Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GbR) Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.4.0\ViProtocol.dll (AVG Secure Search) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default FF user.js: detected! => C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\user.js FF Homepage: hxxp://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.4.0\\npsitesafety.dll (AVG Technologies) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\delta.xml FF SearchPlugin: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\sweetim.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml FF Extension: IMinent Toolbar - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} FF Extension: hdvc - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\hdvc@hdvc.com.xpi FF Extension: youtubeunblocker - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\youtubeunblocker@unblocker.yt.xpi FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{7F23E3F4-F72E-4f4f-8761-854C8942708F}.xpi FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] C:\ProgramData\AVG Secure Search\FireFoxExt\15.4.0.5 FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\15.4.0.5 FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: No Name - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ Chrome: ======= CHR HomePage: hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6 CHR RestoreOnStartup: "hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6"]},"tabs":{"use_vertical_tabs" CHR Extension: (SweetIM for Facebook) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0 CHR Extension: (Wajam) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0 CHR Extension: (AVG Security Toolbar) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\14.2.0.1_0 CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0 CHR HKLM-x32\...\Chrome\Extension: [ibnmbpihhamedhophbnjjpidokcknoid] - C:\Program Files (x86)\AP Suggestor\APSuggestor.crx CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Nelli\AppData\Local\Wajam\Chrome\wajam.crx CHR HKLM-x32\...\Chrome\Extension: [kpkbnefaikfaeadgidhpoanckoiaheli] - C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\15.4.0.5\avg.crx CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] () R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) R2 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.) R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink) R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink) R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] () R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( ) S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.) R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( ) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] () R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR) R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] () R2 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [1616048 2013-07-29] (AVG Secure Search) R2 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2012-10-05] (Wajam) R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] () ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] () R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies) R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe 2013-08-12 13:39 - 2013-08-12 13:39 - 00125244 _____ C:\Users\Nelli\Desktop\Extras.Txt 2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt 2013-08-12 13:37 - 2013-08-12 13:37 - 00000472 _____ C:\Users\Nelli\Desktop\defogger_disable.log 2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable 2013-08-12 13:36 - 2013-08-12 13:37 - 00050477 _____ C:\Users\Nelli\Desktop\Defogger.exe 2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe 2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe ==================== One Month Modified Files and Folders ======= 2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST 2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe 2013-08-12 13:39 - 2013-08-12 13:39 - 00125244 _____ C:\Users\Nelli\Desktop\Extras.Txt 2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt 2013-08-12 13:38 - 2012-04-03 22:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-08-12 13:37 - 2013-08-12 13:37 - 00000472 _____ C:\Users\Nelli\Desktop\defogger_disable.log 2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable 2013-08-12 13:37 - 2013-08-12 13:36 - 00050477 _____ C:\Users\Nelli\Desktop\Defogger.exe 2013-08-12 13:37 - 2012-03-20 00:59 - 00000000 ____D C:\Users\Nelli 2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe 2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe 2013-08-12 13:20 - 2012-03-20 01:51 - 01936571 _____ C:\Windows\WindowsUpdate.log 2013-08-12 12:49 - 2012-03-20 01:53 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-12 10:23 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-12 10:23 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-12 10:21 - 2011-11-04 03:51 - 00654400 _____ C:\Windows\system32\perfh007.dat 2013-08-12 10:21 - 2011-11-04 03:51 - 00130240 _____ C:\Windows\system32\perfc007.dat 2013-08-12 10:21 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-12 10:18 - 2012-03-20 03:34 - 00000000 ____D C:\Users\Nelli\Documents\Youcam 2013-08-12 10:17 - 2012-10-09 23:21 - 00000000 ___RD C:\Users\Nelli\Dropbox 2013-08-12 10:17 - 2012-10-09 23:13 - 00000000 ____D C:\Users\Nelli\AppData\Roaming\Dropbox 2013-08-12 10:16 - 2013-06-07 22:00 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job 2013-08-12 10:16 - 2013-05-04 18:48 - 00012860 _____ C:\ProgramData\lxecscan.log 2013-08-12 10:16 - 2012-03-20 01:53 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-12 10:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-12 10:15 - 2009-07-14 06:51 - 00083657 _____ C:\Windows\setupact.log 2013-08-11 11:29 - 2012-07-07 14:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-08-08 22:45 - 2013-01-28 20:39 - 00000000 ____D C:\Users\Nelli\Documents\Finanzen 2013-08-04 16:51 - 2012-03-20 03:31 - 00000000 ____D C:\Users\Nelli\Documents\Reisen 2013-08-04 15:19 - 2013-01-06 13:24 - 00000000 ____D C:\Program Files (x86)\TVPlayerClassic 2013-08-04 15:14 - 2012-03-20 03:30 - 00000000 ____D C:\Users\Nelli\Documents\Groupon 2013-07-29 22:28 - 2013-06-28 18:38 - 00003717 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml 2013-07-29 22:26 - 2012-09-14 13:36 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys 2013-07-29 22:26 - 2012-09-14 13:36 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search 2013-07-21 18:48 - 2012-03-20 01:10 - 00000000 ____D C:\Users\Nelli\AppData\Local\Adobe 2013-07-21 18:46 - 2012-04-03 22:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-07-21 18:45 - 2012-04-03 22:44 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-07-21 18:45 - 2011-11-07 18:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-07-15 23:44 - 2012-03-20 01:53 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-07-15 23:44 - 2012-03-20 01:53 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-07-15 18:37 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-12 10:48 ==================== End Of Log ============================ Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2013 02
Ran by Nelli at 2013-08-12 13:41:24
Running from C:\Users\Nelli\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958) (x32)
7-PDF Split & Merge Version 2.0.2 (Build 234) (x32 Version: 7-PDF Split & Merge - Version 2.0.2 (Build 234))
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621)
Adobe AIR (x32 Version: 3.7.0.1860)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096)
AMI VR-pulse OS Switcher (Version: 1.1)
Ashampoo Burning Studio (x32 Version: 10.0.10)
Ashampoo Photo Commander (x32 Version: 9.2.0)
Ashampoo Photo Optimizer (x32 Version: 4.0.0)
Ashampoo Snap (x32 Version: 4.3.0)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.35)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
AVG Security Toolbar (x32 Version: 15.4.0.5)
Babylon toolbar on IE (x32)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229)
CyberLink MediaShow (x32 Version: 5.1.2414)
CyberLink PhotoNow (x32 Version: 1.1.7717)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDirector (Version: 9.0.0.3419a)
CyberLink PowerDirector (x32 Version: 9.0.0.3419a)
CyberLink PowerDVD 10 (x32 Version: 10.0.3510.02)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerProducer (x32 Version: 5.0.2.3503)
CyberLink WaveEditor (x32 Version: 1.0.1.3320)
CyberLink YouCam 5 (x32 Version: 5.0.1108)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.4)
Dropbox (HKCU Version: 2.0.22)
exant HD Audio (Version: 8.54.14.50)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free Studio version 2013 (x32 Version: 6.1.1.430)
Free WMA to MP3 Converter 1.16 (x32)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 28.0.1500.95)
Google Drive (x32 Version: 1.11.4865.2530)
Google Update Helper (x32 Version: 1.3.21.153)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2538)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.2.0.0587)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.1000)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002)
Intel(R) WiDi (x32 Version: 2.2.14.0)
Intel(R) Wireless Display
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 29 (64-bit) (Version: 6.0.290)
Java(TM) 6 Update 29 (x32 Version: 6.0.290)
JDownloader 0.9 (x32 Version: 0.9)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
Lexmark 1200 Series
Lexmark Pro800-Pro900 Series
Lexmark Symbolleiste (x32 Version: 4.3.37.0)
Lexmark Tools for Office (x32 Version: 1.29.0.0)
MediaConverter 1.3.1 (x32 Version: 1.3.1)
Medion Home Cinema (x32 Version: 8.0.3216)
Memeo Instant Backup (x32 Version: 4.60.0.7943)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mathematics (64-Bit) (Version: 4.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
myMugle (x32 Version: 3.0.0.0)
NVIDIA Control Panel 285.64 (Version: 285.64)
NVIDIA Graphics Driver 285.64 (Version: 285.64)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA Optimus 1.5.20 (Version: 1.5.20)
NVIDIA PhysX (x32 Version: 9.10.0513)
NVIDIA Update Components (Version: 1.5.20)
PCSUITE SHREDDER (x32)
PDF Architect (x32 Version: 1.0.41.8362)
PDFCreator (x32 Version: 1.7.0)
PHotkey (x32 Version: 1.00.0045)
PhotoResampling 9.2 (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0)
Samsung Kies (x32 Version: 2.3.3.12085_7)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)
Serif PhotoPlus 11 (x32 Version: 11.1.1.019)
Skype™ 6.1 (x32 Version: 6.1.129)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Synaptics Pointing Device Driver (Version: 15.3.27.1)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Wajam (x32 Version: 1.51)
watchmi (x32 Version: 2.7.0)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
==================== Restore Points =========================
11-07-2013 09:14:34 Geplanter Prüfpunkt
12-07-2013 00:54:33 Windows Update
19-07-2013 18:34:57 Geplanter Prüfpunkt
03-08-2013 16:29:07 Geplanter Prüfpunkt
10-08-2013 20:08:39 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {02768EAD-0A5B-4629-84CD-71D383ACCE70} - System32\Tasks\{F82055D1-A3BD-4ACC-8790-4F0F84C7186B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {06B56F0D-905A-472F-8CA7-0E10D0D8CB0B} - System32\Tasks\{B413301B-7E61-491F-AB70-0F06C48FF1F3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {09689C71-147A-4BAB-862C-ED71277E8876} - System32\Tasks\{78C7BB73-D8DB-4052-8B48-91992D96FB8D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0A5A6A4B-C212-472A-A278-FD4FDFDEA012} - System32\Tasks\{EC07800D-F02E-4331-A236-18C72B9B6C7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0AD4613E-1EEC-48C4-831A-4EC3C707A665} - System32\Tasks\{46910F05-7308-40E6-A19C-8A16284E9387} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0BF15BDD-1C9F-4AB6-82C6-12870DA2E5A2} - System32\Tasks\{B4687708-B3B0-49DC-B098-CA6764C1B064} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {18576D76-F893-42A2-B4A0-DB3DF7C2390D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {1A810642-94FF-46AB-B0AA-EF080852C0C4} - System32\Tasks\{9D4F33AC-43A7-4E5D-B3F1-FA2BC8B05D6F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1C0B7614-4256-4C5C-AC22-1BC640FD6143} - System32\Tasks\{7FD67CCD-D320-40C9-B20D-9DAD504E92DC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1F3CC8FC-2C29-4C4C-AD85-79ECEB3207E3} - System32\Tasks\{EBC0107A-27E6-4456-9980-3883F513495F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {21AA544D-2519-4549-A2B7-C5D62D4376FD} - System32\Tasks\{945D7430-8F26-4F0B-8DB4-54A54B4F6616} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2205DA87-188E-4C43-AFC3-3FFE83E24853} - System32\Tasks\{61908B0F-E2EE-4CCC-A53F-0F6FEB52B308} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {23B03E71-7D6C-4488-86A6-ACC296B6F899} - System32\Tasks\{C3C31BB9-89AC-4AB3-9D9E-AF1DBC3257DA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {24C95FA5-ABFD-430C-8076-BABCC3AA830B} - System32\Tasks\{B9799D49-C6B5-4081-978A-394DB9DAB28E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {272F7FA2-9B20-4B92-B2ED-158BC9F6AC9F} - System32\Tasks\{C75FA60B-CD2F-4CC1-91E0-C15C02BF7A19} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {27DC4101-35F8-4B53-80A2-059E80F94143} - System32\Tasks\{006F757E-36E5-419F-90B0-45EC7EED7D0F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {28A0A582-3928-4BBC-A953-348EBA69D8BD} - System32\Tasks\{9092C394-C4DB-44A3-92E4-B579967AC05F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A8B80A2-90CB-47D4-B156-1146475E9D7B} - System32\Tasks\{91DB47EE-733D-48A8-9C8B-B401D9BB4EE1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A9D1B21-C10E-43A3-849C-F72C0533BD08} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1675067217-2774866892-2821489468-1002 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {2CC88C72-E06E-4361-B748-37BE31CB527E} - System32\Tasks\{AA0CD588-455E-4E6A-8C3D-E5098B4BAABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {311EA50B-C17A-4385-BE5C-70511E633FB3} - System32\Tasks\{D17A4C39-5BEE-4D2C-9AD7-08607A220ED7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {312DDE74-BCA1-4E77-9553-DA9EA37E0642} - System32\Tasks\{D3B020AB-8F78-44B9-9D90-B74478DD7603} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {32EE8272-E801-4C64-8681-6C14D1208219} - System32\Tasks\{C42F1D88-AD03-4239-942B-617F4B8A86F6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3A9422D1-EA6A-435A-81B8-CC8547E82516} - System32\Tasks\{7925F03B-B182-4652-893E-7EFC67C66D0C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3ACDCF49-9DDD-4647-A0F0-B4E3163321B5} - System32\Tasks\{035A4774-F011-4751-9150-B07A48A9B493} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3E712F2E-A704-4276-A4DB-9658D18C2907} - System32\Tasks\{3E4EA85A-3882-44A8-A33E-9A147CCAB5EF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3EFABCFE-E1B1-4515-AD36-ACE1A6FB4620} - System32\Tasks\{B11360C8-0018-4E8E-8CA2-C658FCFFA079} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {407075C5-0EA2-45FB-8590-A903FE8A7025} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {40D9E60B-09B8-4044-8984-162DBADFEF91} - System32\Tasks\{AB724718-AF72-42B7-996F-D1B9C5F0BDF6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {42577CA5-7636-4669-81DF-B321CD5EA347} - System32\Tasks\{6BD0E276-38C8-477B-92AE-F6AD7EE66FD6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {438B387E-E1B9-4D52-B8EA-D8C2F9722A45} - System32\Tasks\{494EF7DF-7A0C-4F64-B0E3-E2B39D52FE8A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {43B3793E-591F-41AA-BC94-67B06021721F} - System32\Tasks\{34199AA6-F406-4B72-83CD-63D3FAA8968C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4459DEC7-B2FC-4F6A-8F1E-B350B32E4865} - System32\Tasks\{88A1D263-182D-45F8-BA93-B7B354D7EDC6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44CE8637-1C88-4F4D-8872-E923315A3528} - System32\Tasks\{C93BA26F-6F1D-491E-90CB-4402A7E49CDF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44FCEA04-B958-47E7-8F26-DBC14186FE07} - System32\Tasks\{C88C6674-2064-48E9-A539-4D0E7768B155} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4BB2E9BA-B294-4340-BE67-3E5B035ABF58} - System32\Tasks\{049AC1F4-79AF-4B48-8C67-30FDFAF46A7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4C10EF4B-53B0-4BD9-967F-E227B758267D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {4CB3BF8A-C7A9-48F2-A0C6-EF8F03AA3A97} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-21] (Adobe Systems Incorporated)
Task: {4E05AC37-AD3B-4DCA-9938-064634CCDB5E} - System32\Tasks\{F7A5DBCD-9963-4859-851A-F87B9E301575} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {50946178-A983-4339-821E-4A42C17F03BC} - System32\Tasks\{05A49616-96EF-4A5A-80E8-C5A577F77D62} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {51562EEF-1402-4F44-8615-BE8A2762EC3F} - System32\Tasks\{D9942290-9314-42DA-A61D-399D29CD3D69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {53500B94-15DA-4B95-9407-47F1FAA629F4} - System32\Tasks\{98F0B528-505E-42A7-8C7C-3025485402A9} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {55CAB32B-1C5D-4329-A309-C286A565952C} - System32\Tasks\{A289397E-BE87-4253-BAEB-4D4BF5217A5C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {574A2071-6DCE-43C8-9693-430110F10F9B} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2011-11-08] (CyberLink Corp.)
Task: {5791845C-23E9-4745-8CF2-6B03ECFC7907} - System32\Tasks\{16BCEE64-DCBC-46C8-8F90-238FFE2DD58D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {57D60F68-13EC-49EA-8E61-CAA56B6217F5} - System32\Tasks\{B8AEA034-38D3-4069-8899-F8A844B8E5FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5C05A6A8-35F3-4333-8443-7F862A35F648} - System32\Tasks\{070CD9E0-4E19-4C44-B6FF-A87EE2390C96} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5DF49DD8-7CF4-49F6-9F96-161EA81D92D0} - System32\Tasks\{45DFC4BD-C7C1-4F84-B532-88B15A04FFEB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5F06F2BF-8A87-4DAC-8FA0-A0324156BEA8} - System32\Tasks\{493B437D-D4FC-4D11-94A6-B9CE68A51F83} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {60C30D26-294F-4F6E-B20C-C32473194C4E} - System32\Tasks\{098370C0-661D-40AF-A1BB-7B8F500584FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {628CFC9C-E793-490D-B59D-A1FA5A8FB740} - System32\Tasks\{4B859EF0-0E68-4DA8-B620-5051C4184ABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6825859F-017C-4AAE-BAB5-521AC5CAC494} - System32\Tasks\{D97A6A08-5035-4265-99DC-85CB55173FC7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {68FFB98A-6E8F-44C0-A018-67B16A40A585} - System32\Tasks\{C489461A-25A1-4B70-A539-FE04D480C24D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {69E73F52-0A73-4ABA-AD79-554CCDFA29A2} - System32\Tasks\{7CBAFB04-F825-4A4A-81D4-7A00A50C12B2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6A5D1C73-2B48-4BD4-A1E7-8058C236D8C1} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe No File
Task: {6AC1CA82-7C9D-4037-A152-041144DF9B47} - System32\Tasks\{58DE006A-AF1E-414D-8363-EC887B8F1381} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6CA65543-C233-489E-8A27-3A930D5C69F9} - System32\Tasks\{4DE65F80-13A5-499B-9C28-5AB3C296B134} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6F4C4F41-BC39-4D3B-863F-5E67BFF6C043} - System32\Tasks\{7D7B114B-8FEA-4B9D-A650-1212C2C4C36C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {71F8282C-CC8A-4BDA-94BA-6E33A9D795DB} - System32\Tasks\{6C5B3F7F-1854-4010-BD4A-E445F027D4C1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78554F41-AD30-4C5F-8551-FB0C9A941E75} - System32\Tasks\{F5D62368-58BE-46C8-A1C9-F57031F5F917} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78746FFC-FA28-406A-AF75-634BB06FC84C} - System32\Tasks\{6BD091D8-83CD-4156-B40F-C18521D35909} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {787A64C0-A527-4E0E-A19C-688E448638E4} - System32\Tasks\{3F5D0ADB-938F-4B46-90AF-879956E395D1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E4BF543-B552-439F-90D0-FEA6DA7FBAAC} - System32\Tasks\{33B2D291-63B9-40D5-AA85-5C2B79135A80} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E68B58C-063B-4CF1-AE2F-B9B841AEFDF5} - System32\Tasks\{01D99FEF-0C32-4BBB-B16E-B2C1EA30E606} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8045CAB2-5FC0-4C21-8C43-FF2B342EFBEB} - System32\Tasks\{5BB599C0-594D-46A0-8901-A29C85F7C9F7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {81009C75-4224-4A73-8541-3E67B27F1AA9} - System32\Tasks\{924C21F0-D164-486D-9559-12F76934F729} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {82DC79D7-02DA-4F29-B5EB-35722A66E218} - System32\Tasks\{F96005EF-5C81-43FB-AA97-16DD2510140F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {85EC8F51-3B31-42CD-BB61-0626D7AC81C9} - System32\Tasks\{1DEA6899-866C-42C0-BA48-A7F62CD73481} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8A3D53E1-F989-46A5-AD17-34E89FC291FB} - System32\Tasks\{FC7DB2E6-E8F8-4E80-9B44-1738D897BA42} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8CC32081-E95E-423E-A91C-701B2FEAC397} - System32\Tasks\{750E300E-E6BB-497A-A08D-72C7C59F50A2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8D781DAD-1AF4-400D-BB58-C0312F480346} - System32\Tasks\{07066D58-5BE4-46BC-A56B-4C2F6B634186} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8F47DA1E-8BA1-4301-B6D4-3B987945DD3F} - System32\Tasks\{5FA650BA-94A3-4D1C-B3A9-A2B43183BD16} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {91DC09F6-7390-49E5-BA52-E9FA7F0DC506} - System32\Tasks\{162E5266-1231-4806-8EDB-98B5D9DBBDA6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92CCB63E-F8BA-4313-B0EE-52921C7BE98E} - System32\Tasks\{C922B4EA-B3D9-4343-A4C1-034989C81F97} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92FA0992-88F0-4799-981F-669385862AC3} - System32\Tasks\{FA3D4DCC-F714-4EFB-B7D0-78D0656DC906} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {97A61783-DBB9-438D-BE1D-2093260B47E1} - System32\Tasks\{BF54C924-BE15-4763-A1DF-F310B8752F23} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {99F815AF-B0FA-477C-A333-E3E62FB5DCC4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {9DF09107-36B8-4524-85E1-523F6CD621FF} - System32\Tasks\{AB69E0D5-7737-495F-B1A9-72D6BF4E353B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {9F0E25E9-21A3-4707-BF4A-9B29639C97E6} - System32\Tasks\{1112BAE9-62A8-4CF9-8094-DFDFB83446C5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A005C9AF-E5A6-4EAE-BB05-3F4AACB214B3} - System32\Tasks\{08888828-6E28-4AC6-A91F-A61FBD44E160} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A26CB0C0-E3E4-4BFB-831B-A14B6014F197} - System32\Tasks\{CF47BA78-DB59-4E21-A1E2-74CBEB761E63} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A89E1836-27BC-4255-A8AA-C498108C0040} - System32\Tasks\{1D34C46E-BC5B-4DCA-82A1-9C34E0FAED69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A9C2AE8F-A97B-4E2C-A49B-3417A694D31F} - System32\Tasks\{218203D4-8378-4032-B560-6560763670C3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AA7D99FA-5AEB-44F8-9E97-EB3C48A304A3} - System32\Tasks\{0E5CE861-53EC-45B6-99EF-EB65E4262B37} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AAC0714F-1612-46CE-A0C2-280AF398B507} - System32\Tasks\{8941DFEF-44EE-460B-BEB6-F0553EB49ADB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AF6C4E6E-963F-452B-A036-BC64A8034679} - System32\Tasks\{A3E7DC47-10D2-481B-936C-459D7695D41D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B1757880-04EE-4FE6-94AE-76572C5BE47A} - System32\Tasks\{659FCD88-92B6-4341-8F64-2766343C4732} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B4FA1AFD-D5C5-444E-9995-B6CAA843A579} - System32\Tasks\{453185F3-88EB-407A-AAA2-0E1FF1482B9E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B59A9CDE-01CF-4DE5-80BD-DF0A71857655} - System32\Tasks\{791C72F6-D561-4A65-89A5-BA4CD9AAC567} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B5E5C4EC-7695-4631-9F7E-A284C7552576} - System32\Tasks\{98CD5596-30F2-40A3-B8DE-2F0288B28105} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BA711B9A-5D13-4F6C-9C69-1DF06977A10E} - System32\Tasks\{A18AF419-F34C-4F3F-8998-60250F41882C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BB48FF8C-8E6D-409F-87B5-C37D76DD5D87} - System32\Tasks\SpottyFiles Update => C:\Program Files (x86)\SpottyFiles\SpottyFilesUpdater.exe No File
Task: {BE42A363-7FD5-4419-88A5-E107F7B1C863} - System32\Tasks\{66C6CB7E-9106-4074-B0E5-DFE8EDB28A39} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BE8A510E-3C89-4164-A07E-BCDAB13E88C2} - System32\Tasks\{70DBCCC7-1B3C-4A5B-A48D-28C6396446B5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BF5EB366-6E53-4AB7-8A38-5AE5B6C0C891} - System32\Tasks\{41BE99BE-1315-4F2F-98CD-B6B7F4837C26} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C155F411-1E6C-4245-BAD7-C4EBCFB9C119} - System32\Tasks\{11BCC65F-16A5-42E8-84A9-D3599A86460C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C468C046-27D0-44FF-8430-A40EAC93EB05} - System32\Tasks\{204BBF9C-74CB-443C-AFEE-0BEDD8242179} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C6D2D9EC-852D-4ED6-9DB0-489A3CAFC498} - System32\Tasks\{0ED560A2-23D7-400E-841A-4FC09DCCA6ED} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA193016-E6C4-440D-B046-427617FFC9D2} - System32\Tasks\{43720F8B-2711-4EEB-BC55-D6C456ABC4AA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA73936E-7392-44ED-8E2B-E662A06761A3} - System32\Tasks\{6A40D400-7BEB-4C5D-A77B-6F94E84DEBEF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CAD0864C-FF67-4B31-A88C-29D7BC615239} - System32\Tasks\{46A241A2-3DC2-4BAC-8C98-589F60EB4623} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCAFA911-BA10-484E-A4CD-D46688FB3FB5} - System32\Tasks\{2A1125D4-45C2-4588-B32C-F215AB4F4DF5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCED0615-88D5-4254-9DF6-9F2F405416ED} - System32\Tasks\{7C063A08-FD21-45DE-BE60-72102FC5BBBD} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D141B09E-6FF9-47A5-8A57-DB3FFFAB11FD} - System32\Tasks\{A3E73D14-AD40-4C50-9436-5A2110721DF8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D1830F60-8FB6-4440-AF70-3F127D6E7835} - System32\Tasks\{5FB3A7CA-47E0-46E3-9691-96960DBDAC33} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D47E5AED-F7A8-494E-9A3E-DF6E0251BA8C} - System32\Tasks\{C7C7B320-85AB-4DD2-8CFD-5AA5C0F1A3F0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DC456B82-0EE7-4913-A142-70571102E821} - System32\Tasks\{02653CAE-1DF0-458D-954C-290074CA2756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE364A4F-C786-4C27-8781-D2CE7897F8A3} - System32\Tasks\{407F5116-C48F-4BEF-93CB-9B84EC8140CC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE55DE74-AD25-4903-A805-21B89711CD95} - System32\Tasks\{2242EB69-A689-4618-9099-10F0D4E3B82D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DF826B9A-8373-4C8E-A07F-2FAB3185E75D} - System32\Tasks\{6FC51F55-988F-4331-A1B0-65A96EB62714} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E4833643-F149-457D-AFCD-BA48415A1206} - System32\Tasks\{144107FA-5F7C-4BB0-9F95-B7ECA0B4DEE8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E5EF0172-FEE5-4F97-B88B-78AC1E18E87D} - System32\Tasks\{61D0D500-1D02-4996-A37E-DBA7F63BE6E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E9A69FDD-7BE3-468C-AE96-DB50607E96FE} - System32\Tasks\{BDA707CE-834C-4A94-86F9-F9749AE6B781} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EBF0F9E0-9821-4F14-8AA5-38328D6E49BE} - System32\Tasks\{117BBBE4-1DBB-43D8-BA67-664D257D7F9C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EE82A3CE-7120-4B5A-A2E5-F1D232C555A5} - System32\Tasks\{EB4A9BC1-47FE-499A-9C73-089DD52B2643} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EF2C589A-B0FA-4C22-A575-DCC607F77D88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {F0EA9897-CE27-4ED3-AA53-FB3CD04424CE} - System32\Tasks\{2169BF42-9ECB-43CF-BE05-FE4B064FCE5E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F1012CC3-D7A6-4CF3-B5F9-F8731FFBF808} - System32\Tasks\{3EDA1107-F837-401F-9A40-D46329686257} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2133E5A-1F74-4F10-9993-D7D8FD1E275C} - System32\Tasks\{B26156AC-42BA-4CD6-9226-58F972A0D2EB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2C8E8F1-2095-4F71-9865-B513AE503958} - System32\Tasks\{2B418A9B-6435-425E-8D19-CDCA97825756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6876887-975A-4258-BB79-53ED210D854A} - System32\Tasks\{C7ED4D7B-6D5C-46D6-B453-FB25EBB8F5EA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6E394A1-4251-439A-AAA9-C04FDF0B9FC9} - System32\Tasks\{E4E3C51A-D5A5-4BCD-8F11-E2F90DE9C18A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F8AD349C-0D68-4B56-8D4F-0EAEE68640CB} - System32\Tasks\{F683AFB7-3C9B-4CDD-B960-871994415F6D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FAC9C308-C8DF-4F1D-AFEC-A67A9882753A} - System32\Tasks\{405A6984-3687-41A1-AE20-DF3030ADF9E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FCF3F52C-A0F4-4209-9010-10B7D5E57387} - System32\Tasks\{55937D5C-6ED0-43E9-B4A6-02B26F9CBC15} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FE5BE871-9E40-4BD5-A611-C48789CB0FEB} - System32\Tasks\{2DD86116-6A4F-4CFF-8F37-543E331203DF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/12/2013 10:15:53 AM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (08/12/2013 01:18:08 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 22.0.0.4917, Zeitstempel: 0x51c06b1b
Name des fehlerhaften Moduls: xul.dll, Version: 22.0.0.4917, Zeitstempel: 0x51c06a5b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00173668
ID des fehlerhaften Prozesses: 0x1a68
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (08/11/2013 11:28:56 AM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (08/10/2013 00:06:15 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (08/10/2013 00:04:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 22.0.0.4917, Zeitstempel: 0x51c06b1b
Name des fehlerhaften Moduls: xul.dll, Version: 22.0.0.4917, Zeitstempel: 0x51c06a5b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00173668
ID des fehlerhaften Prozesses: 0x1328
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (08/09/2013 10:22:07 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (08/09/2013 06:33:48 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (08/08/2013 08:31:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: YouCam.exe, Version: 5.0.1108.17955, Zeitstempel: 0x4eb8a7a9
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x14fc
Startzeit der fehlerhaften Anwendung: 0xYouCam.exe0
Pfad der fehlerhaften Anwendung: YouCam.exe1
Pfad des fehlerhaften Moduls: YouCam.exe2
Berichtskennung: YouCam.exe3
Error: (08/08/2013 08:30:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: KiesAirMessage.exe, Version: 1.0.0.0, Zeitstempel: 0x50725e24
Name des fehlerhaften Moduls: KiesAirMessageCtl.dll, Version: 1.0.0.0, Zeitstempel: 0x50725e22
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000657f8
ID des fehlerhaften Prozesses: 0xc60
Startzeit der fehlerhaften Anwendung: 0xKiesAirMessage.exe0
Pfad der fehlerhaften Anwendung: KiesAirMessage.exe1
Pfad des fehlerhaften Moduls: KiesAirMessage.exe2
Berichtskennung: KiesAirMessage.exe3
Error: (08/07/2013 08:35:49 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
System errors:
=============
Error: (08/12/2013 10:15:45 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/12/2013 10:15:45 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (08/11/2013 11:28:01 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/11/2013 11:28:01 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (08/10/2013 00:05:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/10/2013 00:05:44 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (08/09/2013 10:21:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/09/2013 10:21:49 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (08/09/2013 06:33:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/09/2013 06:33:31 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 70%
Total physical RAM: 4007.05 MB
Available physical RAM: 1173.07 MB
Total Pagefile: 8012.29 MB
Available Pagefile: 5029.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:404.66 GB) (Free:227.71 GB) NTFS (Disk=0 Partition=2)
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:29.93 GB) NTFS (Disk=0 Partition=3)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=405 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
Gmer.txt Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-12 13:50:44
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST950042 rev.0002 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Nelli\AppData\Local\Temp\pwdoqpod.sys
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- Threads - GMER 2.1 ----
Thread C:\Windows\system32\WLANExt.exe [1316:128] 0000000180125430
Thread C:\Windows\system32\WLANExt.exe [1316:668] 00000001800c47f0
Thread C:\Windows\system32\WLANExt.exe [1316:1140] 0000000180125430
Thread C:\Windows\system32\WLANExt.exe [1316:1632] 000007fefa842f9c
Thread C:\Windows\system32\WLANExt.exe [1316:2140] 0000000001148bf8
Thread C:\Windows\system32\WLANExt.exe [1316:2144] 0000000001148c14
Thread C:\Windows\system32\WLANExt.exe [1316:2148] 0000000001148bdc
Thread C:\Windows\system32\WLANExt.exe [1316:2152] 000007fefa842f9c
Thread C:\Windows\System32\rundll32.exe [3872:1132] 0000000180095630
---- EOF - GMER 2.1 ----
|
|
12.08.2013, 13:34
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Hallo und
__________________ Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
12.08.2013, 15:29
| #3 |
| | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Hallo Cosinus,
__________________vielen Dank für die schnelle Hilfe! Anbei die weiteren Logfiles, ich habe alles Schritt für Schritt befolgt... AdwCleaner[S1].txt AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.306 - Datei am 12/08/2013 um 15:27:36 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Nelli - NELLI-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Nelli\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
Gestoppt & Gelöscht : WajamUpdater
Code:
ATTFilter # AdwCleaner v2.306 - Datei am 12/08/2013 um 15:54:23 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Nelli - NELLI-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Nelli\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
Code:
ATTFilter # AdwCleaner v2.306 - Datei am 12/08/2013 um 15:54:36 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Nelli - NELLI-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Nelli\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Datei Gelöscht : C:\user.js
Datei Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
Datei Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\extensions\hdvc@hdvc.com.xpi
Datei Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\delta.xml
Datei Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\SweetIm.xml
Gelöscht mit Neustart : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\BabylonToolbar
Ordner Gelöscht : C:\Program Files (x86)\HDvidCodec.com
Ordner Gelöscht : C:\Program Files (x86)\Wajam
Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Temp\avg@toolbar
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Temp\BabylonToolbar
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Temp\Iminent
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Wajam
Ordner Gelöscht : C:\Users\Nelli\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Nelli\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\jetpack
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\pdfforge
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Wajam
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\Software\AVG Secure Search
Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\b
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\S
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\Software\Wajam
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\522d6deb33aed48
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{acaa314b-eeba-48e4-ad47-84e31c44796c}]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16635
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6 --> hxxp://www.google.com
-\\ Mozilla Firefox v22.0 (de)
Datei : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\prefs.js
C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\user.js ... Gelöscht !
Gelöscht : user_pref("browser.newtabpage.pinned", "[null,{\"url\":\"hxxp://www.facebook.com/nela.sengis\",\"tit[...]
Gelöscht : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
Gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=109989");
Gelöscht : user_pref("extensions.BabylonToolbar_i.hardId", "948776190000000000004c8093361cd6");
Gelöscht : user_pref("extensions.BabylonToolbar_i.id", "948776190000000000004c8093361cd6");
Gelöscht : user_pref("extensions.BabylonToolbar_i.instlDay", "15419");
Gelöscht : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Gelöscht : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Gelöscht : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Gelöscht : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.173:04:39");
Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Gelöscht : user_pref("extensions.delta.admin", false);
Gelöscht : user_pref("extensions.delta.aflt", "babsst");
Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Gelöscht : user_pref("extensions.delta.dfltLng", "en");
Gelöscht : user_pref("extensions.delta.excTlbr", false);
Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Gelöscht : user_pref("extensions.delta.id", "948776190000000000004c8093361cd6");
Gelöscht : user_pref("extensions.delta.instlDay", "15825");
Gelöscht : user_pref("extensions.delta.instlRef", "sst");
Gelöscht : user_pref("extensions.delta.newTab", false);
Gelöscht : user_pref("extensions.delta.prdct", "delta");
Gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Gelöscht : user_pref("extensions.delta.rvrt", "false");
Gelöscht : user_pref("extensions.delta.smplGrp", "none");
Gelöscht : user_pref("extensions.delta.tlbrId", "base");
Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Gelöscht : user_pref("extensions.delta.vrsn", "1.8.16.16");
Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.16.1620:57:23");
Gelöscht : user_pref("extensions.delta.vrsni", "1.8.16.16");
-\\ Google Chrome v28.0.1500.95
Datei : C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Preferences
Gelöscht [l.1] : icon_url ={"backup":{"session":{"urls_to_restore_on_startup":["hxxp://www2.delta-search.com/?affID=119776&babs[...]
*************************
AdwCleaner[S1].txt - [369 octets] - [12/08/2013 15:27:36]
AdwCleaner[S2].txt - [333 octets] - [12/08/2013 15:54:23]
AdwCleaner[S3].txt - [32992 octets] - [12/08/2013 15:54:36]
########## EOF - C:\AdwCleaner[S3].txt - [33053 octets] ##########
JRT.txt Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.4.4 (08.12.2013:1)
OS: Windows 7 Home Premium x64
Ran by Nelli on 12.08.2013 at 16:06:25,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
~~~ Files
Successfully deleted: [File] "C:\Windows\wininit.ini"
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{0FECD12F-8A7A-45B3-8028-BE0E60A7815D}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{7721423D-A5FA-4BE0-B189-9925ED8681AA}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{7C4DBEC7-94B4-48D2-BA97-521092BEF214}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{809CD42A-6276-450F-A3E2-57FAB9B84F09}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{99305D57-634E-4E51-9FD4-207931175E20}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{AE39C2E1-9FAC-42CA-B9A6-74BC5E868F07}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{BBB17F9E-172E-43C1-B12D-C004B81A49C4}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{F06FEC9D-F23E-45CD-A54D-9DAE7A183731}
~~~ FireFox
Successfully deleted: [File] C:\Users\Nelli\AppData\Roaming\mozilla\firefox\profiles\yeqxaunu.default\invalidprefs.js
Emptied folder: C:\Users\Nelli\AppData\Roaming\mozilla\firefox\profiles\yeqxaunu.default\minidumps [252 files]
~~~ Chrome
Successfully deleted: [Folder] C:\Users\Nelli\appdata\local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Successfully deleted: [Folder] C:\Users\Nelli\appdata\local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.08.2013 at 16:13:56,15
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-08-2013 02
Ran by Nelli (administrator) on 12-08-2013 16:19:18
Running from C:\Users\Nelli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
( ) C:\Windows\system32\lxczcoms.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
( ) C:\Windows\system32\lxeccoms.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Dropbox, Inc.) C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10365952 2011-05-19] (Intel Corporation)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.)
HKLM\...\Run: [lxecmon.exe] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] ()
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
MountPoints2: {0a39669c-ba41-11e1-a621-4c8093361cd9} - F:\iStudio.exe
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-31] (CyberLink Corp.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [684024 2012-10-17] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [x]
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: youtubeunblocker - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{7F23E3F4-F72E-4f4f-8761-854C8942708F}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
Chrome:
=======
CHR RestoreOnStartup: "hxxp://www.google.com/favicon.ico"
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0
CHR HKLM-x32\...\Chrome\Extension: [ibnmbpihhamedhophbnjjpidokcknoid] - C:\Program Files (x86)\AP Suggestor\APSuggestor.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] ()
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [1616048 2013-07-29] (AVG Secure Search)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] ()
==================== Drivers (Whitelisted) ====================
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-12 16:06 - 2013-08-12 16:06 - 00000000 ____D C:\Windows\ERUNT
2013-08-12 16:05 - 2013-08-12 16:05 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Nelli\Desktop\JRT.exe
2013-08-12 16:03 - 2013-08-12 16:04 - 00000000 ____D C:\Users\Nelli\Desktop\bannersdontwork_problem
2013-08-12 15:54 - 2013-08-12 15:55 - 00032985 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:54 - 2013-08-12 15:55 - 00000121 _____ C:\Windows\DeleteOnReboot.bat
2013-08-12 15:54 - 2013-08-12 15:54 - 00000333 _____ C:\AdwCleaner[S2].txt
2013-08-12 15:27 - 2013-08-12 15:27 - 00000369 _____ C:\AdwCleaner[S1].txt
2013-08-12 13:41 - 2013-08-12 13:41 - 00377856 _____ C:\Users\Nelli\Desktop\gmer_2.1.19163.exe
2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe
==================== One Month Modified Files and Folders =======
2013-08-12 16:13 - 2013-08-12 16:13 - 00002328 _____ C:\Users\Nelli\Desktop\JRT.txt
2013-08-12 16:06 - 2013-08-12 16:06 - 00000000 ____D C:\Windows\ERUNT
2013-08-12 16:06 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-12 16:06 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-12 16:05 - 2013-08-12 16:05 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Nelli\Desktop\JRT.exe
2013-08-12 16:04 - 2013-08-12 16:03 - 00000000 ____D C:\Users\Nelli\Desktop\bannersdontwork_problem
2013-08-12 16:04 - 2011-11-04 03:51 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-08-12 16:04 - 2011-11-04 03:51 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-08-12 16:04 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-12 16:03 - 2012-03-20 01:51 - 01955992 _____ C:\Windows\WindowsUpdate.log
2013-08-12 16:00 - 2012-10-09 23:21 - 00000000 ___RD C:\Users\Nelli\Dropbox
2013-08-12 16:00 - 2012-10-09 23:13 - 00000000 ____D C:\Users\Nelli\AppData\Roaming\Dropbox
2013-08-12 16:00 - 2012-03-20 03:34 - 00000000 ____D C:\Users\Nelli\Documents\Youcam
2013-08-12 15:59 - 2013-05-04 18:48 - 00012970 _____ C:\ProgramData\lxecscan.log
2013-08-12 15:58 - 2013-06-07 22:00 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-08-12 15:58 - 2012-03-20 01:53 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-12 15:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-12 15:58 - 2009-07-14 06:51 - 00083713 _____ C:\Windows\setupact.log
2013-08-12 15:55 - 2013-08-12 15:54 - 00032985 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:55 - 2013-08-12 15:54 - 00000121 _____ C:\Windows\DeleteOnReboot.bat
2013-08-12 15:54 - 2013-08-12 15:54 - 00000333 _____ C:\AdwCleaner[S2].txt
2013-08-12 15:49 - 2012-03-20 01:53 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-12 15:38 - 2012-04-03 22:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-12 15:27 - 2013-08-12 15:27 - 00000369 _____ C:\AdwCleaner[S1].txt
2013-08-12 13:41 - 2013-08-12 13:41 - 00377856 _____ C:\Users\Nelli\Desktop\gmer_2.1.19163.exe
2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:37 - 2012-03-20 00:59 - 00000000 ____D C:\Users\Nelli
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe
2013-08-11 11:29 - 2012-07-07 14:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-08 22:45 - 2013-01-28 20:39 - 00000000 ____D C:\Users\Nelli\Documents\Finanzen
2013-08-04 16:51 - 2012-03-20 03:31 - 00000000 ____D C:\Users\Nelli\Documents\Reisen
2013-08-04 15:19 - 2013-01-06 13:24 - 00000000 ____D C:\Program Files (x86)\TVPlayerClassic
2013-08-04 15:14 - 2012-03-20 03:30 - 00000000 ____D C:\Users\Nelli\Documents\Groupon
2013-07-29 22:28 - 2013-06-28 18:38 - 00003717 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-07-29 22:26 - 2012-09-14 13:36 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-07-21 18:48 - 2012-03-20 01:10 - 00000000 ____D C:\Users\Nelli\AppData\Local\Adobe
2013-07-21 18:46 - 2012-04-03 22:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-21 18:45 - 2012-04-03 22:44 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-21 18:45 - 2011-11-07 18:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-15 23:44 - 2012-03-20 01:53 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-15 23:44 - 2012-03-20 01:53 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-15 18:37 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-12 10:48
==================== End Of Log ============================
--- --- --- --- --- --- Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2013 02
Ran by Nelli at 2013-08-12 16:19:39
Running from C:\Users\Nelli\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958) (x32)
7-PDF Split & Merge Version 2.0.2 (Build 234) (x32 Version: 7-PDF Split & Merge - Version 2.0.2 (Build 234))
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621)
Adobe AIR (x32 Version: 3.7.0.1860)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096)
AMI VR-pulse OS Switcher (Version: 1.1)
Ashampoo Burning Studio (x32 Version: 10.0.10)
Ashampoo Photo Commander (x32 Version: 9.2.0)
Ashampoo Photo Optimizer (x32 Version: 4.0.0)
Ashampoo Snap (x32 Version: 4.3.0)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.35)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229)
CyberLink MediaShow (x32 Version: 5.1.2414)
CyberLink PhotoNow (x32 Version: 1.1.7717)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDirector (Version: 9.0.0.3419a)
CyberLink PowerDirector (x32 Version: 9.0.0.3419a)
CyberLink PowerDVD 10 (x32 Version: 10.0.3510.02)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerProducer (x32 Version: 5.0.2.3503)
CyberLink WaveEditor (x32 Version: 1.0.1.3320)
CyberLink YouCam 5 (x32 Version: 5.0.1108)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.4)
Dropbox (HKCU Version: 2.0.22)
exant HD Audio (Version: 8.54.14.50)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free Studio version 2013 (x32 Version: 6.1.1.430)
Free WMA to MP3 Converter 1.16 (x32)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 28.0.1500.95)
Google Drive (x32 Version: 1.11.4865.2530)
Google Update Helper (x32 Version: 1.3.21.153)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2538)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.2.0.0587)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.1000)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002)
Intel(R) WiDi (x32 Version: 2.2.14.0)
Intel(R) Wireless Display
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 29 (64-bit) (Version: 6.0.290)
Java(TM) 6 Update 29 (x32 Version: 6.0.290)
JDownloader 0.9 (x32 Version: 0.9)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
Lexmark 1200 Series
Lexmark Pro800-Pro900 Series
Lexmark Symbolleiste (x32 Version: 4.3.37.0)
Lexmark Tools for Office (x32 Version: 1.29.0.0)
MediaConverter 1.3.1 (x32 Version: 1.3.1)
Medion Home Cinema (x32 Version: 8.0.3216)
Memeo Instant Backup (x32 Version: 4.60.0.7943)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mathematics (64-Bit) (Version: 4.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
myMugle (x32 Version: 3.0.0.0)
NVIDIA Control Panel 285.64 (Version: 285.64)
NVIDIA Graphics Driver 285.64 (Version: 285.64)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA Optimus 1.5.20 (Version: 1.5.20)
NVIDIA PhysX (x32 Version: 9.10.0513)
NVIDIA Update Components (Version: 1.5.20)
PCSUITE SHREDDER (x32)
PDF Architect (x32 Version: 1.0.41.8362)
PDFCreator (x32 Version: 1.7.0)
PHotkey (x32 Version: 1.00.0045)
PhotoResampling 9.2 (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0)
Samsung Kies (x32 Version: 2.3.3.12085_7)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)
Serif PhotoPlus 11 (x32 Version: 11.1.1.019)
Skype™ 6.1 (x32 Version: 6.1.129)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Synaptics Pointing Device Driver (Version: 15.3.27.1)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.1 (x32 Version: 2.0.1)
watchmi (x32 Version: 2.7.0)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
==================== Restore Points =========================
11-07-2013 09:14:34 Geplanter Prüfpunkt
12-07-2013 00:54:33 Windows Update
19-07-2013 18:34:57 Geplanter Prüfpunkt
03-08-2013 16:29:07 Geplanter Prüfpunkt
10-08-2013 20:08:39 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {02768EAD-0A5B-4629-84CD-71D383ACCE70} - System32\Tasks\{F82055D1-A3BD-4ACC-8790-4F0F84C7186B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {06B56F0D-905A-472F-8CA7-0E10D0D8CB0B} - System32\Tasks\{B413301B-7E61-491F-AB70-0F06C48FF1F3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {09689C71-147A-4BAB-862C-ED71277E8876} - System32\Tasks\{78C7BB73-D8DB-4052-8B48-91992D96FB8D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0A5A6A4B-C212-472A-A278-FD4FDFDEA012} - System32\Tasks\{EC07800D-F02E-4331-A236-18C72B9B6C7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0AD4613E-1EEC-48C4-831A-4EC3C707A665} - System32\Tasks\{46910F05-7308-40E6-A19C-8A16284E9387} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0BF15BDD-1C9F-4AB6-82C6-12870DA2E5A2} - System32\Tasks\{B4687708-B3B0-49DC-B098-CA6764C1B064} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {18576D76-F893-42A2-B4A0-DB3DF7C2390D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {1A810642-94FF-46AB-B0AA-EF080852C0C4} - System32\Tasks\{9D4F33AC-43A7-4E5D-B3F1-FA2BC8B05D6F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1C0B7614-4256-4C5C-AC22-1BC640FD6143} - System32\Tasks\{7FD67CCD-D320-40C9-B20D-9DAD504E92DC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1F3CC8FC-2C29-4C4C-AD85-79ECEB3207E3} - System32\Tasks\{EBC0107A-27E6-4456-9980-3883F513495F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {21AA544D-2519-4549-A2B7-C5D62D4376FD} - System32\Tasks\{945D7430-8F26-4F0B-8DB4-54A54B4F6616} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2205DA87-188E-4C43-AFC3-3FFE83E24853} - System32\Tasks\{61908B0F-E2EE-4CCC-A53F-0F6FEB52B308} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {23B03E71-7D6C-4488-86A6-ACC296B6F899} - System32\Tasks\{C3C31BB9-89AC-4AB3-9D9E-AF1DBC3257DA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {24C95FA5-ABFD-430C-8076-BABCC3AA830B} - System32\Tasks\{B9799D49-C6B5-4081-978A-394DB9DAB28E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {272F7FA2-9B20-4B92-B2ED-158BC9F6AC9F} - System32\Tasks\{C75FA60B-CD2F-4CC1-91E0-C15C02BF7A19} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {27DC4101-35F8-4B53-80A2-059E80F94143} - System32\Tasks\{006F757E-36E5-419F-90B0-45EC7EED7D0F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {28A0A582-3928-4BBC-A953-348EBA69D8BD} - System32\Tasks\{9092C394-C4DB-44A3-92E4-B579967AC05F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A8B80A2-90CB-47D4-B156-1146475E9D7B} - System32\Tasks\{91DB47EE-733D-48A8-9C8B-B401D9BB4EE1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A9D1B21-C10E-43A3-849C-F72C0533BD08} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1675067217-2774866892-2821489468-1002 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {2CC88C72-E06E-4361-B748-37BE31CB527E} - System32\Tasks\{AA0CD588-455E-4E6A-8C3D-E5098B4BAABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {311EA50B-C17A-4385-BE5C-70511E633FB3} - System32\Tasks\{D17A4C39-5BEE-4D2C-9AD7-08607A220ED7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {312DDE74-BCA1-4E77-9553-DA9EA37E0642} - System32\Tasks\{D3B020AB-8F78-44B9-9D90-B74478DD7603} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {32EE8272-E801-4C64-8681-6C14D1208219} - System32\Tasks\{C42F1D88-AD03-4239-942B-617F4B8A86F6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3A9422D1-EA6A-435A-81B8-CC8547E82516} - System32\Tasks\{7925F03B-B182-4652-893E-7EFC67C66D0C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3ACDCF49-9DDD-4647-A0F0-B4E3163321B5} - System32\Tasks\{035A4774-F011-4751-9150-B07A48A9B493} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3E712F2E-A704-4276-A4DB-9658D18C2907} - System32\Tasks\{3E4EA85A-3882-44A8-A33E-9A147CCAB5EF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3EFABCFE-E1B1-4515-AD36-ACE1A6FB4620} - System32\Tasks\{B11360C8-0018-4E8E-8CA2-C658FCFFA079} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {407075C5-0EA2-45FB-8590-A903FE8A7025} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {40D9E60B-09B8-4044-8984-162DBADFEF91} - System32\Tasks\{AB724718-AF72-42B7-996F-D1B9C5F0BDF6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {42577CA5-7636-4669-81DF-B321CD5EA347} - System32\Tasks\{6BD0E276-38C8-477B-92AE-F6AD7EE66FD6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {438B387E-E1B9-4D52-B8EA-D8C2F9722A45} - System32\Tasks\{494EF7DF-7A0C-4F64-B0E3-E2B39D52FE8A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {43B3793E-591F-41AA-BC94-67B06021721F} - System32\Tasks\{34199AA6-F406-4B72-83CD-63D3FAA8968C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4459DEC7-B2FC-4F6A-8F1E-B350B32E4865} - System32\Tasks\{88A1D263-182D-45F8-BA93-B7B354D7EDC6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44CE8637-1C88-4F4D-8872-E923315A3528} - System32\Tasks\{C93BA26F-6F1D-491E-90CB-4402A7E49CDF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44FCEA04-B958-47E7-8F26-DBC14186FE07} - System32\Tasks\{C88C6674-2064-48E9-A539-4D0E7768B155} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4BB2E9BA-B294-4340-BE67-3E5B035ABF58} - System32\Tasks\{049AC1F4-79AF-4B48-8C67-30FDFAF46A7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4C10EF4B-53B0-4BD9-967F-E227B758267D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {4CB3BF8A-C7A9-48F2-A0C6-EF8F03AA3A97} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-21] (Adobe Systems Incorporated)
Task: {4E05AC37-AD3B-4DCA-9938-064634CCDB5E} - System32\Tasks\{F7A5DBCD-9963-4859-851A-F87B9E301575} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {50946178-A983-4339-821E-4A42C17F03BC} - System32\Tasks\{05A49616-96EF-4A5A-80E8-C5A577F77D62} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {51562EEF-1402-4F44-8615-BE8A2762EC3F} - System32\Tasks\{D9942290-9314-42DA-A61D-399D29CD3D69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {53500B94-15DA-4B95-9407-47F1FAA629F4} - System32\Tasks\{98F0B528-505E-42A7-8C7C-3025485402A9} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {55CAB32B-1C5D-4329-A309-C286A565952C} - System32\Tasks\{A289397E-BE87-4253-BAEB-4D4BF5217A5C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {574A2071-6DCE-43C8-9693-430110F10F9B} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2011-11-08] (CyberLink Corp.)
Task: {5791845C-23E9-4745-8CF2-6B03ECFC7907} - System32\Tasks\{16BCEE64-DCBC-46C8-8F90-238FFE2DD58D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {57D60F68-13EC-49EA-8E61-CAA56B6217F5} - System32\Tasks\{B8AEA034-38D3-4069-8899-F8A844B8E5FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5C05A6A8-35F3-4333-8443-7F862A35F648} - System32\Tasks\{070CD9E0-4E19-4C44-B6FF-A87EE2390C96} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5DF49DD8-7CF4-49F6-9F96-161EA81D92D0} - System32\Tasks\{45DFC4BD-C7C1-4F84-B532-88B15A04FFEB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5F06F2BF-8A87-4DAC-8FA0-A0324156BEA8} - System32\Tasks\{493B437D-D4FC-4D11-94A6-B9CE68A51F83} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {60C30D26-294F-4F6E-B20C-C32473194C4E} - System32\Tasks\{098370C0-661D-40AF-A1BB-7B8F500584FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {628CFC9C-E793-490D-B59D-A1FA5A8FB740} - System32\Tasks\{4B859EF0-0E68-4DA8-B620-5051C4184ABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6825859F-017C-4AAE-BAB5-521AC5CAC494} - System32\Tasks\{D97A6A08-5035-4265-99DC-85CB55173FC7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {68FFB98A-6E8F-44C0-A018-67B16A40A585} - System32\Tasks\{C489461A-25A1-4B70-A539-FE04D480C24D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {69E73F52-0A73-4ABA-AD79-554CCDFA29A2} - System32\Tasks\{7CBAFB04-F825-4A4A-81D4-7A00A50C12B2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6A5D1C73-2B48-4BD4-A1E7-8058C236D8C1} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe No File
Task: {6AC1CA82-7C9D-4037-A152-041144DF9B47} - System32\Tasks\{58DE006A-AF1E-414D-8363-EC887B8F1381} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6CA65543-C233-489E-8A27-3A930D5C69F9} - System32\Tasks\{4DE65F80-13A5-499B-9C28-5AB3C296B134} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6F4C4F41-BC39-4D3B-863F-5E67BFF6C043} - System32\Tasks\{7D7B114B-8FEA-4B9D-A650-1212C2C4C36C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {71F8282C-CC8A-4BDA-94BA-6E33A9D795DB} - System32\Tasks\{6C5B3F7F-1854-4010-BD4A-E445F027D4C1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78554F41-AD30-4C5F-8551-FB0C9A941E75} - System32\Tasks\{F5D62368-58BE-46C8-A1C9-F57031F5F917} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78746FFC-FA28-406A-AF75-634BB06FC84C} - System32\Tasks\{6BD091D8-83CD-4156-B40F-C18521D35909} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {787A64C0-A527-4E0E-A19C-688E448638E4} - System32\Tasks\{3F5D0ADB-938F-4B46-90AF-879956E395D1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E4BF543-B552-439F-90D0-FEA6DA7FBAAC} - System32\Tasks\{33B2D291-63B9-40D5-AA85-5C2B79135A80} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E68B58C-063B-4CF1-AE2F-B9B841AEFDF5} - System32\Tasks\{01D99FEF-0C32-4BBB-B16E-B2C1EA30E606} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8045CAB2-5FC0-4C21-8C43-FF2B342EFBEB} - System32\Tasks\{5BB599C0-594D-46A0-8901-A29C85F7C9F7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {81009C75-4224-4A73-8541-3E67B27F1AA9} - System32\Tasks\{924C21F0-D164-486D-9559-12F76934F729} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {82DC79D7-02DA-4F29-B5EB-35722A66E218} - System32\Tasks\{F96005EF-5C81-43FB-AA97-16DD2510140F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {85EC8F51-3B31-42CD-BB61-0626D7AC81C9} - System32\Tasks\{1DEA6899-866C-42C0-BA48-A7F62CD73481} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8A3D53E1-F989-46A5-AD17-34E89FC291FB} - System32\Tasks\{FC7DB2E6-E8F8-4E80-9B44-1738D897BA42} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8CC32081-E95E-423E-A91C-701B2FEAC397} - System32\Tasks\{750E300E-E6BB-497A-A08D-72C7C59F50A2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8D781DAD-1AF4-400D-BB58-C0312F480346} - System32\Tasks\{07066D58-5BE4-46BC-A56B-4C2F6B634186} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8F47DA1E-8BA1-4301-B6D4-3B987945DD3F} - System32\Tasks\{5FA650BA-94A3-4D1C-B3A9-A2B43183BD16} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {91DC09F6-7390-49E5-BA52-E9FA7F0DC506} - System32\Tasks\{162E5266-1231-4806-8EDB-98B5D9DBBDA6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92CCB63E-F8BA-4313-B0EE-52921C7BE98E} - System32\Tasks\{C922B4EA-B3D9-4343-A4C1-034989C81F97} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92FA0992-88F0-4799-981F-669385862AC3} - System32\Tasks\{FA3D4DCC-F714-4EFB-B7D0-78D0656DC906} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {97A61783-DBB9-438D-BE1D-2093260B47E1} - System32\Tasks\{BF54C924-BE15-4763-A1DF-F310B8752F23} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {99F815AF-B0FA-477C-A333-E3E62FB5DCC4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {9DF09107-36B8-4524-85E1-523F6CD621FF} - System32\Tasks\{AB69E0D5-7737-495F-B1A9-72D6BF4E353B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {9F0E25E9-21A3-4707-BF4A-9B29639C97E6} - System32\Tasks\{1112BAE9-62A8-4CF9-8094-DFDFB83446C5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A005C9AF-E5A6-4EAE-BB05-3F4AACB214B3} - System32\Tasks\{08888828-6E28-4AC6-A91F-A61FBD44E160} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A26CB0C0-E3E4-4BFB-831B-A14B6014F197} - System32\Tasks\{CF47BA78-DB59-4E21-A1E2-74CBEB761E63} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A89E1836-27BC-4255-A8AA-C498108C0040} - System32\Tasks\{1D34C46E-BC5B-4DCA-82A1-9C34E0FAED69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A9C2AE8F-A97B-4E2C-A49B-3417A694D31F} - System32\Tasks\{218203D4-8378-4032-B560-6560763670C3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AA7D99FA-5AEB-44F8-9E97-EB3C48A304A3} - System32\Tasks\{0E5CE861-53EC-45B6-99EF-EB65E4262B37} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AAC0714F-1612-46CE-A0C2-280AF398B507} - System32\Tasks\{8941DFEF-44EE-460B-BEB6-F0553EB49ADB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AF6C4E6E-963F-452B-A036-BC64A8034679} - System32\Tasks\{A3E7DC47-10D2-481B-936C-459D7695D41D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B1757880-04EE-4FE6-94AE-76572C5BE47A} - System32\Tasks\{659FCD88-92B6-4341-8F64-2766343C4732} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B4FA1AFD-D5C5-444E-9995-B6CAA843A579} - System32\Tasks\{453185F3-88EB-407A-AAA2-0E1FF1482B9E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B59A9CDE-01CF-4DE5-80BD-DF0A71857655} - System32\Tasks\{791C72F6-D561-4A65-89A5-BA4CD9AAC567} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B5E5C4EC-7695-4631-9F7E-A284C7552576} - System32\Tasks\{98CD5596-30F2-40A3-B8DE-2F0288B28105} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BA711B9A-5D13-4F6C-9C69-1DF06977A10E} - System32\Tasks\{A18AF419-F34C-4F3F-8998-60250F41882C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BB48FF8C-8E6D-409F-87B5-C37D76DD5D87} - System32\Tasks\SpottyFiles Update => C:\Program Files (x86)\SpottyFiles\SpottyFilesUpdater.exe No File
Task: {BE42A363-7FD5-4419-88A5-E107F7B1C863} - System32\Tasks\{66C6CB7E-9106-4074-B0E5-DFE8EDB28A39} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BE8A510E-3C89-4164-A07E-BCDAB13E88C2} - System32\Tasks\{70DBCCC7-1B3C-4A5B-A48D-28C6396446B5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BF5EB366-6E53-4AB7-8A38-5AE5B6C0C891} - System32\Tasks\{41BE99BE-1315-4F2F-98CD-B6B7F4837C26} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C155F411-1E6C-4245-BAD7-C4EBCFB9C119} - System32\Tasks\{11BCC65F-16A5-42E8-84A9-D3599A86460C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C468C046-27D0-44FF-8430-A40EAC93EB05} - System32\Tasks\{204BBF9C-74CB-443C-AFEE-0BEDD8242179} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C6D2D9EC-852D-4ED6-9DB0-489A3CAFC498} - System32\Tasks\{0ED560A2-23D7-400E-841A-4FC09DCCA6ED} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA193016-E6C4-440D-B046-427617FFC9D2} - System32\Tasks\{43720F8B-2711-4EEB-BC55-D6C456ABC4AA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA73936E-7392-44ED-8E2B-E662A06761A3} - System32\Tasks\{6A40D400-7BEB-4C5D-A77B-6F94E84DEBEF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CAD0864C-FF67-4B31-A88C-29D7BC615239} - System32\Tasks\{46A241A2-3DC2-4BAC-8C98-589F60EB4623} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCAFA911-BA10-484E-A4CD-D46688FB3FB5} - System32\Tasks\{2A1125D4-45C2-4588-B32C-F215AB4F4DF5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCED0615-88D5-4254-9DF6-9F2F405416ED} - System32\Tasks\{7C063A08-FD21-45DE-BE60-72102FC5BBBD} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D141B09E-6FF9-47A5-8A57-DB3FFFAB11FD} - System32\Tasks\{A3E73D14-AD40-4C50-9436-5A2110721DF8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D1830F60-8FB6-4440-AF70-3F127D6E7835} - System32\Tasks\{5FB3A7CA-47E0-46E3-9691-96960DBDAC33} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D47E5AED-F7A8-494E-9A3E-DF6E0251BA8C} - System32\Tasks\{C7C7B320-85AB-4DD2-8CFD-5AA5C0F1A3F0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DC456B82-0EE7-4913-A142-70571102E821} - System32\Tasks\{02653CAE-1DF0-458D-954C-290074CA2756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE364A4F-C786-4C27-8781-D2CE7897F8A3} - System32\Tasks\{407F5116-C48F-4BEF-93CB-9B84EC8140CC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE55DE74-AD25-4903-A805-21B89711CD95} - System32\Tasks\{2242EB69-A689-4618-9099-10F0D4E3B82D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DF826B9A-8373-4C8E-A07F-2FAB3185E75D} - System32\Tasks\{6FC51F55-988F-4331-A1B0-65A96EB62714} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E4833643-F149-457D-AFCD-BA48415A1206} - System32\Tasks\{144107FA-5F7C-4BB0-9F95-B7ECA0B4DEE8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E5EF0172-FEE5-4F97-B88B-78AC1E18E87D} - System32\Tasks\{61D0D500-1D02-4996-A37E-DBA7F63BE6E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E9A69FDD-7BE3-468C-AE96-DB50607E96FE} - System32\Tasks\{BDA707CE-834C-4A94-86F9-F9749AE6B781} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EBF0F9E0-9821-4F14-8AA5-38328D6E49BE} - System32\Tasks\{117BBBE4-1DBB-43D8-BA67-664D257D7F9C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EE82A3CE-7120-4B5A-A2E5-F1D232C555A5} - System32\Tasks\{EB4A9BC1-47FE-499A-9C73-089DD52B2643} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EF2C589A-B0FA-4C22-A575-DCC607F77D88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {F0EA9897-CE27-4ED3-AA53-FB3CD04424CE} - System32\Tasks\{2169BF42-9ECB-43CF-BE05-FE4B064FCE5E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F1012CC3-D7A6-4CF3-B5F9-F8731FFBF808} - System32\Tasks\{3EDA1107-F837-401F-9A40-D46329686257} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2133E5A-1F74-4F10-9993-D7D8FD1E275C} - System32\Tasks\{B26156AC-42BA-4CD6-9226-58F972A0D2EB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2C8E8F1-2095-4F71-9865-B513AE503958} - System32\Tasks\{2B418A9B-6435-425E-8D19-CDCA97825756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6876887-975A-4258-BB79-53ED210D854A} - System32\Tasks\{C7ED4D7B-6D5C-46D6-B453-FB25EBB8F5EA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6E394A1-4251-439A-AAA9-C04FDF0B9FC9} - System32\Tasks\{E4E3C51A-D5A5-4BCD-8F11-E2F90DE9C18A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F8AD349C-0D68-4B56-8D4F-0EAEE68640CB} - System32\Tasks\{F683AFB7-3C9B-4CDD-B960-871994415F6D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FAC9C308-C8DF-4F1D-AFEC-A67A9882753A} - System32\Tasks\{405A6984-3687-41A1-AE20-DF3030ADF9E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FCF3F52C-A0F4-4209-9010-10B7D5E57387} - System32\Tasks\{55937D5C-6ED0-43E9-B4A6-02B26F9CBC15} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FE5BE871-9E40-4BD5-A611-C48789CB0FEB} - System32\Tasks\{2DD86116-6A4F-4CFF-8F37-543E331203DF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 4007.05 MB
Available physical RAM: 1895.97 MB
Total Pagefile: 8012.29 MB
Available Pagefile: 5674.8 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:404.66 GB) (Free:227.91 GB) NTFS (Disk=0 Partition=2)
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:29.93 GB) NTFS (Disk=0 Partition=3)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=405 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
|
|
12.08.2013, 15:44
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=94874C8093361CD6
BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
CHR HomePage: http://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6
CHR RestoreOnStartup: "http://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6"]},"tabs":{"use_vertical_tabs"
CHR Extension: (SweetIM for Facebook) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0
CHR Extension: (Wajam) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0
C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
C:\Users\Nelli\AppData\Local\Wajam\Chrome\wajam.crx
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\delta.xml
C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\sweetim.xml
C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
C:\Program Files (x86)\BabylonToolbar
C:\Program Files (x86)\Wajam
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
12.08.2013, 16:02
| #5 |
| | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Fixlog.txt Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-08-2013 02
Ran by Nelli at 2013-08-12 17:01:14 Run:1
Running from C:\Users\Nelli\Desktop
Boot Mode: Normal
==============================================
C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk => Moved successfully.
C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key not found.
HKCR\Wow6432Node\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} => Key not found.
HKCR\Wow6432Node\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} => Key not found.
CHR HomePage: hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6 ==> The Chrome "Settings" can be used to fix the entry.
CHR RestoreOnStartup: "hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6"]},"tabs":{"use_vertical_tabs" ==> The Chrome "Settings" can be used to fix the entry.
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn directory not found.
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp directory not found.
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp => Moved successfully.
"C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}" => File/Directory not found.
"C:\Users\Nelli\AppData\Local\Wajam\Chrome\wajam.crx" => File/Directory not found.
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx => Moved successfully.
"C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\delta.xml" => File/Directory not found.
"C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\sweetim.xml" => File/Directory not found.
"C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml" => File/Directory not found.
"C:\Program Files (x86)\BabylonToolbar" => File/Directory not found.
"C:\Program Files (x86)\Wajam" => File/Directory not found.
==== End of Fixlog ====
|
|
12.08.2013, 21:58
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Ok, bitte ein frisches Log mit FRST machen
__________________ --> Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox |
|
12.08.2013, 22:07
| #7 |
| | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-08-2013 02
Ran by Nelli (administrator) on 12-08-2013 23:05:21
Running from C:\Users\Nelli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
( ) C:\Windows\system32\lxczcoms.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
( ) C:\Windows\system32\lxeccoms.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Dropbox, Inc.) C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10365952 2011-05-19] (Intel Corporation)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.)
HKLM\...\Run: [lxecmon.exe] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] ()
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
MountPoints2: {0a39669c-ba41-11e1-a621-4c8093361cd9} - F:\iStudio.exe
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-31] (CyberLink Corp.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [684024 2012-10-17] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [x]
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: youtubeunblocker - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{7F23E3F4-F72E-4f4f-8761-854C8942708F}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
Chrome:
=======
CHR RestoreOnStartup: "hxxp://www.google.com/favicon.ico"
CHR HKLM-x32\...\Chrome\Extension: [ibnmbpihhamedhophbnjjpidokcknoid] - C:\Program Files (x86)\AP Suggestor\APSuggestor.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] ()
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [1616048 2013-07-29] (AVG Secure Search)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] ()
==================== Drivers (Whitelisted) ====================
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-12 16:05 - 2013-08-12 16:05 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Nelli\Desktop\JRT.exe
2013-08-12 16:03 - 2013-08-12 19:58 - 00000000 ____D C:\Users\Nelli\Desktop\bannersdontwork_problem
2013-08-12 15:54 - 2013-08-12 15:55 - 00032985 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:54 - 2013-08-12 15:55 - 00000121 _____ C:\Windows\DeleteOnReboot.bat
2013-08-12 15:54 - 2013-08-12 15:54 - 00000333 _____ C:\AdwCleaner[S2].txt
2013-08-12 15:27 - 2013-08-12 15:27 - 00000369 _____ C:\AdwCleaner[S1].txt
2013-08-12 13:41 - 2013-08-12 13:41 - 00377856 _____ C:\Users\Nelli\Desktop\gmer_2.1.19163.exe
2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe
==================== One Month Modified Files and Folders =======
2013-08-12 22:49 - 2012-03-20 01:53 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-12 22:38 - 2012-04-03 22:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-12 19:58 - 2013-08-12 16:03 - 00000000 ____D C:\Users\Nelli\Desktop\bannersdontwork_problem
2013-08-12 19:58 - 2013-01-28 20:39 - 00000000 ____D C:\Users\Nelli\Documents\Finanzen
2013-08-12 17:01 - 2012-03-20 00:59 - 00000000 ___RD C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-12 16:06 - 2013-08-12 16:06 - 00000000 ____D C:\Windows\ERUNT
2013-08-12 16:06 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-12 16:06 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-12 16:05 - 2013-08-12 16:05 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Nelli\Desktop\JRT.exe
2013-08-12 16:04 - 2011-11-04 03:51 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-08-12 16:04 - 2011-11-04 03:51 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-08-12 16:04 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-12 16:03 - 2012-03-20 01:51 - 01975458 _____ C:\Windows\WindowsUpdate.log
2013-08-12 16:00 - 2012-10-09 23:21 - 00000000 ___RD C:\Users\Nelli\Dropbox
2013-08-12 16:00 - 2012-10-09 23:13 - 00000000 ____D C:\Users\Nelli\AppData\Roaming\Dropbox
2013-08-12 16:00 - 2012-03-20 03:34 - 00000000 ____D C:\Users\Nelli\Documents\Youcam
2013-08-12 15:59 - 2013-05-04 18:48 - 00012970 _____ C:\ProgramData\lxecscan.log
2013-08-12 15:58 - 2013-06-07 22:00 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-08-12 15:58 - 2012-03-20 01:53 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-12 15:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-12 15:58 - 2009-07-14 06:51 - 00083713 _____ C:\Windows\setupact.log
2013-08-12 15:55 - 2013-08-12 15:54 - 00032985 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:55 - 2013-08-12 15:54 - 00000121 _____ C:\Windows\DeleteOnReboot.bat
2013-08-12 15:54 - 2013-08-12 15:54 - 00000333 _____ C:\AdwCleaner[S2].txt
2013-08-12 15:27 - 2013-08-12 15:27 - 00000369 _____ C:\AdwCleaner[S1].txt
2013-08-12 13:41 - 2013-08-12 13:41 - 00377856 _____ C:\Users\Nelli\Desktop\gmer_2.1.19163.exe
2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:37 - 2012-03-20 00:59 - 00000000 ____D C:\Users\Nelli
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe
2013-08-11 11:29 - 2012-07-07 14:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-04 16:51 - 2012-03-20 03:31 - 00000000 ____D C:\Users\Nelli\Documents\Reisen
2013-08-04 15:19 - 2013-01-06 13:24 - 00000000 ____D C:\Program Files (x86)\TVPlayerClassic
2013-08-04 15:14 - 2012-03-20 03:30 - 00000000 ____D C:\Users\Nelli\Documents\Groupon
2013-07-29 22:28 - 2013-06-28 18:38 - 00003717 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-07-29 22:26 - 2012-09-14 13:36 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-07-21 18:48 - 2012-03-20 01:10 - 00000000 ____D C:\Users\Nelli\AppData\Local\Adobe
2013-07-21 18:46 - 2012-04-03 22:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-21 18:45 - 2012-04-03 22:44 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-21 18:45 - 2011-11-07 18:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-15 23:44 - 2012-03-20 01:53 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-15 23:44 - 2012-03-20 01:53 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-15 18:37 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-12 10:48
==================== End Of Log ============================
Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2013 02
Ran by Nelli at 2013-08-12 23:05:43
Running from C:\Users\Nelli\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958) (x32)
7-PDF Split & Merge Version 2.0.2 (Build 234) (x32 Version: 7-PDF Split & Merge - Version 2.0.2 (Build 234))
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621)
Adobe AIR (x32 Version: 3.7.0.1860)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096)
AMI VR-pulse OS Switcher (Version: 1.1)
Ashampoo Burning Studio (x32 Version: 10.0.10)
Ashampoo Photo Commander (x32 Version: 9.2.0)
Ashampoo Photo Optimizer (x32 Version: 4.0.0)
Ashampoo Snap (x32 Version: 4.3.0)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.35)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229)
CyberLink MediaShow (x32 Version: 5.1.2414)
CyberLink PhotoNow (x32 Version: 1.1.7717)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDirector (Version: 9.0.0.3419a)
CyberLink PowerDirector (x32 Version: 9.0.0.3419a)
CyberLink PowerDVD 10 (x32 Version: 10.0.3510.02)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerProducer (x32 Version: 5.0.2.3503)
CyberLink WaveEditor (x32 Version: 1.0.1.3320)
CyberLink YouCam 5 (x32 Version: 5.0.1108)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.4)
Dropbox (HKCU Version: 2.0.22)
exant HD Audio (Version: 8.54.14.50)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free Studio version 2013 (x32 Version: 6.1.1.430)
Free WMA to MP3 Converter 1.16 (x32)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 28.0.1500.95)
Google Drive (x32 Version: 1.11.4865.2530)
Google Update Helper (x32 Version: 1.3.21.153)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2538)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.2.0.0587)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.1000)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002)
Intel(R) WiDi (x32 Version: 2.2.14.0)
Intel(R) Wireless Display
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 29 (64-bit) (Version: 6.0.290)
Java(TM) 6 Update 29 (x32 Version: 6.0.290)
JDownloader 0.9 (x32 Version: 0.9)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
Lexmark 1200 Series
Lexmark Pro800-Pro900 Series
Lexmark Symbolleiste (x32 Version: 4.3.37.0)
Lexmark Tools for Office (x32 Version: 1.29.0.0)
MediaConverter 1.3.1 (x32 Version: 1.3.1)
Medion Home Cinema (x32 Version: 8.0.3216)
Memeo Instant Backup (x32 Version: 4.60.0.7943)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mathematics (64-Bit) (Version: 4.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
myMugle (x32 Version: 3.0.0.0)
NVIDIA Control Panel 285.64 (Version: 285.64)
NVIDIA Graphics Driver 285.64 (Version: 285.64)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA Optimus 1.5.20 (Version: 1.5.20)
NVIDIA PhysX (x32 Version: 9.10.0513)
NVIDIA Update Components (Version: 1.5.20)
PCSUITE SHREDDER (x32)
PDF Architect (x32 Version: 1.0.41.8362)
PDFCreator (x32 Version: 1.7.0)
PHotkey (x32 Version: 1.00.0045)
PhotoResampling 9.2 (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0)
Samsung Kies (x32 Version: 2.3.3.12085_7)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)
Serif PhotoPlus 11 (x32 Version: 11.1.1.019)
Skype™ 6.1 (x32 Version: 6.1.129)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Synaptics Pointing Device Driver (Version: 15.3.27.1)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.1 (x32 Version: 2.0.1)
watchmi (x32 Version: 2.7.0)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
==================== Restore Points =========================
11-07-2013 09:14:34 Geplanter Prüfpunkt
12-07-2013 00:54:33 Windows Update
19-07-2013 18:34:57 Geplanter Prüfpunkt
03-08-2013 16:29:07 Geplanter Prüfpunkt
10-08-2013 20:08:39 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {02768EAD-0A5B-4629-84CD-71D383ACCE70} - System32\Tasks\{F82055D1-A3BD-4ACC-8790-4F0F84C7186B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {06B56F0D-905A-472F-8CA7-0E10D0D8CB0B} - System32\Tasks\{B413301B-7E61-491F-AB70-0F06C48FF1F3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {09689C71-147A-4BAB-862C-ED71277E8876} - System32\Tasks\{78C7BB73-D8DB-4052-8B48-91992D96FB8D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0A5A6A4B-C212-472A-A278-FD4FDFDEA012} - System32\Tasks\{EC07800D-F02E-4331-A236-18C72B9B6C7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0AD4613E-1EEC-48C4-831A-4EC3C707A665} - System32\Tasks\{46910F05-7308-40E6-A19C-8A16284E9387} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0BF15BDD-1C9F-4AB6-82C6-12870DA2E5A2} - System32\Tasks\{B4687708-B3B0-49DC-B098-CA6764C1B064} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {18576D76-F893-42A2-B4A0-DB3DF7C2390D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {1A810642-94FF-46AB-B0AA-EF080852C0C4} - System32\Tasks\{9D4F33AC-43A7-4E5D-B3F1-FA2BC8B05D6F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1C0B7614-4256-4C5C-AC22-1BC640FD6143} - System32\Tasks\{7FD67CCD-D320-40C9-B20D-9DAD504E92DC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1F3CC8FC-2C29-4C4C-AD85-79ECEB3207E3} - System32\Tasks\{EBC0107A-27E6-4456-9980-3883F513495F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {21AA544D-2519-4549-A2B7-C5D62D4376FD} - System32\Tasks\{945D7430-8F26-4F0B-8DB4-54A54B4F6616} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2205DA87-188E-4C43-AFC3-3FFE83E24853} - System32\Tasks\{61908B0F-E2EE-4CCC-A53F-0F6FEB52B308} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {23B03E71-7D6C-4488-86A6-ACC296B6F899} - System32\Tasks\{C3C31BB9-89AC-4AB3-9D9E-AF1DBC3257DA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {24C95FA5-ABFD-430C-8076-BABCC3AA830B} - System32\Tasks\{B9799D49-C6B5-4081-978A-394DB9DAB28E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {272F7FA2-9B20-4B92-B2ED-158BC9F6AC9F} - System32\Tasks\{C75FA60B-CD2F-4CC1-91E0-C15C02BF7A19} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {27DC4101-35F8-4B53-80A2-059E80F94143} - System32\Tasks\{006F757E-36E5-419F-90B0-45EC7EED7D0F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {28A0A582-3928-4BBC-A953-348EBA69D8BD} - System32\Tasks\{9092C394-C4DB-44A3-92E4-B579967AC05F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A8B80A2-90CB-47D4-B156-1146475E9D7B} - System32\Tasks\{91DB47EE-733D-48A8-9C8B-B401D9BB4EE1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A9D1B21-C10E-43A3-849C-F72C0533BD08} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1675067217-2774866892-2821489468-1002 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {2CC88C72-E06E-4361-B748-37BE31CB527E} - System32\Tasks\{AA0CD588-455E-4E6A-8C3D-E5098B4BAABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {311EA50B-C17A-4385-BE5C-70511E633FB3} - System32\Tasks\{D17A4C39-5BEE-4D2C-9AD7-08607A220ED7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {312DDE74-BCA1-4E77-9553-DA9EA37E0642} - System32\Tasks\{D3B020AB-8F78-44B9-9D90-B74478DD7603} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {32EE8272-E801-4C64-8681-6C14D1208219} - System32\Tasks\{C42F1D88-AD03-4239-942B-617F4B8A86F6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3A9422D1-EA6A-435A-81B8-CC8547E82516} - System32\Tasks\{7925F03B-B182-4652-893E-7EFC67C66D0C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3ACDCF49-9DDD-4647-A0F0-B4E3163321B5} - System32\Tasks\{035A4774-F011-4751-9150-B07A48A9B493} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3E712F2E-A704-4276-A4DB-9658D18C2907} - System32\Tasks\{3E4EA85A-3882-44A8-A33E-9A147CCAB5EF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3EFABCFE-E1B1-4515-AD36-ACE1A6FB4620} - System32\Tasks\{B11360C8-0018-4E8E-8CA2-C658FCFFA079} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {407075C5-0EA2-45FB-8590-A903FE8A7025} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {40D9E60B-09B8-4044-8984-162DBADFEF91} - System32\Tasks\{AB724718-AF72-42B7-996F-D1B9C5F0BDF6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {42577CA5-7636-4669-81DF-B321CD5EA347} - System32\Tasks\{6BD0E276-38C8-477B-92AE-F6AD7EE66FD6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {438B387E-E1B9-4D52-B8EA-D8C2F9722A45} - System32\Tasks\{494EF7DF-7A0C-4F64-B0E3-E2B39D52FE8A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {43B3793E-591F-41AA-BC94-67B06021721F} - System32\Tasks\{34199AA6-F406-4B72-83CD-63D3FAA8968C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4459DEC7-B2FC-4F6A-8F1E-B350B32E4865} - System32\Tasks\{88A1D263-182D-45F8-BA93-B7B354D7EDC6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44CE8637-1C88-4F4D-8872-E923315A3528} - System32\Tasks\{C93BA26F-6F1D-491E-90CB-4402A7E49CDF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44FCEA04-B958-47E7-8F26-DBC14186FE07} - System32\Tasks\{C88C6674-2064-48E9-A539-4D0E7768B155} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4BB2E9BA-B294-4340-BE67-3E5B035ABF58} - System32\Tasks\{049AC1F4-79AF-4B48-8C67-30FDFAF46A7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4C10EF4B-53B0-4BD9-967F-E227B758267D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {4CB3BF8A-C7A9-48F2-A0C6-EF8F03AA3A97} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-21] (Adobe Systems Incorporated)
Task: {4E05AC37-AD3B-4DCA-9938-064634CCDB5E} - System32\Tasks\{F7A5DBCD-9963-4859-851A-F87B9E301575} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {50946178-A983-4339-821E-4A42C17F03BC} - System32\Tasks\{05A49616-96EF-4A5A-80E8-C5A577F77D62} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {51562EEF-1402-4F44-8615-BE8A2762EC3F} - System32\Tasks\{D9942290-9314-42DA-A61D-399D29CD3D69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {53500B94-15DA-4B95-9407-47F1FAA629F4} - System32\Tasks\{98F0B528-505E-42A7-8C7C-3025485402A9} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {55CAB32B-1C5D-4329-A309-C286A565952C} - System32\Tasks\{A289397E-BE87-4253-BAEB-4D4BF5217A5C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {574A2071-6DCE-43C8-9693-430110F10F9B} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2011-11-08] (CyberLink Corp.)
Task: {5791845C-23E9-4745-8CF2-6B03ECFC7907} - System32\Tasks\{16BCEE64-DCBC-46C8-8F90-238FFE2DD58D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {57D60F68-13EC-49EA-8E61-CAA56B6217F5} - System32\Tasks\{B8AEA034-38D3-4069-8899-F8A844B8E5FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5C05A6A8-35F3-4333-8443-7F862A35F648} - System32\Tasks\{070CD9E0-4E19-4C44-B6FF-A87EE2390C96} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5DF49DD8-7CF4-49F6-9F96-161EA81D92D0} - System32\Tasks\{45DFC4BD-C7C1-4F84-B532-88B15A04FFEB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5F06F2BF-8A87-4DAC-8FA0-A0324156BEA8} - System32\Tasks\{493B437D-D4FC-4D11-94A6-B9CE68A51F83} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {60C30D26-294F-4F6E-B20C-C32473194C4E} - System32\Tasks\{098370C0-661D-40AF-A1BB-7B8F500584FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {628CFC9C-E793-490D-B59D-A1FA5A8FB740} - System32\Tasks\{4B859EF0-0E68-4DA8-B620-5051C4184ABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6825859F-017C-4AAE-BAB5-521AC5CAC494} - System32\Tasks\{D97A6A08-5035-4265-99DC-85CB55173FC7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {68FFB98A-6E8F-44C0-A018-67B16A40A585} - System32\Tasks\{C489461A-25A1-4B70-A539-FE04D480C24D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {69E73F52-0A73-4ABA-AD79-554CCDFA29A2} - System32\Tasks\{7CBAFB04-F825-4A4A-81D4-7A00A50C12B2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6A5D1C73-2B48-4BD4-A1E7-8058C236D8C1} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe No File
Task: {6AC1CA82-7C9D-4037-A152-041144DF9B47} - System32\Tasks\{58DE006A-AF1E-414D-8363-EC887B8F1381} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6CA65543-C233-489E-8A27-3A930D5C69F9} - System32\Tasks\{4DE65F80-13A5-499B-9C28-5AB3C296B134} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6F4C4F41-BC39-4D3B-863F-5E67BFF6C043} - System32\Tasks\{7D7B114B-8FEA-4B9D-A650-1212C2C4C36C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {71F8282C-CC8A-4BDA-94BA-6E33A9D795DB} - System32\Tasks\{6C5B3F7F-1854-4010-BD4A-E445F027D4C1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78554F41-AD30-4C5F-8551-FB0C9A941E75} - System32\Tasks\{F5D62368-58BE-46C8-A1C9-F57031F5F917} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78746FFC-FA28-406A-AF75-634BB06FC84C} - System32\Tasks\{6BD091D8-83CD-4156-B40F-C18521D35909} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {787A64C0-A527-4E0E-A19C-688E448638E4} - System32\Tasks\{3F5D0ADB-938F-4B46-90AF-879956E395D1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E4BF543-B552-439F-90D0-FEA6DA7FBAAC} - System32\Tasks\{33B2D291-63B9-40D5-AA85-5C2B79135A80} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E68B58C-063B-4CF1-AE2F-B9B841AEFDF5} - System32\Tasks\{01D99FEF-0C32-4BBB-B16E-B2C1EA30E606} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8045CAB2-5FC0-4C21-8C43-FF2B342EFBEB} - System32\Tasks\{5BB599C0-594D-46A0-8901-A29C85F7C9F7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {81009C75-4224-4A73-8541-3E67B27F1AA9} - System32\Tasks\{924C21F0-D164-486D-9559-12F76934F729} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {82DC79D7-02DA-4F29-B5EB-35722A66E218} - System32\Tasks\{F96005EF-5C81-43FB-AA97-16DD2510140F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {85EC8F51-3B31-42CD-BB61-0626D7AC81C9} - System32\Tasks\{1DEA6899-866C-42C0-BA48-A7F62CD73481} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8A3D53E1-F989-46A5-AD17-34E89FC291FB} - System32\Tasks\{FC7DB2E6-E8F8-4E80-9B44-1738D897BA42} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8CC32081-E95E-423E-A91C-701B2FEAC397} - System32\Tasks\{750E300E-E6BB-497A-A08D-72C7C59F50A2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8D781DAD-1AF4-400D-BB58-C0312F480346} - System32\Tasks\{07066D58-5BE4-46BC-A56B-4C2F6B634186} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8F47DA1E-8BA1-4301-B6D4-3B987945DD3F} - System32\Tasks\{5FA650BA-94A3-4D1C-B3A9-A2B43183BD16} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {91DC09F6-7390-49E5-BA52-E9FA7F0DC506} - System32\Tasks\{162E5266-1231-4806-8EDB-98B5D9DBBDA6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92CCB63E-F8BA-4313-B0EE-52921C7BE98E} - System32\Tasks\{C922B4EA-B3D9-4343-A4C1-034989C81F97} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92FA0992-88F0-4799-981F-669385862AC3} - System32\Tasks\{FA3D4DCC-F714-4EFB-B7D0-78D0656DC906} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {97A61783-DBB9-438D-BE1D-2093260B47E1} - System32\Tasks\{BF54C924-BE15-4763-A1DF-F310B8752F23} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {99F815AF-B0FA-477C-A333-E3E62FB5DCC4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {9DF09107-36B8-4524-85E1-523F6CD621FF} - System32\Tasks\{AB69E0D5-7737-495F-B1A9-72D6BF4E353B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {9F0E25E9-21A3-4707-BF4A-9B29639C97E6} - System32\Tasks\{1112BAE9-62A8-4CF9-8094-DFDFB83446C5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A005C9AF-E5A6-4EAE-BB05-3F4AACB214B3} - System32\Tasks\{08888828-6E28-4AC6-A91F-A61FBD44E160} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A26CB0C0-E3E4-4BFB-831B-A14B6014F197} - System32\Tasks\{CF47BA78-DB59-4E21-A1E2-74CBEB761E63} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A89E1836-27BC-4255-A8AA-C498108C0040} - System32\Tasks\{1D34C46E-BC5B-4DCA-82A1-9C34E0FAED69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A9C2AE8F-A97B-4E2C-A49B-3417A694D31F} - System32\Tasks\{218203D4-8378-4032-B560-6560763670C3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AA7D99FA-5AEB-44F8-9E97-EB3C48A304A3} - System32\Tasks\{0E5CE861-53EC-45B6-99EF-EB65E4262B37} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AAC0714F-1612-46CE-A0C2-280AF398B507} - System32\Tasks\{8941DFEF-44EE-460B-BEB6-F0553EB49ADB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AF6C4E6E-963F-452B-A036-BC64A8034679} - System32\Tasks\{A3E7DC47-10D2-481B-936C-459D7695D41D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B1757880-04EE-4FE6-94AE-76572C5BE47A} - System32\Tasks\{659FCD88-92B6-4341-8F64-2766343C4732} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B4FA1AFD-D5C5-444E-9995-B6CAA843A579} - System32\Tasks\{453185F3-88EB-407A-AAA2-0E1FF1482B9E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B59A9CDE-01CF-4DE5-80BD-DF0A71857655} - System32\Tasks\{791C72F6-D561-4A65-89A5-BA4CD9AAC567} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B5E5C4EC-7695-4631-9F7E-A284C7552576} - System32\Tasks\{98CD5596-30F2-40A3-B8DE-2F0288B28105} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BA711B9A-5D13-4F6C-9C69-1DF06977A10E} - System32\Tasks\{A18AF419-F34C-4F3F-8998-60250F41882C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BB48FF8C-8E6D-409F-87B5-C37D76DD5D87} - System32\Tasks\SpottyFiles Update => C:\Program Files (x86)\SpottyFiles\SpottyFilesUpdater.exe No File
Task: {BE42A363-7FD5-4419-88A5-E107F7B1C863} - System32\Tasks\{66C6CB7E-9106-4074-B0E5-DFE8EDB28A39} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BE8A510E-3C89-4164-A07E-BCDAB13E88C2} - System32\Tasks\{70DBCCC7-1B3C-4A5B-A48D-28C6396446B5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BF5EB366-6E53-4AB7-8A38-5AE5B6C0C891} - System32\Tasks\{41BE99BE-1315-4F2F-98CD-B6B7F4837C26} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C155F411-1E6C-4245-BAD7-C4EBCFB9C119} - System32\Tasks\{11BCC65F-16A5-42E8-84A9-D3599A86460C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C468C046-27D0-44FF-8430-A40EAC93EB05} - System32\Tasks\{204BBF9C-74CB-443C-AFEE-0BEDD8242179} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C6D2D9EC-852D-4ED6-9DB0-489A3CAFC498} - System32\Tasks\{0ED560A2-23D7-400E-841A-4FC09DCCA6ED} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA193016-E6C4-440D-B046-427617FFC9D2} - System32\Tasks\{43720F8B-2711-4EEB-BC55-D6C456ABC4AA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA73936E-7392-44ED-8E2B-E662A06761A3} - System32\Tasks\{6A40D400-7BEB-4C5D-A77B-6F94E84DEBEF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CAD0864C-FF67-4B31-A88C-29D7BC615239} - System32\Tasks\{46A241A2-3DC2-4BAC-8C98-589F60EB4623} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCAFA911-BA10-484E-A4CD-D46688FB3FB5} - System32\Tasks\{2A1125D4-45C2-4588-B32C-F215AB4F4DF5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCED0615-88D5-4254-9DF6-9F2F405416ED} - System32\Tasks\{7C063A08-FD21-45DE-BE60-72102FC5BBBD} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D141B09E-6FF9-47A5-8A57-DB3FFFAB11FD} - System32\Tasks\{A3E73D14-AD40-4C50-9436-5A2110721DF8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D1830F60-8FB6-4440-AF70-3F127D6E7835} - System32\Tasks\{5FB3A7CA-47E0-46E3-9691-96960DBDAC33} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D47E5AED-F7A8-494E-9A3E-DF6E0251BA8C} - System32\Tasks\{C7C7B320-85AB-4DD2-8CFD-5AA5C0F1A3F0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DC456B82-0EE7-4913-A142-70571102E821} - System32\Tasks\{02653CAE-1DF0-458D-954C-290074CA2756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE364A4F-C786-4C27-8781-D2CE7897F8A3} - System32\Tasks\{407F5116-C48F-4BEF-93CB-9B84EC8140CC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE55DE74-AD25-4903-A805-21B89711CD95} - System32\Tasks\{2242EB69-A689-4618-9099-10F0D4E3B82D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DF826B9A-8373-4C8E-A07F-2FAB3185E75D} - System32\Tasks\{6FC51F55-988F-4331-A1B0-65A96EB62714} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E4833643-F149-457D-AFCD-BA48415A1206} - System32\Tasks\{144107FA-5F7C-4BB0-9F95-B7ECA0B4DEE8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E5EF0172-FEE5-4F97-B88B-78AC1E18E87D} - System32\Tasks\{61D0D500-1D02-4996-A37E-DBA7F63BE6E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E9A69FDD-7BE3-468C-AE96-DB50607E96FE} - System32\Tasks\{BDA707CE-834C-4A94-86F9-F9749AE6B781} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EBF0F9E0-9821-4F14-8AA5-38328D6E49BE} - System32\Tasks\{117BBBE4-1DBB-43D8-BA67-664D257D7F9C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EE82A3CE-7120-4B5A-A2E5-F1D232C555A5} - System32\Tasks\{EB4A9BC1-47FE-499A-9C73-089DD52B2643} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EF2C589A-B0FA-4C22-A575-DCC607F77D88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {F0EA9897-CE27-4ED3-AA53-FB3CD04424CE} - System32\Tasks\{2169BF42-9ECB-43CF-BE05-FE4B064FCE5E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F1012CC3-D7A6-4CF3-B5F9-F8731FFBF808} - System32\Tasks\{3EDA1107-F837-401F-9A40-D46329686257} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2133E5A-1F74-4F10-9993-D7D8FD1E275C} - System32\Tasks\{B26156AC-42BA-4CD6-9226-58F972A0D2EB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2C8E8F1-2095-4F71-9865-B513AE503958} - System32\Tasks\{2B418A9B-6435-425E-8D19-CDCA97825756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6876887-975A-4258-BB79-53ED210D854A} - System32\Tasks\{C7ED4D7B-6D5C-46D6-B453-FB25EBB8F5EA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6E394A1-4251-439A-AAA9-C04FDF0B9FC9} - System32\Tasks\{E4E3C51A-D5A5-4BCD-8F11-E2F90DE9C18A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F8AD349C-0D68-4B56-8D4F-0EAEE68640CB} - System32\Tasks\{F683AFB7-3C9B-4CDD-B960-871994415F6D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FAC9C308-C8DF-4F1D-AFEC-A67A9882753A} - System32\Tasks\{405A6984-3687-41A1-AE20-DF3030ADF9E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FCF3F52C-A0F4-4209-9010-10B7D5E57387} - System32\Tasks\{55937D5C-6ED0-43E9-B4A6-02B26F9CBC15} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FE5BE871-9E40-4BD5-A611-C48789CB0FEB} - System32\Tasks\{2DD86116-6A4F-4CFF-8F37-543E331203DF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Faulty Device Manager Devices =============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 66%
Total physical RAM: 4007.05 MB
Available physical RAM: 1340.44 MB
Total Pagefile: 8012.29 MB
Available Pagefile: 5102.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:404.66 GB) (Free:227.51 GB) NTFS (Disk=0 Partition=2)
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:29.93 GB) NTFS (Disk=0 Partition=3)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=405 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
|
|
12.08.2013, 22:11
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM) Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2013, 06:37
| #9 |
| | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Hier schon mal der erste Step... mbam-log Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.12.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16635 Nelli :: NELLI-PC [Administrator] Schutz: Aktiviert 12.08.2013 23:30:17 mbam-log-2013-08-12 (23-30-17).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 252504 Laufzeit: 6 Minute(n), 26 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 6 C:\Users\Nelli\AppData\Local\Temp\BundleSweetIMSetup.exe (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nelli\AppData\Local\Temp\nsc84D5.tmp (PUP.Optional.Somoto) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nelli\AppData\Local\Temp\wajam_install.exe (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\$RECYCLE.BIN\S-1-5-21-1675067217-2774866892-2821489468-1002\$RWCKN84.exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nelli\AppData\Local\Temp\C2798ECC-BAB0-7891-AC4A-4CB2EDC70356\MyBabylonTB.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nelli\AppData\Local\Temp\is-B3LDF.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=29f1b3fce845d94fa6de0c689da1d64a
# engine=14752
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-13 01:02:37
# local_time=2013-08-13 03:02:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 2797260 153065629 0 0
# compatibility_mode=5893 16776574 100 94 2740645 127985607 0 0
# scanned=284628
# found=2
# cleaned=0
# scan_time=11205
sh=54183157469A030B362BB6D5D6E3B56315D6C0E8 ft=1 fh=93f79e2d0ef07e99 vn="Win32/HackTool.Gendel.A trojan" ac=I fn="C:\gendel32.exe"
sh=11445FCF304B2043FF37461C4F34F492EE5BB19C ft=1 fh=21ba350e23674168 vn="multiple threats" ac=I fn="C:\Users\Nelli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZEMU08MW\yontoosetup[1].exe"
|
|
13.08.2013, 08:36
| #10 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in FirefoxZitat:
Wenn die Datei schon ausgewertet sein sollte, bitte eine weitere Auswertung starten.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2013, 12:34
| #11 | |
| | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Hab es scannen lassen, hier das Ergebnis: Zitat:
|
|
13.08.2013, 13:44
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Scan mit SystemLook (x64) Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop. SystemLook (64 bit)
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2013, 15:31
| #13 |
| | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox SystemLook.txt Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 16:17 on 13/08/2013 by Nelli
Administrator - Elevation successful
========== filefind ==========
Searching for "*gendel32*"
C:\gendel32.exe --a---- 53248 bytes [18:20 01/06/2012] [22:00 19/12/2002] 35BC2808ED08326DAC79DC41CDF3D61C
C:\Windows\Prefetch\GENDEL32.EXE-BB48DCCB.pf --a---- 14744 bytes [11:29 13/08/2013] [11:29 13/08/2013] 6CF484088DD2219ABDD369CBDBD2FDFA
========== folderfind ==========
Searching for "*gendel32*"
No folders found.
========== regfind ==========
Searching for "gendel32"
No data found.
-= EOF =-
|
|
13.08.2013, 15:35
| #14 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in FirefoxZitat:
TFC - Temp File Cleaner Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.08.2013, 15:59
| #15 |
| | Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox Hallo Cosinus, die Datei ist gelöscht und den TFC habe ich ausführen lassen - zum Neustart wurde ich nicht aufgefordert. Wars das nun? |
|
| Themen zu Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox |
| 4d36e972-e325-11ce-bfc1-08002be10318, avg security toolbar, bannersdontwork, device driver, dvdvideosoft ltd., excel, farbar, farbar recovery scan tool, homepage, iminent toolbar, plug-in, problem, pup.bundleinstaller.dw, pup.optional.delta, pup.optional.opencandy, pup.optional.somoto, pup.optional.sweetim, pup.optional.wajam.a, secure search, services.exe, svchost.exe, vtoolbarupdater, win32/hacktool.gendel.a |
Linear-Darstellung
